Milan Broz
8c5760fee7
Fix API test for FIPS mode.
2017-04-21 09:32:13 +02:00
Milan Broz
3c2135b36b
Fix luksFormat if running in FIPS mode on recent kernel.
...
Recently introduced check for weak keys for XTS mode makes
zeroed key for algorithm check unusable.
Use random key for the test instead.
2017-04-21 08:22:29 +02:00
Milan Broz
aad597b987
Fix activation of verity device with superblock and FEC.
2017-04-20 09:10:18 +02:00
Milan Broz
5fdfc0b54a
Fix AF prototypes and move then to af.h.
2017-04-14 13:25:21 +02:00
Milan Broz
ef966bd261
Fix verity FEC block memory allocation.
...
Fixes corruption of memory when buffer is too small.
2017-04-14 12:31:44 +02:00
Milan Broz
54cb40fce7
Fix RS algorithm rewrite typo.
2017-04-05 16:29:26 +02:00
Milan Broz
c6a0048b9b
Add check for FEC support in kernel dm-verity.
2017-04-05 15:16:13 +02:00
Milan Broz
425e8b9495
Fix possible divide by zero in verity hash blocks calculation.
2017-04-05 14:35:52 +02:00
Milan Broz
82dd6c7fa2
Fix some compiler warnings.
2017-04-05 14:24:20 +02:00
Milan Broz
e4f1faa478
Restructure Reed-Solomon code for verity FEC and remove unneeded parts.
2017-04-05 13:34:26 +02:00
Milan Broz
c7907630f4
Remove some redundant header includes.
2017-04-05 12:03:30 +02:00
Milan Broz
e18a7400b4
Fix compiler warning.
2017-04-05 11:51:22 +02:00
Milan Broz
058831d88c
Remove verity FEC superblock support.
...
It seems to be never used anywhere.
2017-04-05 11:41:08 +02:00
Milan Broz
1da785cb77
Use common function for accessing FEC devices.
...
TODO: the device wrappet should hanbdle EINTR better...
2017-04-05 10:58:03 +02:00
Milan Broz
3a058a4f21
Remove local fec.h.
2017-04-05 08:29:03 +02:00
Milan Broz
3d6a589a04
Fix dm-verity max-size parameter.
2017-04-04 14:27:52 +02:00
Milan Broz
6c8b3686b4
Add FEC info to init_by_name.
...
And use it in veritysetup dump.
2017-04-03 13:55:20 +02:00
Milan Broz
fc0bef732b
Add FEC offset parameter for verity.
2017-04-03 12:34:50 +02:00
Milan Broz
e8eab081c5
Add code for activation wirh FEC device.
2017-04-03 10:21:37 +02:00
Milan Broz
00419c6c41
Introduce function to calculate verity hash device size.
2017-04-03 10:19:29 +02:00
Milan Broz
7307293c87
Use explicit 32bit value in API for FEC roots.
2017-04-03 10:15:44 +02:00
Milan Broz
912f5b8f5b
Do not write FEC superblock if no-superblock option is set.
2017-04-02 15:51:40 +02:00
Sami Tolvanen
c2cf33af24
WIP: Add support for verity FEC.
2017-04-01 21:23:10 +02:00
Milan Broz
eb59311136
Fix access to unaligned hidden TrueCrypt header.
...
On native 4k-sector device the old hidden header is not aligned
with hw sector size and derect-io access with SEEK_END fails.
Let's extend blockwise functions to support a negative offset
and use the same logic as normal unaligned writes.
Fixes problem mentioned in
https://gitlab.com/cryptsetup/cryptsetup/merge_requests/18
2017-03-27 12:04:31 +02:00
Milan Broz
fc42f878e9
Update README.md for 1.7.4.
2017-03-15 10:54:56 +01:00
Milan Broz
98368c4770
Update copyright years.
2017-03-12 13:17:15 +01:00
Milan Broz
c9da7f9f8c
Add 1.7.4. Release notes.
