Ondrej Kozina 624f3220a1 Add CRYPT_REENCRYPT_REPAIR_NEEDED flag. ...

crypt_reencrypt_status() returns this flag if old
online-reencrypt requirement is detected and reencryption
keyslot digest is missing.

crypt_reencrypt_init_by_passphrase() with same flag applied
repairs (upgrade) reencryption metadata so that
automatic reencryption recovery during activation
is again possible and reencryption operation can be resumed
post CVE-2021-4122 fix.

2022-01-13 07:08:03 +01:00

..

luks2_digest_pbkdf2.c

Update Copyright year.

2021-02-07 16:09:13 +01:00

luks2_digest.c

Check exit value for snprintf where it makes sense.

2021-05-21 14:54:00 +02:00

luks2_disk_metadata.c

Rename crypt_get/set reenc_context to luks2_reencrypt.

2022-01-12 20:49:34 +01:00

luks2_internal.h

Rename LUKS2_keyslot_reencrypt_create function.

2022-01-13 07:08:03 +01:00

luks2_json_format.c

Remove json_object argument from area size checks.

2022-01-12 20:49:34 +01:00

luks2_json_metadata.c

Add CRYPT_REENCRYPT_REPAIR_NEEDED flag.

2022-01-13 07:08:03 +01:00

luks2_keyslot_luks2.c

Update Copyright year.

2021-02-07 16:09:13 +01:00

luks2_keyslot_reenc.c

Reenc keyslot must have key_size == 1.

2022-01-12 20:49:34 +01:00

luks2_keyslot.c

Make reencryption flag and keyslot inseparable.

2022-01-13 07:08:03 +01:00

luks2_luks1_convert.c

Remove json_object argument from area size checks.

2022-01-12 20:49:34 +01:00

luks2_reencrypt_digest.c

Fix CVE-2021-4122 - LUKS2 reencryption crash recovery attack

2022-01-12 20:49:34 +01:00

luks2_reencrypt.c

Add CRYPT_REENCRYPT_REPAIR_NEEDED flag.

2022-01-13 07:08:03 +01:00

luks2_segment.c

Add segments validation for reencryption.

2022-01-13 07:08:03 +01:00

luks2_token_keyring.c

Update Copyright year.

2021-02-07 16:09:13 +01:00

luks2_token.c

Check exit value for snprintf where it makes sense.

2021-05-21 14:54:00 +02:00

luks2.h

Add CRYPT_REENCRYPT_REPAIR_NEEDED flag.

2022-01-13 07:08:03 +01:00