Milan Broz
c2e12440d2
Add some offset/keyslot offset checks.
2012-08-30 14:08:34 +02:00
Milan Broz
1685aa5978
Proper handle error in device block get.
2012-08-28 13:30:17 +02:00
Milan Broz
6874f564c1
Remove unused includes.
2012-08-28 13:16:03 +02:00
Milan Broz
4882f70040
Replace round_up macro with function.
2012-08-28 13:11:02 +02:00
Milan Broz
1aca317c77
Move LUKS AF data sector alignment to AF helper function.
2012-08-27 16:52:19 +02:00
Milan Broz
af2730fe2a
Always zero memory in crypt_safe_alloc.
2012-08-27 16:28:00 +02:00
Milan Broz
a6d64d1d44
Use AF_split_size() to calculate split data size.
2012-08-27 15:26:22 +02:00
Milan Broz
d15dd89bb7
Get rid of confusing LUKS_PHDR_SIZE macro.
2012-08-27 14:45:21 +02:00
Dave Reisner
961682aa6b
lib/utils_crypt: optimize seek to keyfile-offset
...
Avoid using unbuffered reads when "seeking" to a keyfile offset. This is
abysmally slow when the key is hidden at the end of a large device.
Instead, try to actually call lseek, falling back on reading in chunks
of BUFSIZ bytes until the desired offset is reached.
Command line:
cryptsetup luksOpen /dev/vdc1 home \
--keyfile /dev/vdd --keyfile-size 4096 --keyfile-offset 123456789
Before:
real 0m25.589s
user 0m7.030s
sys 0m18.479s
After:
real 0m4.464s
user 0m4.253s
sys 0m0.157s
2012-08-27 13:10:00 +02:00
Milan Broz
2f37cfe569
Do not scan rotational flag for non-block devices / file images.
2012-08-27 12:42:15 +02:00
Arno Wagner
5b5c6dccc0
added prominent note to use LUKS (not plain dm-crypt) unless
...
understanding the crypto well.
2012-08-24 19:00:47 +02:00
Arno Wagner
d58a5c8cae
synced with wiki
2012-08-24 17:02:59 +02:00
Milan Broz
1d5788f779
Set context for DM log for all DM backend entries.
...
Try to handle error if run as non-root user better.
2012-08-14 19:17:13 +02:00
Milan Broz
97224b072a
Add context to DM helpers.
...
(To be used later.)
2012-08-14 16:25:21 +02:00
Milan Broz
15442c1747
Modprobe kernel modules early in api-test.
2012-08-14 15:54:31 +02:00
Milan Broz
ff9db165eb
Use common utils_tools.c for all tools.
...
Unify tool environment and deduplicate code.
2012-08-13 18:31:26 +02:00
Milan Broz
48332d248f
Remove debug line.
2012-08-13 17:16:37 +02:00
Milan Broz
07815c24cd
Print better error message if device is read-only etc.
2012-08-13 16:54:41 +02:00
Milan Broz
49b018c765
Create hash image if doesn't exist in veritysetup format.
2012-08-12 23:42:41 +02:00
Milan Broz
65f975655c
New device access backend.
...
Allocate loop device late (only when real block device needed).
Rework underlying device/file access functions.
Move all device (and ioctl) access to utils_device.c.
Allows using file where appropriate without allocation loop device.
2012-08-12 22:00:17 +02:00
Milan Broz
0c1efd1f8a
Fix dracut example.
2012-08-03 15:27:59 +02:00
Arno Wagner
bc1cbd8065
update to current WIKI version
2012-08-02 15:58:36 +02:00
Milan Broz
50a2d89add
Fix some issues in dict example.
2012-08-02 12:51:28 +02:00
Milan Broz
99643a82ae
Be sure verity module is loaded in test.
2012-07-23 15:00:28 +02:00
Milan Broz
fcc35f459c
Better define comment lines for for dict example.
2012-07-20 15:36:16 +02:00
Milan Broz
a5aa91ed99
Clear dict example a little bit.
2012-07-20 14:51:51 +02:00
Milan Broz
d83b872c55
Add example of dictionary search.
2012-07-20 00:15:20 +02:00
Milan Broz
8ec2651ad7
Use fixed dir (old dracut lib...)
2012-07-12 21:15:37 +02:00
Milan Broz
53e269c5f1
Add key option to dracut example.
2012-07-12 19:21:22 +02:00
Milan Broz
8b8e206c07
Skip multikey if not supported (e.g. FIPS mode - md5 for IV not available).
2012-07-12 12:53:26 +02:00
Milan Broz
e0562f9708
Version 1.5.0.
v1_5_0
2012-07-10 20:20:27 +02:00
Milan Broz
6462ee55d3
Update example files for new dracut.
2012-07-10 19:59:44 +02:00
Milan Broz
91ba5742c6
Update release notes.
2012-07-10 13:09:35 +02:00
Milan Broz
667e469659
Version 1.5.0.
2012-07-10 12:54:22 +02:00
Milan Broz
37cecb5a5b
Add example of dracut module for reencryption.
2012-07-10 12:53:32 +02:00
Milan Broz
a47ebccf9a
Add module load to test.
2012-07-10 10:15:40 +02:00
Milan Broz
584d5b8d65
Fix library name for FIPS check.
2012-07-09 19:30:25 +02:00
Milan Broz
8eef5bde4f
Add link to upstream tracker.
2012-07-09 19:04:39 +02:00
Milan Broz
3532be48c7
Fix libcryptsetup.h docs for verity type.
2012-07-09 18:47:05 +02:00
Milan Broz
5f7309bfa0
Add some verity api test.
...
Fix set_data_device bug it uncovered.
Fix api-test for nonFIPS hash.
2012-07-09 18:09:51 +02:00
Milan Broz
fa4a246744
Remove utils_debug from pot.
2012-07-08 20:29:30 +02:00
Milan Broz
321386db88
Fix password length unit in configure.
2012-06-28 10:16:49 +02:00
Milan Broz
b99b4825a2
Use resume instead of restart.
2012-06-27 21:28:11 +02:00
Petr Písař
9b455125e9
Pass help text to popt already translated
...
popt does not process the text registered by poptSetOtherOptionHelp()
through gettext on its own. Application must do it.
2012-06-26 21:26:04 +02:00
Milan Broz
adcb9bfb7d
Update po files.
2012-06-26 14:33:08 +02:00
Milan Broz
4abfd38169
Remove open device debugging feature (no longer needed).
2012-06-26 12:55:14 +02:00
Milan Broz
b684fffdaf
Switch to use unit suffix for --reduce-device-size option.
2012-06-25 16:06:43 +02:00
Milan Broz
fb3b62ca02
Add --device-size option for reencryption tool.
2012-06-25 15:34:11 +02:00
Milan Broz
c469e458b7
Version 1.5.0-rc2.
2012-06-20 11:29:46 +02:00
Milan Broz
be5473f242
Fix verity test.
...
(Writing just one byte from urandom means, that there is still
high probability the byte will be the same and it will cause
no data corruption :-)
2012-06-19 18:40:38 +02:00