2017-03-12 13:01:05 +01:00
Milan Broz
e7f8727d2d
Fix some compiler warnings / wipe PIM properly.
2017-03-12 12:00:38 +01:00
Milan Broz
2657746451
Used LUKS1 compiled-in defaults also in Python wrapper.
2017-03-12 10:29:46 +01:00
Milan Broz
2701993dd6
Update po files.
2017-03-12 10:18:54 +01:00
Daniel Reichelt
9a798a766e
support PIM parameter for VeraCrypt compatible devices
...
This patch adds the --veracrypt-pim=INT and --veracrypt-query-pim command-
line parameters to support specification of or being queried for a custom
Personal Iteration Multiplier respectively. This affects the number of
iterations for key derivation from the entered password. The manpage is
also updated accordingly.
Fixes Issue #307 .
2017-03-02 09:11:23 +01:00
Bastien DHIVER
36419b25aa
Add hashMode parameter in CryptSetup_luksFormat()
2017-03-01 13:32:26 +01:00
Milan Broz
9da67b701d
Clarify use of --size parameter.
2017-02-15 20:26:02 +01:00
Milan Broz
ef7ecb5567
Fix race while allocating free loop device.
...
Fixes Issue #314 .
Thanks to Martin Jeřábek for the report.
2017-01-20 15:27:40 +01:00
Milan Broz
a77c609c62
Fix possible fd leaks after exec.
...
Thanks Natanael Copa for the report.
Fixes issue#313.
2017-01-20 13:47:14 +01:00
Milan Broz
bca2bab560
Fix OpenSSL 1.1.0 compatibility
...
If backward-compatible API is not defined (-DOPENSSL_API_COMPAT=0x10100000L)
deprecated symbols cannot be used.
Also see https://bugs.gentoo.org/show_bug.cgi?id=604698
Thanks eroen for reporting this.
2017-01-05 09:06:31 +01:00
Milan Broz
e129b13402
Fix TrueCrypt URL in man page.
2017-01-04 08:04:10 +01:00
Arno Wagner
520b6d7344
some typos fixed in FAQ
2017-01-01 20:39:46 +01:00
Arno Wagner
bed395d039
Updates to FAQ
...
- Finished section 9 initrd with examples how to do your own
- Some minor fixes elswehere
2017-01-01 20:14:21 +01:00
Milan Broz
566f8c322b
Update veritysetup man page.
...
Thanks Michal Virgovic for patch.
2016-12-13 14:29:13 +01:00
Milan Broz
807cedf4f3
Check for data device and hash device area overlap in veritysetup.
...
Thanks Michal Virgovic for tests.
2016-12-13 13:52:05 +01:00
Milan Broz
ef8a7d82d8
Update Readme.md.
2016-11-16 16:14:02 +01:00
Milan Broz
b906e8d299
Merge branch 'master' into 'master'
...
Fix use of LibreSSL.
Libressl declares `OPENSSL_VERSION_NUMBER 0x20000000L`.
See merge request !12
2016-11-10 07:51:12 +00:00
Aric Belsito
0e14147132
Fix use of LibreSSL.
2016-11-03 11:55:39 -07:00
Milan Broz
c10e106787
Fix missing CRYPT_ACTIVATE_SAME_CPU_CRYPT flag check in status command.
2016-11-02 19:55:51 +01:00
Milan Broz
61725ee7cc
Update readme.md for version 1.7.3.
2016-10-30 15:02:21 +01:00
Milan Broz
39f88f1712
Set devel version.
2016-10-30 14:53:54 +01:00
Milan Broz
e14aba8cf1
Add 1.7.3. Release Notes.
2016-10-28 11:19:26 +02:00
Milan Broz
97e774226d
Update po files.
2016-10-28 11:01:23 +02:00
Milan Broz
6220e9c6cc
Update po files.
2016-10-28 10:56:27 +02:00