Milan Broz
92f14d28d1
Fix null dereference in previous commit.
2018-02-14 14:19:48 +01:00
Milan Broz
954214e48c
Use integrity key during integritysetup format.
...
Kernel could reject HMAC without a key during format, we must set a key here as well.
Because there is no data area (device size is 8 sectors), it is actually never used,
so we can use zeroed key here.
The real HMAC key is used later during device activation with the real size.
2018-02-13 14:41:36 +01:00
Milan Broz
1fe014dbae
Update copyright year.
2018-01-20 17:55:21 +01:00
Milan Broz
3f186c009c
Auth tag size and iv size can depend on auth cipher.
...
Some experimental ciphers will use different IV sizes,
add parameter to check it in future (unused for now).
2018-01-05 16:38:58 +01:00
Milan Broz
9f2727bb77
Add libLUKS2.
2017-09-24 19:50:12 +02:00
Milan Broz
3435f9cb2c
Use only crypt_get_integrity_info in API.
...
Some other functions remain internal only.
Signed-off-by: Milan Broz <gmazyland@gmail.com >
2017-08-06 21:34:01 +02:00
Milan Broz
3efa00d59a
Revert deferred flag for keyslots and temp devices.
...
It could cause races later, replacing with error device is enough.
2017-06-24 09:57:22 +02:00
Milan Broz
32d5e59ab6
Implement deferred removal of device.
...
This can be used in some automated systems and allows device
to be removed after the last user mapping closes it.
2017-06-23 14:41:54 +02:00
Milan Broz
34bf809e51
Use device alignment wrapper.
...
And cache the value to not call ioctl on every block read/write.
2017-06-08 09:30:53 +02:00
Milan Broz
6fc383ade1
Fix detection of target presence.
2017-06-01 12:25:39 +02:00
Milan Broz
7e06265568
Parse integrity mode directly.
2017-05-29 10:40:06 +02:00
Milan Broz
5a3e3339e0
Make integrity param optional.
2017-05-28 22:47:05 +02:00
Milan Broz
0bb7098fd8
Add integritysetup command line tool for the dm-integrity standalone setting.
...
The dm-integrity target is intended to be used for authenticated
encryption through LUKS and dm-crypt.
It can be used in standalone as well; for this use case there
is a simple configuration utility called integritysetup
(similar to veritysetup to dm-verity).
2017-05-28 09:22:17 +02:00
