Commit Graph

  • 232ba8dd3a Add missing crypto backend init in crypt_format_inline. Milan Broz 2025-06-21 20:55:00 +02:00
  • 3490944c27 po: update es.po (from translationproject.org) Antonio Ceballos 2025-06-18 11:53:22 +02:00
  • e8c32e5c41 po: update cs.po (from translationproject.org) Petr Pisar 2025-06-18 11:53:22 +02:00
  • ccc9a977f7 tests: Use truncate and detect failure. Milan Broz 2025-06-18 10:10:52 +02:00
  • a0929f67f1 po: update uk.po (from translationproject.org) Yuri Chornoivan 2025-06-17 14:46:59 +02:00
  • e57f1b3dd8 po: update sk.po (from translationproject.org) Marián Haburaj 2025-06-17 14:46:59 +02:00
  • e9a20ad3dc po: update ro.po (from translationproject.org) Remus-Gabriel Chelu 2025-06-17 14:46:59 +02:00
  • f3d348776d po: update pl.po (from translationproject.org) Jakub Bogusz 2025-06-17 14:46:59 +02:00
  • e9c626cccd po: update ja.po (from translationproject.org) Hiroshi Takekawa 2025-06-17 14:46:59 +02:00
  • ef592405dd po: update fr.po (from translationproject.org) Frédéric Marchal 2025-06-17 14:46:59 +02:00
  • 5ce481a8c2 po: update de.po (from translationproject.org) Roland Illig 2025-06-17 14:46:59 +02:00
  • 9b5ed35078 bitlk-compat-test: Use eval in load_vars(). Guilhem Moulin 2025-06-16 17:21:25 +02:00
  • bf7d2c5a3b Use CDN in release links. Milan Broz 2025-06-16 14:40:42 +02:00
  • a8105ef9bb Version 2.8.0-rc1. v2.8.0-rc1 Milan Broz 2025-06-16 13:49:28 +02:00
  • 96787457e1 Add 2.8.0-rc1 Release notes. Milan Broz 2025-06-15 10:48:20 +02:00
  • 849bd0d2f3 po: update es.po (from translationproject.org) Antonio Ceballos 2025-06-15 10:47:31 +02:00
  • f866a663b0 po: update cs.po (from translationproject.org) Petr Pisar 2025-06-15 10:47:31 +02:00
  • bac868b392 Fix message translation (missing macro). Milan Broz 2025-06-09 10:13:26 +02:00
  • 7ed0934892 po: add sk.po (from translationproject.org) Marián Haburaj 2025-06-05 14:20:44 +02:00
  • 6db3fa33e1 po: update uk.po (from translationproject.org) Yuri Chornoivan 2025-06-05 14:20:44 +02:00
  • 255336b309 po: update ro.po (from translationproject.org) Remus-Gabriel Chelu 2025-06-05 14:20:44 +02:00
  • 084b1d2984 po: update ja.po (from translationproject.org) Hiroshi Takekawa 2025-06-05 14:20:44 +02:00
  • d0b582bbd6 po: update fr.po (from translationproject.org) Frédéric Marchal 2025-06-05 14:20:44 +02:00
  • b84ffc4ff4 po: update de.po (from translationproject.org) Roland Illig 2025-06-05 14:20:44 +02:00
  • c7f3f32ec9 Avoid zero-length read in read_lseek_blockwise Milan Broz 2025-06-04 14:07:24 +02:00
  • f221de22b6 Fix libcryptsetup version. Milan Broz 2025-06-03 11:41:30 +02:00
  • ff4aa8e5e7 Fix typo in Readme. Milan Broz 2025-06-03 10:17:28 +02:00
  • efc6f847ee Update kernel.org links to use CDN. Milan Broz 2025-06-03 09:54:49 +02:00
  • 30ede1be36 Test version 2.8.0-rc0. v2.8.0-rc0 Milan Broz 2025-06-03 09:16:27 +02:00
  • 98323a93a8 po: update sv.po (from translationproject.org) Josef Andersson 2025-06-03 09:06:31 +02:00
  • 700047c84f po: update ru.po (from translationproject.org) Yuri Kozlov 2025-06-03 09:06:31 +02:00
  • 10ab6be262 Allow --reduce-device-size and --device-size in encrypt action. Ondrej Kozina 2025-05-20 09:54:22 +02:00
  • ad30673dc5 Clarify structure assignement in tests. Ondrej Kozina 2025-05-30 15:00:20 +02:00
  • 773ac1ce55 Support encryption with reduced device size and data shift. Ondrej Kozina 2025-05-30 14:59:52 +02:00
