Milan Broz [Wed, 19 Sep 2012 11:58:00 +0000 (13:58 +0200)]
Fix some problems found by Coverity static analysis.
Arno Wagner [Tue, 18 Sep 2012 21:30:38 +0000 (23:30 +0200)]
synced with wiki
Milan Broz [Tue, 11 Sep 2012 09:59:06 +0000 (11:59 +0200)]
Add crypt_keyslot_area() API call.
Useful if you want to analyze/wipe area of disk used for keyslot
from external tool.
Arno Wagner [Sun, 9 Sep 2012 00:51:58 +0000 (02:51 +0200)]
fixed typeo 94 -> 95 printable ASCII chars
Milan Broz [Thu, 30 Aug 2012 13:39:30 +0000 (15:39 +0200)]
Fix luksHeaderBackup for v1.0 (very old) headers and add some basic test.
Milan Broz [Thu, 30 Aug 2012 12:08:34 +0000 (14:08 +0200)]
Add some offset/keyslot offset checks.
Milan Broz [Tue, 28 Aug 2012 11:30:17 +0000 (13:30 +0200)]
Proper handle error in device block get.
Milan Broz [Tue, 28 Aug 2012 11:16:03 +0000 (13:16 +0200)]
Remove unused includes.
Milan Broz [Tue, 28 Aug 2012 11:11:02 +0000 (13:11 +0200)]
Replace round_up macro with function.
Milan Broz [Mon, 27 Aug 2012 14:52:19 +0000 (16:52 +0200)]
Move LUKS AF data sector alignment to AF helper function.
Milan Broz [Mon, 27 Aug 2012 13:47:40 +0000 (15:47 +0200)]
Always zero memory in crypt_safe_alloc.
Milan Broz [Mon, 27 Aug 2012 13:26:22 +0000 (15:26 +0200)]
Use AF_split_size() to calculate split data size.
Milan Broz [Mon, 27 Aug 2012 12:45:21 +0000 (14:45 +0200)]
Get rid of confusing LUKS_PHDR_SIZE macro.
Dave Reisner [Fri, 24 Aug 2012 21:45:25 +0000 (17:45 -0400)]
lib/utils_crypt: optimize seek to keyfile-offset
Avoid using unbuffered reads when "seeking" to a keyfile offset. This is
abysmally slow when the key is hidden at the end of a large device.
Instead, try to actually call lseek, falling back on reading in chunks
of BUFSIZ bytes until the desired offset is reached.
Command line:
cryptsetup luksOpen /dev/vdc1 home \
--keyfile /dev/vdd --keyfile-size 4096 --keyfile-offset
123456789
Before:
real 0m25.589s
user 0m7.030s
sys 0m18.479s
After:
real 0m4.464s
user 0m4.253s
sys 0m0.157s
Milan Broz [Mon, 27 Aug 2012 10:42:15 +0000 (12:42 +0200)]
Do not scan rotational flag for non-block devices / file images.
Arno Wagner [Fri, 24 Aug 2012 17:00:47 +0000 (19:00 +0200)]
added prominent note to use LUKS (not plain dm-crypt) unless
understanding the crypto well.
Arno Wagner [Fri, 24 Aug 2012 15:02:59 +0000 (17:02 +0200)]
synced with wiki
Milan Broz [Tue, 14 Aug 2012 14:53:02 +0000 (16:53 +0200)]
Set context for DM log for all DM backend entries.
Try to handle error if run as non-root user better.
Milan Broz [Tue, 14 Aug 2012 14:25:21 +0000 (16:25 +0200)]
Add context to DM helpers.
(To be used later.)
Milan Broz [Tue, 14 Aug 2012 13:54:31 +0000 (15:54 +0200)]
Modprobe kernel modules early in api-test.
Milan Broz [Mon, 13 Aug 2012 16:31:26 +0000 (18:31 +0200)]
Use common utils_tools.c for all tools.
