mirror of
https://gitlab.com/cryptsetup/cryptsetup.git
synced 2025-12-20 15:20:07 +01:00
e3e3027e12
* Pad luks header to 512 sector size. We need read/write in whole sector anyway and space is unused (wiped in luksFormat) so there is no need for read/seek/write exercise. * Rework read/write blockwise to not split operation to many pieces. thanks to Sebastian Andrzej Siewior: The buffer has to be aligned due to the O_DIRECT in open(). Currently a small blocksize buffer is allocated and everything is read in multiple reads and copied back to the original buffer. In my case AFEKSize gets computed to 64000 which results in 125 reads with 512 bytes each. This patch changes this behavior to a single operation where the majority is read()/write() plus an optional fixup in case the request is not modulo block size. * Use posix_memalign and check for alignment if available. Othewise use old align functions. Add autoconf to detect posix_memalign. git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@74 36d66b0a-2a48-0410-832c-cd162a569da5
148 lines
3.8 KiB
C
148 lines
3.8 KiB
C
#ifndef INCLUDED_CRYPTSETUP_LUKS_LUKS_H
|
|
#define INCLUDED_CRYPTSETUP_LUKS_LUKS_H
|
|
|
|
/*
|
|
* LUKS partition header
|
|
*/
|
|
|
|
#include <stddef.h>
|
|
#include <netinet/in.h>
|
|
#include "libcryptsetup.h"
|
|
#include "internal.h"
|
|
|
|
#define LUKS_CIPHERNAME_L 32
|
|
#define LUKS_CIPHERMODE_L 32
|
|
#define LUKS_HASHSPEC_L 32
|
|
#define LUKS_DIGESTSIZE 20 // since SHA1
|
|
#define LUKS_HMACSIZE 32
|
|
#define LUKS_SALTSIZE 32
|
|
#define LUKS_NUMKEYS 8
|
|
|
|
// Numbers of iterations for the master key digest
|
|
#define LUKS_MKD_ITER 10
|
|
|
|
// LUKS_KT defines Key types
|
|
|
|
#define LUKS_KEY_DISABLED_OLD 0
|
|
#define LUKS_KEY_ENABLED_OLD 0xCAFE
|
|
|
|
#define LUKS_KEY_DISABLED 0x0000DEAD
|
|
#define LUKS_KEY_ENABLED 0x00AC71F3
|
|
|
|
#define LUKS_STRIPES 4000
|
|
|
|
// partition header starts with magic
|
|
|
|
#define LUKS_MAGIC {'L','U','K','S', 0xba, 0xbe};
|
|
#define LUKS_MAGIC_L 6
|
|
|
|
#define LUKS_PHDR_SIZE (sizeof(struct luks_phdr)/SECTOR_SIZE+1)
|
|
|
|
/* Actually we need only 37, but we don't want struct autoaligning to kick in */
|
|
#define UUID_STRING_L 40
|
|
|
|
/* We don't have gettext support in LUKS */
|
|
|
|
#define _(Text) Text
|
|
|
|
/* Any integer values are stored in network byte order on disk and must be
|
|
converted */
|
|
|
|
struct luks_phdr {
|
|
char magic[LUKS_MAGIC_L];
|
|
uint16_t version;
|
|
char cipherName[LUKS_CIPHERNAME_L];
|
|
char cipherMode[LUKS_CIPHERMODE_L];
|
|
char hashSpec[LUKS_HASHSPEC_L];
|
|
uint32_t payloadOffset;
|
|
uint32_t keyBytes;
|
|
char mkDigest[LUKS_DIGESTSIZE];
|
|
char mkDigestSalt[LUKS_SALTSIZE];
|
|
uint32_t mkDigestIterations;
|
|
char uuid[UUID_STRING_L];
|
|
|
|
struct {
|
|
uint32_t active;
|
|
|
|
/* parameters used for password processing */
|
|
uint32_t passwordIterations;
|
|
char passwordSalt[LUKS_SALTSIZE];
|
|
|
|
/* parameters used for AF store/load */
|
|
uint32_t keyMaterialOffset;
|
|
uint32_t stripes;
|
|
} keyblock[LUKS_NUMKEYS];
|
|
|
|
/* Align it to 512 sector size */
|
|
char _padding[432];
|
|
};
|
|
|
|
struct luks_masterkey {
|
|
size_t keyLength;
|
|
char key[];
|
|
};
|
|
|
|
struct luks_masterkey *LUKS_alloc_masterkey(int keylength);
|
|
|
|
void LUKS_dealloc_masterkey(struct luks_masterkey *mk);
|
|
|
|
struct luks_masterkey *LUKS_generate_masterkey(int keylength);
|
|
|
|
int LUKS_generate_phdr(struct luks_phdr *header,
|
|
const struct luks_masterkey *mk, const char *cipherName,
|
|
const char *cipherMode, unsigned int stripes,
|
|
unsigned int alignPayload);
|
|
|
|
int LUKS_read_phdr(const char *device, struct luks_phdr *hdr);
|
|
|
|
int LUKS_write_phdr(const char *device, struct luks_phdr *hdr);
|
|
|
|
int LUKS_set_key(const char *device,
|
|
unsigned int keyIndex,
|
|
const char *password,
|
|
size_t passwordLen,
|
|
struct luks_phdr *hdr,
|
|
struct luks_masterkey *mk,
|
|
struct setup_backend *backend);
|
|
|
|
int LUKS_open_key(const char *device,
|
|
unsigned int keyIndex,
|
|
const char *password,
|
|
size_t passwordLen,
|
|
struct luks_phdr *hdr,
|
|
struct luks_masterkey *mk,
|
|
struct setup_backend *backend);
|
|
|
|
int LUKS_open_any_key(const char *device,
|
|
const char *password,
|
|
size_t passwordLen,
|
|
struct luks_phdr *hdr,
|
|
struct luks_masterkey **mk,
|
|
struct setup_backend *backend);
|
|
|
|
int LUKS_open_any_key_with_hdr(const char *device,
|
|
const char *password,
|
|
size_t passwordLen,
|
|
struct luks_phdr *hdr,
|
|
struct luks_masterkey **mk,
|
|
struct setup_backend *backend);
|
|
|
|
|
|
int LUKS_del_key(const char *device, unsigned int keyIndex);
|
|
int LUKS_is_last_keyslot(const char *device, unsigned int keyIndex);
|
|
int LUKS_benchmarkt_iterations();
|
|
|
|
int LUKS_encrypt_to_storage(char *src, size_t srcLength,
|
|
struct luks_phdr *hdr,
|
|
char *key, size_t keyLength,
|
|
const char *device,
|
|
unsigned int sector, struct setup_backend *backend);
|
|
|
|
int LUKS_decrypt_from_storage(char *dst, size_t dstLength,
|
|
struct luks_phdr *hdr,
|
|
char *key, size_t keyLength,
|
|
const char *device,
|
|
unsigned int sector, struct setup_backend *backend);
|
|
int LUKS_device_ready(const char *device, int mode);
|
|
#endif
|