Commit Graph

167 Commits

Author SHA1 Message Date
Milan Broz
f47b7ba425 Fix gcrypt detection & compatimage in api-test.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@212 36d66b0a-2a48-0410-832c-cd162a569da5
2010-05-01 09:59:12 +00:00
Milan Broz
5107296213 Rename apitest -> api-test.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@211 36d66b0a-2a48-0410-832c-cd162a569da5
2010-05-01 09:59:04 +00:00
Milan Broz
19dc09131d Rename align test (Anyone mentioned autoconfigure?). Add some minor changes, run it in make check.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@210 36d66b0a-2a48-0410-832c-cd162a569da5
2010-05-01 09:58:55 +00:00
Milan Broz
78d014e27d Move compat test to separate script and run it in make check.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@209 36d66b0a-2a48-0410-832c-cd162a569da5
2010-05-01 09:58:47 +00:00
Milan Broz
c10aff8a9d Fix luksOpen reading of passphrase on stdin (if "-" keyfile specified) (Issue 52)
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@208 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-30 16:21:24 +00:00
Milan Broz
611278ca39 Allow no hash specification in plain device constructor (issue 63).
Fix some warnings in apitest.

git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@207 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-30 14:05:25 +00:00
Milan Broz
a35c0694b1 Use pkg-conf --static if static build requested.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@206 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-30 12:38:38 +00:00
Milan Broz
1dcd5a3de5 Detect old dm-crypt module and disable LUKS suspend/resume.
Fix apitest to work on older systems.

git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@205 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-30 12:03:41 +00:00
Milan Broz
346e1d1264 Fix includes for libdevmapper internals.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@204 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-29 22:26:14 +00:00
Milan Broz
39d5fd28ed Try to use pkdconfig for devmapper.
Disable udev automatically if devmapper doesn't support it.

git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@203 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-29 21:49:51 +00:00
Milan Broz
0516a1a676 Do not use kernel dm-ioctl header directly and remove warnings.
Add alignment test to distributed files.
Fix write() return compiler warning.

git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@202 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-16 15:48:09 +00:00
Milan Broz
17c87c1148 Fix minor errors
- undefined variable
- properly closinf file descriptorif totpology not detected
- fix IV mode to test run on RHEL5

git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@201 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-16 14:51:09 +00:00
Milan Broz
566f48f7a4 Fix align test.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@200 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-16 13:16:11 +00:00
Milan Broz
4f14b43a3d Fix udev support. Set flag to disable udev rules for temporary devices.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@199 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-16 11:11:37 +00:00
Milan Broz
4a42f27d78 Detect and use devmapper udev support if available (disable by --disable-udev).
If we have device-mapper, get ingo using dm_udev_get_sync_support(),
otherwise ignore udev completely.

You can disable udev support by adding --disable-udev to configure, default is enabled.
(There can be races if udev rules run some actions and cryptsetup doesn't wait it.)

git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@198 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-15 15:32:42 +00:00
Milan Broz
d39b33a371 Avoid class C++ keyword in library header.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@197 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-12 11:53:47 +00:00
Milan Broz
71c0c1f26d Fix pkgconfig to use proper package version (Issue 60, thanks to Jan Engelhardt).
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@196 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-12 11:53:36 +00:00
Milan Broz
743fbbc451 Support topology information for data alignment (LUKS).
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@195 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-09 15:35:19 +00:00
Milan Broz
7d207b7725 Prefer some device paths in status display. (Issue 48)
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@194 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-06 15:06:36 +00:00
Milan Broz
0007cd537d Remove misleading selinux test in configure.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@193 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-06 14:05:59 +00:00
Milan Broz
a058606210 Add Italian and Vietnamese translation.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@192 36d66b0a-2a48-0410-832c-cd162a569da5
2010-04-06 12:54:07 +00:00
Milan Broz
f46683d0c2 Update id.po, add new nl.po file.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@191 36d66b0a-2a48-0410-832c-cd162a569da5
2010-02-25 16:47:13 +00:00
Milan Broz
37708b7cad Properly initialise crypto backend in header backup/restore commands. (fixes issue #49)
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@190 36d66b0a-2a48-0410-832c-cd162a569da5
2010-02-25 16:00:12 +00:00
Milan Broz
ba7e7f94bf Do not verify unlocking passphrase in luksAddKey command. (fixes issue #50)
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@189 36d66b0a-2a48-0410-832c-cd162a569da5
2010-02-25 15:41:22 +00:00
Milan Broz
448c401fbc Version 1.1.0.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@181 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-17 10:28:56 +00:00
Milan Broz
1a947a573b If gcrypt compiled with capabilities, document workaround for cryptsetup (see lib/gcrypt.c).
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@180 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-17 10:20:15 +00:00
Milan Broz
6c3a4cf331 Remove nonfuctional default values from help (and reformat table).
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@179 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-15 14:27:32 +00:00
Milan Broz
37d693cfc2 Fix missing includes on recent systems.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@178 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-15 11:11:37 +00:00
Milan Broz
925dac2c50 Fix hash lowercase conversion for malformed string.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@177 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-15 10:42:06 +00:00
Milan Broz
d93a925b5c Check for required minumum gcrypt version.
(also ensure that gcrypt global init is called,
see http://lists.gnupg.org/pipermail/gcrypt-devel/2003-August/000458.html)

