Set Up dm-crypt Based Encrypted Block Devices
cryptsetup is used to conveniently set up dm-crypt based device-mapper
targets. It allows to set up targets to read cryptoloop compatible
volumes as well as LUKS formatted ones. The package additionally
includes support for automatically setting up encrypted volumes at boot
time via the config file /etc/crypttab.
- Sources inherited from project SUSE:SLE-15-SP4:GA
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Leap:15.4:Update/cryptsetup && cd $_ - Create Badge
Refresh
Refresh
Source Files
| Filename | Size | Changed |
|---|---|---|
| baselibs.conf | 0000000037 37 Bytes | |
| cryptsetup-2.4.3.tar.sign | 0000000833 833 Bytes | |
| cryptsetup-2.4.3.tar.xz | 0011242152 10.7 MB | |
| cryptsetup-rpmlintrc | 0000000234 234 Bytes | |
| cryptsetup.changes | 0000078357 76.5 KB | |
| cryptsetup.keyring | 0000003284 3.21 KB | |
| cryptsetup.spec | 0000007379 7.21 KB |
Latest Revision
Gustavo Yokoyama Ribeiro (gyribeiro)
committed
(revision 4)
- cryptsetup 2.4.3:
* Fix possible attacks against data confidentiality through
LUKS2 online reencryption extension crash recovery
CVE-2021-4122, boo#1194469
* Add configure option --disable-luks2-reencryption to completely
disable LUKS2 reencryption code.
* Improve internal metadata validation code for reencryption
metadata
* Add updated documentation for LUKS2 On-Disk Format
Specification version 1.1.0
* Fix support for bitlk (BitLocker compatible) startup key with
new metadata entry introduced in Windows 11
* Fix space restriction for LUKS2 reencryption with data shift
- cryptsetup 2.4.2:
* Fix possible large memory allocation if LUKS2 header size is
invalid.
* Fix memory corruption in debug message printing LUKS2
checksum.
* veritysetup: remove link to the UUID library for the static
build.
* Remove link to pwquality library for integritysetup and
veritysetup. These tools do not read passphrases.
* OpenSSL3 backend: avoid remaining deprecated calls in API.
Crypto backend no longer use API deprecated in OpenSSL 3.0
* Check if kernel device-mapper create device failed in an early
phase. This happens when a concurrent creation of device-mapper
devices meets in the very early state.
* Do not set compiler optimization flag for Argon2 KDF if the
memory wipe is implemented in libc.
Comments 0