  • ed50d30e7e Decouple data device size from reencryption operation data size. Ondrej Kozina 2025-05-30 12:10:51 +02:00
  • 5973694311 Correctly suffix device related variables. Ondrej Kozina 2025-05-30 15:11:41 +02:00
  • b81c84bd8f Do not allow null cipher for LUKS2 keyslot even in conversion. Milan Broz 2025-05-29 15:39:28 +02:00
  • 8d7ee84006 tests: Silence repair warning on intentionally wiped image Milan Broz 2025-05-29 13:15:40 +02:00
  • 21e0680abf Disallow conversion to LUKS1 if capi string is specified. Milan Broz 2025-05-29 12:38:05 +02:00
  • bd03054c38 tests: Add capi LUKS1 non-root test. Milan Broz 2025-05-29 12:18:09 +02:00
  • e136a0a40a Support capi format in crypt_storage wrapper. Milan Broz 2025-05-29 12:05:34 +02:00
  • 5b3ff3c0a7 Explicitly disallow capi format for LUKS2 keyslot encryption Milan Broz 2025-05-29 10:32:35 +02:00
  • c3414b8221 tests: detect failure of crypt_decode_key Milan Broz 2025-05-28 14:45:13 +02:00
  • 9f8667922c tests: Fix length of decoded key Milan Broz 2025-05-28 15:04:51 +02:00
  • 949c4ad0f1 tests: Fix typo in test key definition. Milan Broz 2025-05-28 14:27:53 +02:00
  • 55c44cd3fd Fix warning for hidden global variable Milan Broz 2025-05-27 15:33:02 +02:00
  • ca7c4c8b15 test: Fix KeyslotContextAndKeyringLink test Ondrej Kozina 2025-05-27 14:26:08 +02:00
  • a6c9c28208 Return -EINVAL if keyslot context can not access keyring key. Ondrej Kozina 2025-05-27 13:44:32 +02:00
  • b6f43890f2 Add better errno hint in debug message. Ondrej Kozina 2025-05-27 13:36:29 +02:00
  • c735c71ca1 keyring_find_key_id_by_name does not return negative values on error. Ondrej Kozina 2025-05-27 13:25:12 +02:00
  • f3557f0765 find_key_by_type_and_desc must return 0 on error. Ondrej Kozina 2025-05-27 13:18:08 +02:00
  • 5a2ca129b9 tests: Fix interactive query Milan Broz 2025-05-27 11:37:22 +02:00
  • 5755f210ac doc: Do not wrap line for packages list and suggest netcat-openbsd for Debian. Milan Broz 2025-05-26 14:41:18 +02:00
  • ccf7d6b197 tests: Do not use --key-size for --hw-opal-only format Milan Broz 2025-05-26 14:30:43 +02:00
  • 19d67d3c62 Fix integer and double types in keyslot checker. Milan Broz 2025-05-27 09:03:40 +02:00
  • cf630f578d Create underlying TCRYPT devices with CRYPT_SUBDEV prefix. Ondrej Kozina 2025-05-26 15:27:59 +02:00
  • 12eb040943 Create dm-integrity with CRYPT_SUBDEV prefix. Ondrej Kozina 2025-05-26 10:28:51 +02:00
  • 880bbfab4d Use free physical memory check for pbkdf only on small systems. Milan Broz 2025-05-10 22:20:00 +02:00
  • e6f6ee9291 Do not allow PBKDF benchmark over maximum allowed threads. Milan Broz 2025-05-14 14:55:17 +02:00
  • 6b832b8d03 Add keyslot check code. Milan Broz 2025-04-29 08:25:40 +02:00
  • f29337aa9f Define opaques crypt_device struct in local header. Milan Broz 2025-04-29 13:41:43 +02:00
  • f5bbc499d4 Move LUKS_STRIPES definition to macros definitions. Milan Broz 2025-04-29 12:11:49 +02:00
  • 4fd3db5e93 Fix cryptsetup repair to use header device and UUID spec. Milan Broz 2025-04-29 12:09:22 +02:00
  • cbf6fa9d07 Fix external slot checker to work with LUKS2. Milan Broz 2025-04-29 08:20:07 +02:00
  • 9e4a31887e ci: retry update for Ubuntu repos Milan Broz 2025-05-21 14:02:15 +02:00
  • 680567615a tests: add LUKS2 integrity tests Milan Broz 2025-02-20 15:40:39 +01:00
  • 24b126252b tests: add integritysetup inline tags tests Milan Broz 2025-02-20 14:36:46 +01:00
  • 324926e2d8 LUKS2: support Inline tags format and activation for integrity protection Milan Broz 2025-02-19 15:53:15 +01:00
