mirror of
https://gitlab.com/cryptsetup/cryptsetup.git
synced 2025-12-05 16:00:05 +01:00
The IOC_OPAL_ERASE_LR uses Erase method, that is defined only in Single user mode (SUM) and works only on SUM-enabled LRs. As we do not use SUM yet, this always fails. Moreover, Erase has many side effects - it resets user password to "" and disables locking for LR. We already use fallback to IOC_OPAL_SECURE_ERASE_LR, which is GenKey method (defined in Core spec) that must be always available. It effectively regenerates the LR encryption key.