mirror of
https://gitlab.com/cryptsetup/cryptsetup.git
synced 2025-12-11 19:00:02 +01:00
307a7ad077
This patch makes available LUKS2 per-keyslot encryption settings to user. In LUKS2, keyslot can use different encryption that data. We can use new crypt_keyslot_get_encryption and crypt_keyslot_set_encryption API calls to set/get this encryption. For cryptsetup new --keyslot-cipher and --keyslot-key-size options are added. The default keyslot encryption algorithm (if cannot be derived from data encryption) is now available as configure options (default is aes-xts-plain64 with 512-bits key). NOTE: default was increased from 256-bits.
116 lines
2.5 KiB
Plaintext
116 lines
2.5 KiB
Plaintext
CRYPTSETUP_2.0 {
|
|
global:
|
|
crypt_init;
|
|
crypt_init_data_device;
|
|
crypt_init_by_name;
|
|
crypt_init_by_name_and_header;
|
|
|
|
crypt_set_log_callback;
|
|
crypt_set_confirm_callback;
|
|
crypt_set_iteration_time;
|
|
crypt_set_uuid;
|
|
crypt_set_label;
|
|
crypt_set_data_device;
|
|
|
|
crypt_memory_lock;
|
|
crypt_metadata_locking;
|
|
crypt_format;
|
|
crypt_convert;
|
|
crypt_load;
|
|
crypt_repair;
|
|
crypt_resize;
|
|
crypt_suspend;
|
|
crypt_resume_by_passphrase;
|
|
crypt_resume_by_keyfile;
|
|
crypt_resume_by_keyfile_offset;
|
|
crypt_resume_by_keyfile_device_offset;
|
|
crypt_free;
|
|
|
|
crypt_keyslot_add_by_passphrase;
|
|
crypt_keyslot_change_by_passphrase;
|
|
crypt_keyslot_add_by_keyfile;
|
|
crypt_keyslot_add_by_keyfile_offset;
|
|
crypt_keyslot_add_by_keyfile_device_offset;
|
|
crypt_keyslot_add_by_volume_key;
|
|
crypt_keyslot_add_by_key;
|
|
|
|
crypt_keyslot_set_priority;
|
|
crypt_keyslot_get_priority;
|
|
|
|
crypt_token_json_get;
|
|
crypt_token_json_set;
|
|
crypt_token_status;
|
|
crypt_token_luks2_keyring_get;
|
|
crypt_token_luks2_keyring_set;
|
|
crypt_token_assign_keyslot;
|
|
crypt_token_unassign_keyslot;
|
|
crypt_token_is_assigned;
|
|
crypt_token_register;
|
|
|
|
crypt_activate_by_token;
|
|
|
|
crypt_keyslot_destroy;
|
|
crypt_activate_by_passphrase;
|
|
crypt_activate_by_keyfile;
|
|
crypt_activate_by_keyfile_offset;
|
|
crypt_activate_by_keyfile_device_offset;
|
|
crypt_activate_by_volume_key;
|
|
crypt_activate_by_keyring;
|
|
crypt_deactivate;
|
|
crypt_deactivate_by_name;
|
|
crypt_volume_key_get;
|
|
crypt_volume_key_verify;
|
|
crypt_volume_key_keyring;
|
|
crypt_status;
|
|
crypt_dump;
|
|
crypt_benchmark;
|
|
crypt_benchmark_pbkdf;
|
|
crypt_get_cipher;
|
|
crypt_get_cipher_mode;
|
|
crypt_get_integrity_info;
|
|
crypt_get_uuid;
|
|
crypt_set_data_offset;
|
|
crypt_get_data_offset;
|
|
crypt_get_iv_offset;
|
|
crypt_get_volume_key_size;
|
|
crypt_get_device_name;
|
|
crypt_get_metadata_device_name;
|
|
crypt_get_metadata_size;
|
|
crypt_set_metadata_size;
|
|
crypt_get_verity_info;
|
|
crypt_get_sector_size;
|
|
|
|
crypt_get_type;
|
|
crypt_get_active_device;
|
|
crypt_get_active_integrity_failures;
|
|
crypt_persistent_flags_set;
|
|
crypt_persistent_flags_get;
|
|
|
|
crypt_set_rng_type;
|
|
crypt_get_rng_type;
|
|
crypt_set_pbkdf_type;
|
|
crypt_get_pbkdf_type;
|
|
crypt_get_pbkdf_type_params;
|
|
crypt_get_pbkdf_default;
|
|
|
|
crypt_keyslot_max;
|
|
crypt_keyslot_area;
|
|
crypt_keyslot_status;
|
|
crypt_keyslot_get_key_size;
|
|
crypt_keyslot_set_encryption;
|
|
crypt_keyslot_get_encryption;
|
|
crypt_get_dir;
|
|
crypt_set_debug_level;
|
|
crypt_log;
|
|
|
|
crypt_header_backup;
|
|
crypt_header_restore;
|
|
|
|
crypt_keyfile_read;
|
|
crypt_keyfile_device_read;
|
|
|
|
crypt_wipe;
|
|
local:
|
|
*;
|
|
};
|