Unify tool environment and deduplicate code.
Milan Broz [Mon, 13 Aug 2012 15:16:37 +0000 (17:16 +0200)]
Remove debug line.
Milan Broz [Mon, 13 Aug 2012 14:54:41 +0000 (16:54 +0200)]
Print better error message if device is read-only etc.
Milan Broz [Sun, 12 Aug 2012 20:49:42 +0000 (22:49 +0200)]
Create hash image if doesn't exist in veritysetup format.
Milan Broz [Sun, 12 Aug 2012 19:56:09 +0000 (21:56 +0200)]
New device access backend.
Allocate loop device late (only when real block device needed).
Rework underlying device/file access functions.
Move all device (and ioctl) access to utils_device.c.
Allows using file where appropriate without allocation loop device.
Milan Broz [Fri, 3 Aug 2012 13:27:59 +0000 (15:27 +0200)]
Fix dracut example.
Arno Wagner [Thu, 2 Aug 2012 13:58:36 +0000 (15:58 +0200)]
update to current WIKI version
Milan Broz [Thu, 2 Aug 2012 10:51:28 +0000 (12:51 +0200)]
Fix some issues in dict example.
Milan Broz [Mon, 23 Jul 2012 13:00:28 +0000 (15:00 +0200)]
Be sure verity module is loaded in test.
Milan Broz [Fri, 20 Jul 2012 13:36:16 +0000 (15:36 +0200)]
Better define comment lines for for dict example.
Milan Broz [Fri, 20 Jul 2012 12:51:51 +0000 (14:51 +0200)]
Clear dict example a little bit.
Milan Broz [Thu, 19 Jul 2012 22:15:20 +0000 (00:15 +0200)]
Add example of dictionary search.
Milan Broz [Thu, 12 Jul 2012 19:11:33 +0000 (21:11 +0200)]
Use fixed dir (old dracut lib...)
Milan Broz [Thu, 12 Jul 2012 17:21:22 +0000 (19:21 +0200)]
Add key option to dracut example.
Milan Broz [Thu, 12 Jul 2012 10:53:26 +0000 (12:53 +0200)]
Skip multikey if not supported (e.g. FIPS mode - md5 for IV not available).
Milan Broz [Tue, 10 Jul 2012 18:20:27 +0000 (20:20 +0200)]
Version 1.5.0.
Milan Broz [Tue, 10 Jul 2012 17:59:44 +0000 (19:59 +0200)]
Update example files for new dracut.
Milan Broz [Tue, 10 Jul 2012 11:09:35 +0000 (13:09 +0200)]
Update release notes.
Milan Broz [Tue, 10 Jul 2012 10:54:22 +0000 (12:54 +0200)]
Version 1.5.0.
Milan Broz [Tue, 10 Jul 2012 10:53:32 +0000 (12:53 +0200)]
Add example of dracut module for reencryption.
Milan Broz [Tue, 10 Jul 2012 08:15:40 +0000 (10:15 +0200)]
Add module load to test.
Milan Broz [Mon, 9 Jul 2012 17:30:25 +0000 (19:30 +0200)]
Fix library name for FIPS check.
Milan Broz [Mon, 9 Jul 2012 17:04:39 +0000 (19:04 +0200)]
Add link to upstream tracker.
Milan Broz [Mon, 9 Jul 2012 16:47:05 +0000 (18:47 +0200)]
Fix libcryptsetup.h docs for verity type.
Milan Broz [Mon, 9 Jul 2012 16:09:51 +0000 (18:09 +0200)]
Add some verity api test.
Fix set_data_device bug it uncovered.
Fix api-test for nonFIPS hash.
Milan Broz [Sun, 8 Jul 2012 18:29:30 +0000 (20:29 +0200)]
Remove utils_debug from pot.
Milan Broz [Thu, 28 Jun 2012 08:16:49 +0000 (10:16 +0200)]
Fix password length unit in configure.
