Milan Broz
a4585423fd
Remove some gcc extra warnings (signed/unsigned problems etc).
2012-12-02 23:13:59 +01:00
Milan Broz
5aef0809d4
Add TCRYPT documentation,
2012-12-02 21:32:49 +01:00
Milan Broz
72c111bac4
Fix (stupid) crc32 keyfile endianess bug.
2012-12-01 14:32:01 +01:00
Milan Broz
ffb6ecc488
Add TCRYPT api test, fix some minor problems found.
2012-11-30 18:41:10 +01:00
Milan Broz
6123541d80
Add missing pbkdf check file.
2012-11-30 17:05:03 +01:00
Milan Broz
e510dd9c60
Add sys/types.h for loop wrapper (required on new systems).
2012-11-30 15:08:39 +01:00
Milan Broz
0461d9e822
Better tcrypt test options.
2012-11-30 15:03:01 +01:00
Milan Broz
4f7262aa96
And fix previous comment once more... :)
2012-11-30 13:52:03 +01:00
Milan Broz
eac953c6e4
Fix skcipher failure handling.
2012-11-30 13:37:14 +01:00
Milan Broz
d7fc953fa2
Handle kernel crypto api init failure better.
2012-11-29 18:01:02 +01:00
Milan Broz
21756a1969
TCRYPT: fix activation and hidden device offsets.
2012-11-27 17:13:53 +01:00
Milan Broz
17a8e85cb8
TCRYPT: add backup header option.
2012-11-26 13:15:08 +01:00
Milan Broz
98db3bc0bf
Fix blockwise read/write for end writes near end of device.
...
Ignore setpriority failure (will be remoced later anyway).
2012-11-25 22:57:32 +01:00
Milan Broz
46cf1c6ce0
TCRYPT: simplify code, support blowfish chains for header
2012-11-25 22:52:47 +01:00
Milan Broz
c81260b3c3
TCRYPT: add dump command
2012-11-23 17:10:57 +01:00
Milan Broz
8d69e19ac1
TCRYPT: support crypt_volume_key_get
2012-11-23 15:20:46 +01:00
Milan Broz
6ab93841e9
TCRYPT: show proper device in status for chained mode
2012-11-23 13:46:23 +01:00
Milan Broz
52cbbdaf38
TCRYPT: move all header handling into library.
...
Add warning about unsupported modes.
2012-11-23 13:01:43 +01:00
Milan Broz
0996a43dbb
TCRYPT: parse cipher chain on init.
2012-11-22 17:28:03 +01:00
Milan Broz
3faaa8b227
TCRYPT: support proper device removal
2012-11-22 14:19:43 +01:00
Milan Broz
911ffe81f0
TCRYPT: implement (most of) legacy modes support.
2012-11-19 21:25:57 +01:00
Milan Broz
ecf993834c
TCRYPT: support keyfiles
2012-11-19 21:25:26 +01:00
Milan Broz
3cbb43a73a
Add basic TCRYPT library.
2012-11-19 21:24:59 +01:00
Milan Broz
db97d3d8c8
Add simple cipher benchmarking.
2012-11-19 21:22:43 +01:00
Milan Broz
7199662fbb
Add kernel skcipher backend.
2012-11-19 21:21:40 +01:00
Milan Broz
a14a2137e7
Add CRC32 implementation.
2012-11-19 21:18:18 +01:00
Milan Broz
16ac703008
Move PBKDF2 into crypto backend wrapper.
...
Implement new KDF bechmark check.
Use internal openssl kdf (and prepare gcrypt one).
2012-11-19 21:17:55 +01:00
Milan Broz
89e09afdf6
Fix some problems found by Coverity static analysis.
2012-09-19 13:58:00 +02:00
Milan Broz
f45d4d0755
Add crypt_keyslot_area() API call.
...
Useful if you want to analyze/wipe area of disk used for keyslot
from external tool.
2012-09-11 11:59:06 +02:00
Milan Broz
29e4414c35
Fix luksHeaderBackup for v1.0 (very old) headers and add some basic test.
2012-08-30 15:39:30 +02:00
Milan Broz
1685aa5978
Proper handle error in device block get.
2012-08-28 13:30:17 +02:00
Milan Broz
6874f564c1
Remove unused includes.
2012-08-28 13:16:03 +02:00
Milan Broz
4882f70040
Replace round_up macro with function.
2012-08-28 13:11:02 +02:00
Milan Broz
1aca317c77
Move LUKS AF data sector alignment to AF helper function.
2012-08-27 16:52:19 +02:00
Milan Broz
af2730fe2a
Always zero memory in crypt_safe_alloc.
2012-08-27 16:28:00 +02:00
Milan Broz
a6d64d1d44
Use AF_split_size() to calculate split data size.
2012-08-27 15:26:22 +02:00
Milan Broz
d15dd89bb7
Get rid of confusing LUKS_PHDR_SIZE macro.
2012-08-27 14:45:21 +02:00
Dave Reisner
961682aa6b
lib/utils_crypt: optimize seek to keyfile-offset
...
Avoid using unbuffered reads when "seeking" to a keyfile offset. This is
abysmally slow when the key is hidden at the end of a large device.
Instead, try to actually call lseek, falling back on reading in chunks
of BUFSIZ bytes until the desired offset is reached.
Command line:
cryptsetup luksOpen /dev/vdc1 home \
--keyfile /dev/vdd --keyfile-size 4096 --keyfile-offset 123456789
Before:
real 0m25.589s
user 0m7.030s
sys 0m18.479s
After:
real 0m4.464s
user 0m4.253s
sys 0m0.157s
2012-08-27 13:10:00 +02:00
Milan Broz
2f37cfe569
Do not scan rotational flag for non-block devices / file images.
2012-08-27 12:42:15 +02:00
Milan Broz
1d5788f779
Set context for DM log for all DM backend entries.
...
Try to handle error if run as non-root user better.
2012-08-14 19:17:13 +02:00
Milan Broz
97224b072a
Add context to DM helpers.
...
(To be used later.)
2012-08-14 16:25:21 +02:00
Milan Broz
48332d248f
Remove debug line.
2012-08-13 17:16:37 +02:00
Milan Broz
07815c24cd
Print better error message if device is read-only etc.
2012-08-13 16:54:41 +02:00
Milan Broz
65f975655c
New device access backend.
...
Allocate loop device late (only when real block device needed).
Rework underlying device/file access functions.
Move all device (and ioctl) access to utils_device.c.
Allows using file where appropriate without allocation loop device.
2012-08-12 22:00:17 +02:00
Milan Broz
584d5b8d65
Fix library name for FIPS check.
2012-07-09 19:30:25 +02:00
Milan Broz
3532be48c7
Fix libcryptsetup.h docs for verity type.
2012-07-09 18:47:05 +02:00
Milan Broz
5f7309bfa0
Add some verity api test.
...
Fix set_data_device bug it uncovered.
Fix api-test for nonFIPS hash.
2012-07-09 18:09:51 +02:00
Milan Broz
4abfd38169
Remove open device debugging feature (no longer needed).
2012-06-26 12:55:14 +02:00
Milan Broz
b684fffdaf
Switch to use unit suffix for --reduce-device-size option.
2012-06-25 16:06:43 +02:00
Milan Broz
fb3b62ca02
Add --device-size option for reencryption tool.
2012-06-25 15:34:11 +02:00
