Commit Graph

  • f64f6fb9e8 opal: Fix error table offset Milan Broz 2025-01-16 15:19:40 +01:00
  • 5c795885c5 opal: update copyright Milan Broz 2025-01-16 15:19:03 +01:00
  • 6a8f88ea99 Fix leaks detected by Coverity. Milan Broz 2025-01-16 21:27:43 +01:00
  • 7ffa8ee28a Fix integer cast for sector_size. Milan Broz 2025-01-16 20:26:58 +01:00
  • 2691514547 Print message about reaching maximal interactive passphrase to error output. Milan Broz 2025-01-26 10:00:36 +01:00
  • 36574dd114 Avoid if (not NULL) free(). Milan Broz 2025-01-16 15:54:09 +01:00
  • 8364178b38 Update copyright year. Milan Broz 2025-01-15 23:09:36 +01:00
  • 2a880f838a ci: Update and fix GitHub actions Milan Broz 2025-01-15 17:07:18 +01:00
  • e6208a12b5 ci: Update CodeQL GitHub CI config Milan Broz 2025-01-15 15:06:06 +01:00
  • b54e5ce9f0 ci: Fix GitHub CI build Milan Broz 2025-01-15 15:03:10 +01:00
  • bfae421c52 bitlk: Clarify activation error message if clear key is present. Milan Broz 2025-01-15 13:35:29 +01:00
  • 33ebb36f71 tests: check for xxd binary in validation test Milan Broz 2024-12-23 22:07:09 +01:00
  • 64fb1c1b26 tests/compat-test: Adjust test for compatibility with passwdqc Gabi Falk 2024-12-22 16:00:00 +00:00
  • b18cefcc71 Detect out of memory in KDF in keyslot derivation. Milan Broz 2024-12-11 15:06:34 +01:00
  • 7cabaa5d70 pbkdf: Do not allow memory cost that cannot be used in size_t Milan Broz 2024-12-11 10:43:22 +01:00
  • b201a62987 Add a note about OPAL PSID sensitivity to manual pages. Milan Broz 2024-12-12 13:30:29 +01:00
  • f8788f347e Mark all sizes in status and dump output in the correct units. Milan Broz 2024-12-02 16:11:43 +01:00
  • ea39aecba3 Add integrity key tests. Milan Broz 2024-11-28 17:20:13 +01:00
  • 5eda5f6a38 Fix compatibility for older dmcrypt without integrity_key_size Milan Broz 2024-11-26 22:34:15 +01:00
  • b5672053f5 Use real integrity key size in format operation. Milan Broz 2024-11-24 23:15:35 +01:00
  • 491f31c4d4 Add --integrity-key-size option to cryptsetup. Milan Broz 2024-11-24 14:39:22 +01:00
  • 7b5ac650e5 Allow specific integrity key size. Milan Broz 2024-11-24 15:38:51 +01:00
  • ff3e2c6a43 libdevmapper: Support dm-crypt integrity_key_size option Milan Broz 2024-11-25 10:47:45 +01:00
  • 1bea029cef Lock volume key structure in memory. Ondrej Kozina 2024-12-03 13:26:25 +01:00
  • ecb1326e0e CI: Disable annocheck run. Milan Broz 2024-11-29 10:18:45 +01:00
  • 690c22ac7b Switch isLUKS() testing order to avoid static analysis scan confusion. Milan Broz 2024-11-28 10:41:18 +01:00
  • 9f1aee46d5 Rename 'keyring' member to 'keyring_key_type' in volume_key. Ondrej Kozina 2024-11-27 11:55:37 +01:00
  • 82bee1c52d test: Skip trusted test if keyctl cannot load user key. Milan Broz 2024-11-26 12:18:26 +01:00
  • 0805cc025d test: Run keyring trusted/encrypted test in CI. Milan Broz 2024-11-16 10:44:20 +01:00
  • 9d03e5987c Add trusted/encrypted keyring test (for plain format). Milan Broz 2024-11-16 00:04:21 +01:00
  • 768bca1df5 Support plain resize with keyring key. Milan Broz 2024-11-19 13:13:25 +01:00
  • 4b7920975c Support trusted & encrypted keyring for plain device. Milan Broz 2024-11-22 14:05:40 +01:00
  • 42e85571df Move keyring utilities to separate file. Milan Broz 2024-11-15 20:44:57 +01:00
  • ae4b4ff4d7 Unlink only volume keys that were previously stored in keyring. Milan Broz 2024-11-22 11:32:03 +01:00