Milan Broz [Wed, 27 Jun 2012 19:28:11 +0000 (21:28 +0200)]
Use resume instead of restart.
Petr Písař [Tue, 26 Jun 2012 18:41:16 +0000 (20:41 +0200)]
Pass help text to popt already translated
popt does not process the text registered by poptSetOtherOptionHelp()
through gettext on its own. Application must do it.
Milan Broz [Tue, 26 Jun 2012 12:33:08 +0000 (14:33 +0200)]
Update po files.
Milan Broz [Tue, 26 Jun 2012 10:55:14 +0000 (12:55 +0200)]
Remove open device debugging feature (no longer needed).
Milan Broz [Mon, 25 Jun 2012 14:06:43 +0000 (16:06 +0200)]
Switch to use unit suffix for --reduce-device-size option.
Milan Broz [Mon, 25 Jun 2012 13:34:11 +0000 (15:34 +0200)]
Add --device-size option for reencryption tool.
Milan Broz [Wed, 20 Jun 2012 09:29:46 +0000 (11:29 +0200)]
Version 1.5.0-rc2.
Milan Broz [Tue, 19 Jun 2012 16:40:38 +0000 (18:40 +0200)]
Fix verity test.
(Writing just one byte from urandom means, that there is still
high probability the byte will be the same and it will cause
no data corruption :-)
Milan Broz [Tue, 19 Jun 2012 15:37:31 +0000 (17:37 +0200)]
Rename without_activation to test_passphrase.
Milan Broz [Tue, 19 Jun 2012 14:04:20 +0000 (16:04 +0200)]
Add directio to reenc test.
Milan Broz [Tue, 19 Jun 2012 13:57:05 +0000 (15:57 +0200)]
Remove old dm-verity superblock handling.
Milan Broz [Tue, 19 Jun 2012 13:49:56 +0000 (15:49 +0200)]
Remove some redundant brackets.
Milan Broz [Tue, 19 Jun 2012 13:34:36 +0000 (15:34 +0200)]
Add --without-activation option for luksOpen (check passphrase only).
Milan Broz [Tue, 19 Jun 2012 12:43:10 +0000 (14:43 +0200)]
Fix luks-header-from-active to not require header on device and add UUID setting.
Milan Broz [Tue, 19 Jun 2012 10:49:16 +0000 (12:49 +0200)]
Remove dubious compilation warning.
Milan Broz [Tue, 19 Jun 2012 08:33:48 +0000 (10:33 +0200)]
Fix man page makefile.
Milan Broz [Tue, 19 Jun 2012 07:56:55 +0000 (09:56 +0200)]
Update po files.
Milan Broz [Mon, 18 Jun 2012 15:12:41 +0000 (17:12 +0200)]
Remove redundant condition in overflow test.
Milan Broz [Mon, 18 Jun 2012 15:09:48 +0000 (17:09 +0200)]
Fix hex_to_bytes and add it to common utils.
Milan Broz [Mon, 18 Jun 2012 14:06:14 +0000 (16:06 +0200)]
Introduce cryptsetup-reencrypt - experimental offline LUKS reencryption tool.
Milan Broz [Mon, 18 Jun 2012 13:52:36 +0000 (15:52 +0200)]
Add simple examples to man page.
Milan Broz [Mon, 18 Jun 2012 13:03:47 +0000 (15:03 +0200)]
Fix malloc of 0 size.
Milan Broz [Mon, 18 Jun 2012 12:52:35 +0000 (14:52 +0200)]
If in progress, just use normal path (check passphrase).
Milan Broz [Mon, 18 Jun 2012 12:29:22 +0000 (14:29 +0200)]
Add ability to encrypt plain device.
Milan Broz [Sun, 17 Jun 2012 19:59:29 +0000 (21:59 +0200)]
Add some simple reenc test.
Milan Broz [Sun, 17 Jun 2012 17:17:43 +0000 (19:17 +0200)]
Sanity check for some options.