  • 3ec14c8668 Move (and rename) UUID helpers to libdevmapper source. Milan Broz 2025-05-03 18:50:33 +02:00
  • d967c9aaf0 Unify checking for LUKS2 intermediate device. Milan Broz 2025-05-03 21:26:03 +02:00
  • 352cda0302 integrity: Detect PI/DIF capable devices in inline mode. Milan Broz 2025-02-19 15:06:47 +01:00
  • 006ebd832f integrity: support Inline tags format and activation Milan Broz 2025-02-17 13:32:27 +01:00
  • 49ccafe38a integrity: Add inline flag to API Milan Broz 2025-02-16 22:46:18 +01:00
  • 29fcd88d86 integrity: Support superblock V6 Milan Broz 2025-02-16 22:06:11 +01:00
  • c4ce270568 Avoid false positive for static scan (integer overflow). Milan Broz 2025-05-21 10:56:52 +02:00
  • 8440e59b7b Fix possible integer overflow (for unused variable). Milan Broz 2025-05-21 10:55:58 +02:00
  • 465043300d Check for unbound keyslot in convert. Milan Broz 2025-05-15 14:56:15 +02:00
  • 50b762ab94 Add note to man page for LUKS convert requirements. Milan Broz 2025-05-15 14:40:45 +02:00
  • 11dd8d318c Add debug messages for incompatible LUKS1 conversion. Milan Broz 2025-05-15 14:27:37 +02:00
  • e5c2892cd5 cryptsetup: Adjust XTS keys size also if cipher is specified with capi: prefix. Milan Broz 2025-05-15 12:24:47 +02:00
  • bd2f7eb671 Harden digest verification when adding new unbound key. Ondrej Kozina 2025-05-19 14:35:31 +02:00
  • a39a0d00e5 Do not use pagesize as fallback for block size. Milan Broz 2025-05-10 16:54:59 +02:00
  • 9484eee48a Move wipe debug message and add alignment info. Milan Broz 2025-05-10 16:11:58 +02:00
  • 5689fb46e7 Add error message for missing volume key. Ondrej Kozina 2025-05-20 12:36:10 +02:00
  • 4d5aa29955 Add tests for reencryption by keyslot context in CLI. Ondrej Kozina 2025-04-25 15:12:49 +02:00
  • ad21502d06 Extend options for initializing reencrypiton from cli. Ondrej Kozina 2024-10-08 10:49:09 +02:00
  • 0dc630b911 Allow reencryption resume by new methods. Ondrej Kozina 2025-05-13 10:31:50 +02:00
  • cbcb8c6ee3 Allow device in reencryption to be activated by volume keys in files. Ondrej Kozina 2025-05-12 16:40:04 +02:00
  • 5a84dc87e3 Return -ENOENT if digest is missing. Ondrej Kozina 2025-05-19 16:15:10 +02:00
  • 1a7e89c55d Allow crypt_reencrypt_init_by_keyslot_contexts with no active keyslots. Ondrej Kozina 2025-04-16 14:10:29 +02:00
  • 804ee74a46 Reduce memory allocations in vk keyring keyslot context. Ondrej Kozina 2025-05-06 16:49:41 +02:00
  • b497306934 Add method in keyslot_context to get stored key size. Ondrej Kozina 2025-05-07 14:15:09 +02:00
  • 6c74b6f9c8 Update crypt_keyring_get_key_by_name debug message. Ondrej Kozina 2025-05-14 11:53:31 +02:00
  • 548de244c5 Add internal helper to get key size by key description. Ondrej Kozina 2025-05-07 14:18:01 +02:00
  • 0363ea7c57 Add utils keyring helper to get keyring key size by id. Ondrej Kozina 2025-05-07 14:10:32 +02:00
  • ae2a7cfc33 Use crypt_get_old_volume_key_size in action reencrypt. Ondrej Kozina 2025-05-16 14:12:18 +02:00
  • 4e94c8d809 Add crypt_get_old_volume_key_size API. Ondrej Kozina 2025-05-16 13:49:37 +02:00
  • 3dcb532bd3 verity: Check hash device size in advance Milan Broz 2025-05-15 16:23:42 +02:00
  • 02a48caf7e Print better error message for unsupported LUKS2 AEAD device resize. Milan Broz 2025-05-15 15:49:28 +02:00
  • bc6c3092fa ci: call dnf clean all before install Milan Broz 2025-05-12 13:45:25 +02:00