  • 9575dadc8b Store keyring type in volume key. Milan Broz 2024-11-22 10:25:05 +01:00
  • 6be70a0157 Do not include luks2/luks2_internal.h ouside of LUKS2 internal implementation. Milan Broz 2024-11-23 19:36:04 +01:00
  • 3acac6f8fc Print warning if some options were ignored for OPAL hw-only encryption. Milan Broz 2024-11-23 19:10:53 +01:00
  • 609277d957 Add a comment about wiping derived key in benchmark. Milan Broz 2024-11-23 18:23:40 +01:00
  • fb021bac3d Fix token assignement API. Ondrej Kozina 2024-11-15 12:14:08 +01:00
  • c3972372b1 argon2: Avoid unitialized warning in cppcheck Milan Broz 2024-11-06 09:44:52 +01:00
  • 46289f92ff argon2: Avoid cppcheck integer oveflow warning Milan Broz 2024-11-06 09:39:50 +01:00
  • 3c5aa4ef59 Remove unused code. Ondrej Kozina 2024-09-25 14:21:37 +02:00
  • 5e950924c3 Clarify unbound key parameter in verification routine. Ondrej Kozina 2024-11-08 14:43:00 +01:00
  • 76d66d6a01 Better name internal activation function. Ondrej Kozina 2024-11-06 13:24:11 +01:00
  • ccbc53c169 Do not repeat volume keys upload in custom kernel keyring. Ondrej Kozina 2024-11-06 13:21:16 +01:00
  • 61aaeaff5a On error drop crypt_key from kernel keyring. Ondrej Kozina 2024-11-06 13:19:26 +01:00
  • dd3441621a Fix reencryption keys loading in kernel keyring. Ondrej Kozina 2024-11-06 11:54:23 +01:00
  • d7512d738f Force reencryption keys verification after metadata reload. Ondrej Kozina 2024-11-06 11:37:32 +01:00
  • 6506d324ee Better name routine verifying any available digest. Ondrej Kozina 2024-11-08 14:07:31 +01:00
  • a93921c226 Avoid dereferencing NULL pointer. Ondrej Kozina 2024-11-04 11:24:25 +01:00
  • f5b7a576b3 Do not dereference the context pointer before assert. Ondrej Kozina 2024-11-04 11:23:57 +01:00
  • c0449fc24e Revert "Do not call safe erase on benchmark data." Milan Broz 2024-11-01 12:59:25 +01:00
  • 17f0261024 Do not call safe erase on benchmark data. Ondrej Kozina 2024-11-01 10:27:19 +01:00
  • 6daefa8222 api-test: Use minimal key size 14 bytes (112 bits). Ondrej Kozina 2024-10-31 13:43:17 +01:00
  • 33ed0d587e Fix typos found by lintian. Milan Broz 2024-10-30 19:11:29 +01:00
  • f85c31677c Simplify bitlk activation by volume key. Ondrej Kozina 2024-10-29 15:20:16 +01:00
  • 5b83ae8ec2 Enable fvault activation by keyslot context. Ondrej Kozina 2024-10-29 16:50:21 +01:00
  • 7db83f8fb3 Simplify fvault activation by volume key. Ondrej Kozina 2024-10-29 16:45:08 +01:00
  • 652835a1f8 Verify fvault2 key size in before activation by volume key. Ondrej Kozina 2024-10-29 14:41:59 +01:00
  • 00b89c4862 Export expected fvault2 volume key size. Ondrej Kozina 2024-10-29 14:41:14 +01:00
  • 305aa376b6 Add crypt_reencrypt_init_by_keyslot_context API test. Ondrej Kozina 2024-10-24 16:18:43 +02:00
  • 651a089f38 Add crypt_reencrypt_init_by_keyslot_context. Ondrej Kozina 2024-10-14 16:29:49 +02:00
  • 45af8de034 Allow shared activation of device in reencryption. Ondrej Kozina 2024-10-14 16:45:40 +02:00
  • 0eccd6e194 Check also CRYPT_ANY_SLOT in LUKS2_keyslot_for_segment. Ondrej Kozina 2024-10-14 15:54:18 +02:00
  • 4de453d6a5 Retain original error code when reading data from keyring. Ondrej Kozina 2024-10-14 15:38:42 +02:00
  • 66c1523163 ci: Make unreleased RHEL distro build optional. Milan Broz 2024-10-26 10:51:43 +02:00