git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@176 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-10 20:54:00 +00:00
Milan Broz
9eac56c614 Fix invalid device error message.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@175 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-10 20:41:15 +00:00
Milan Broz
4af7114832 Update sv.po.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@174 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-10 20:41:07 +00:00
Milan Broz
ed1586950a Convert hash name to lower case for compatibility reasons.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@173 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-10 20:40:59 +00:00
Milan Broz
311727a571 Add nonFIPS alg format test, clean up some warnings in apicheck.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@172 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-10 20:40:50 +00:00
Milan Broz
a97b56cc32 Properly initialise gcrypt in format call.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@171 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-10 20:40:41 +00:00
Milan Broz
0575ded2aa Update Swedish translation.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@170 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-07 17:31:25 +00:00
Milan Broz
f61fbc7520 New German translation.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@169 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-07 10:21:06 +00:00
Milan Broz
1f87cbc5bf Fix static build on some systems and detect too old devmapper library.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@166 36d66b0a-2a48-0410-832c-cd162a569da5
2010-01-02 14:16:57 +00:00
Milan Broz
107ce07914 Version 1.1.0-rc4.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@162 36d66b0a-2a48-0410-832c-cd162a569da5
2009-12-30 20:26:36 +00:00
Milan Broz
550c38dd78 Update Swedish traslation.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@161 36d66b0a-2a48-0410-832c-cd162a569da5
2009-12-30 20:26:28 +00:00
Milan Broz
909c77e856 Describe configurable defaults in man page.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@160 36d66b0a-2a48-0410-832c-cd162a569da5
2009-12-30 20:26:20 +00:00
Milan Broz
ad224b479a Change in iterations counts:
* Fix key slot iteration count calculation (small -i value was the same as default).
  * The slot and key digest iteration minimun is now 1000.
  * The key digest iteration # is calculated from iteration time (approx 1/8 of that).

If something very strange happens, and the generated key is not completely random
(wrong RNG), attacker can skip the whole kesylot area processing and try to
brute force key according to limited set of keys.

The iteration time (default, inherited from slot iteration time, is cca 120ms)
can make this attack slower, if not impossible.

Note, that this is just theorethic problem, anyway it is better to be prepared
if possible:-)

git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@159 36d66b0a-2a48-0410-832c-cd162a569da5
2009-12-30 19:02:44 +00:00
Milan Broz
163abe3520 Fix build for non-standard gcrypt library location.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@158 36d66b0a-2a48-0410-832c-cd162a569da5
2009-12-30 16:39:13 +00:00
Milan Broz
1c91890aac Always close file dscriptor on error.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@157 36d66b0a-2a48-0410-832c-cd162a569da5
2009-12-30 16:39:03 +00:00
Milan Broz
8802e42ab3 Fix some minor text PO problems.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@156 36d66b0a-2a48-0410-832c-cd162a569da5
2009-12-14 14:05:16 +00:00
Milan Broz
42f8e5bdce Fix some strings to use gettext.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@155 36d66b0a-2a48-0410-832c-cd162a569da5
2009-12-11 11:56:32 +00:00
Milan Broz
dc4d945e88 Fix error handling during reading passhrase.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@154 36d66b0a-2a48-0410-832c-cd162a569da5
2009-12-11 11:56:25 +00:00
Milan Broz
403559261a Fix test to handle new default key size.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@153 36d66b0a-2a48-0410-832c-cd162a569da5
2009-12-11 11:56:17 +00:00
Milan Broz
b408947a36 Fix fr.po header copyright and info.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@152 36d66b0a-2a48-0410-832c-cd162a569da5
2009-12-01 15:40:04 +00:00
Milan Broz
4d6dd0df96 Move default cipher paramaters to config.h and allow change through
configuration script.

Change default LUKS keysize to 256.

Change default PLAIN mode to cbc-essiv:sha256.

Note that you have to specify cipher and mode in plain type,
otherwise there is backward incompatibility.

If you really need the same compatible paramaters, you can compile
cryptsetup using old defaults, e.g:

./configure --with-plain-mode=cbc-plain --with-luks1-keybits=128

git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@151 36d66b0a-2a48-0410-832c-cd162a569da5
2009-12-01 14:31:08 +00:00