Milan Broz [Sun, 17 Jun 2012 13:09:34 +0000 (15:09 +0200)]
Add possibility to change key size (optionally by shrinking device).
Milan Broz [Sun, 17 Jun 2012 10:44:53 +0000 (12:44 +0200)]
Do not touch new LUKS headers.
Milan Broz [Sun, 17 Jun 2012 10:12:17 +0000 (12:12 +0200)]
Rename to crypsetup-reencrypt.
Add man page.
Add configure option.
Milan Broz [Sun, 17 Jun 2012 00:11:41 +0000 (02:11 +0200)]
Check device exclusively.
Milan Broz [Sat, 16 Jun 2012 22:43:45 +0000 (00:43 +0200)]
Fix signit if reencryption not yet started.
Milan Broz [Sat, 16 Jun 2012 22:06:30 +0000 (00:06 +0200)]
Use ETA in progress report.
Milan Broz [Sat, 16 Jun 2012 19:49:45 +0000 (21:49 +0200)]
Add fsync option.
Milan Broz [Sat, 16 Jun 2012 19:13:47 +0000 (21:13 +0200)]
Fix directio aligned buffer.
Milan Broz [Sat, 16 Jun 2012 18:59:21 +0000 (20:59 +0200)]
Fix directio (again).
Milan Broz [Sat, 16 Jun 2012 16:47:09 +0000 (18:47 +0200)]
Fix some compile warnings.
Milan Broz [Sat, 16 Jun 2012 16:28:49 +0000 (18:28 +0200)]
Do not use global context.
Milan Broz [Sat, 16 Jun 2012 16:10:01 +0000 (18:10 +0200)]
Fix verbose messages.
Milan Broz [Sat, 16 Jun 2012 15:07:29 +0000 (17:07 +0200)]
Change log manipulation, print log always.
Milan Broz [Fri, 15 Jun 2012 23:23:42 +0000 (01:23 +0200)]
Properly support more keyslots.
If key file specified, use only one keyslot.
Milan Broz [Fri, 15 Jun 2012 13:16:49 +0000 (15:16 +0200)]
Remove new file header option for now.
Milan Broz [Fri, 15 Jun 2012 13:03:09 +0000 (15:03 +0200)]
Create smaller header device.
Milan Broz [Fri, 15 Jun 2012 11:51:16 +0000 (13:51 +0200)]
Handle interrupts & restart.
Milan Broz [Thu, 14 Jun 2012 14:13:59 +0000 (16:13 +0200)]
Fix backward roiutine on 32bit.
Milan Broz [Thu, 14 Jun 2012 12:58:36 +0000 (14:58 +0200)]
Print better progress status.
Milan Broz [Wed, 13 Jun 2012 11:52:51 +0000 (13:52 +0200)]
Add some simple timer.
Do not use direct-io by default.
Milan Broz [Tue, 12 Jun 2012 16:05:00 +0000 (18:05 +0200)]
Merge branch 'reenc' of https://code.google.com/p/cryptsetup into reenc
Milan Broz [Tue, 12 Jun 2012 15:55:21 +0000 (17:55 +0200)]
Fix hex string conversion length.
Milan Broz [Tue, 12 Jun 2012 11:26:09 +0000 (13:26 +0200)]
Merge branch 'reenc' of https://code.google.com/p/cryptsetup into reenc
Conflicts:
src/Makefile.am
Milan Broz [Wed, 23 May 2012 07:50:34 +0000 (09:50 +0200)]
Comment out some temp code.
Milan Broz [Sun, 20 May 2012 19:04:27 +0000 (21:04 +0200)]
Implement forward/backward reencryption.
Milan Broz [Wed, 2 May 2012 15:14:02 +0000 (17:14 +0200)]
Activate devices privately.
Milan Broz [Wed, 2 May 2012 14:02:01 +0000 (16:02 +0200)]
Add experimental LUKS offline reencryption utility.