  • 5f066777a1 ci: Print output for RHEL packages install. Milan Broz 2024-10-26 10:38:34 +02:00
  • fb04611ff7 crypto_backend.h: Wrap APIs in extern C Michal Privoznik 2024-10-17 10:42:55 +02:00
  • b7cf60f229 Add regression test for decryption with datashift. Ondrej Kozina 2024-10-11 15:06:43 +02:00
  • 81d8c12cbe Fix LUKS2 decryption when volume key digest id not zero. Ondrej Kozina 2024-10-11 14:55:08 +02:00
  • e19030915b Unify integer format parameter in prompt. Ondrej Kozina 2024-10-08 16:23:30 +02:00
  • e4bf1f91b9 Properly block opal devices from deferred deactivation. Ondrej Kozina 2024-10-08 13:55:20 +02:00
  • 7c83d4e639 Simplify internal crypt_get_hdr for LUKS2 type. Ondrej Kozina 2024-10-08 13:33:56 +02:00
  • 939b7c0a9e Mbed-TLS: implement PBKDF2 Yiyuan Zhong 2024-10-02 22:52:10 +08:00
  • 443a555559 integrity: print debug message if superblock metadata read fails. Milan Broz 2024-10-06 23:27:24 +02:00
  • 79ef5bee86 Do not run direct-io read check on block devices. Milan Broz 2024-10-06 23:12:36 +02:00
  • cd818156f6 Do not print debug message if device read check fails. Milan Broz 2024-10-06 22:57:48 +02:00
  • faeb0c3483 Fix a possible segfault in deferred deactivation. Milan Broz 2024-10-02 10:55:37 +02:00
  • d35fb1e671 ci: run vectors test when compiling crypto backends. Milan Broz 2024-10-04 21:40:48 +02:00
  • 8ad28547ee Simplify keyslot context initialization code. Ondrej Kozina 2024-09-24 13:33:06 +02:00
  • 3c00305156 add warning to order luksChangeKey and reencrypt Jan Zerebecki 2024-09-26 16:09:49 +02:00
  • 31bf986084 Adapt cryptsetup to self-contained keyslot contexts. Ondrej Kozina 2024-02-21 17:01:46 +01:00
  • 6ef0650332 Rename internal keyslot context functions. Ondrej Kozina 2024-09-04 16:41:35 +02:00
  • 9311c923ca Make all keyslot context types fully self-contained. Ondrej Kozina 2024-02-20 12:03:15 +01:00
  • 209e6167b5 Exclude cipher allocation time from benchmark Eric Biggers 2024-09-17 09:48:49 -07:00
  • b5f7176af1 CI: Install scsi_debug and other kernel modules for Ubuntu CI. Milan Broz 2024-09-12 11:38:19 +02:00
  • c0bf271bef Add crypt_safe_memcpy in reencrypt digest routine. Ondrej Kozina 2024-09-12 11:08:11 +02:00
  • 41c72eaa65 Fix a bug in keyring keyslot context. Ondrej Kozina 2024-09-11 15:58:11 +02:00
  • e48c74b77f Update Readme.md. Milan Broz 2024-09-03 11:54:48 +02:00
  • 3c3a8210e4 Version 2.7.5. v2.7.5 v2.7.x Milan Broz 2024-09-02 23:08:40 +02:00
  • 30676f0741 Update cryptsetup.pot Milan Broz 2024-09-02 23:07:37 +02:00
  • 617c3180ee Add 2.7.5 release notes. Milan Broz 2024-09-02 15:38:59 +02:00
  • 46b8275ad9 Add 2.7.5 release notes. Milan Broz 2024-09-02 15:38:59 +02:00
  • e8bfb9be5f Fix clang undefined version error for ssh token Milan Broz 2024-09-01 00:38:57 +02:00
  • f05d78de7c Abort online reencryption for misconfigured devices. Ondrej Kozina 2024-08-26 10:46:52 +02:00
  • 51920e0c8b Harden online reencryption checks in initialization phase. Ondrej Kozina 2024-08-26 10:44:50 +02:00
  • ef2abceaf6 Fix detection of direct-io with suspended devices. Milan Broz 2024-08-27 12:13:54 +02:00
  • 625947ce7b Remove needless double statements. Ondrej Kozina 2024-08-26 11:56:11 +02:00
  • bb4aa4673c Fix return code for ssize_t. Milan Broz 2024-08-21 10:54:15 +02:00
  • 24894b08fb Add Ubuntu 24.04 runner. Ondrej Kozina 2024-07-29 14:11:58 +02:00