Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-09-18 | cryptsetup: Add build for eng productHEADmastermain | Mark Salyzyn | |
Add Android.mk, popt helper, some static configuration files, NOTICE and MODULE_LICENSE_GPL file. Signed-off-by: Mark Salyzyn <salyzyn@google.com> Bug: 23181629 Bug: 24133481 Change-Id: Ib17c7ab4f9c3fca6b80765cac34c2ec22e670961 | |||
2015-09-08 | Set devel version. | Milan Broz | |
2015-09-08 | Add release notes for 1.6.7 link. | Milan Broz | |
2015-09-08 | Prepare version 1.6.8. | Milan Broz | |
2015-09-08 | Add 1.6.8 release notes. | Milan Broz | |
2015-09-08 | Fix some signed/unsigned compiler warnings. | Milan Broz | |
2015-09-08 | Fix benign warning in clang analysis output. | Milan Broz | |
2015-09-05 | Add zh_CN.po. | Milan Broz | |
2015-08-31 | Update es.po. | Milan Broz | |
2015-08-30 | Update nl.po. | Milan Broz | |
2015-08-28 | Update po files. | Milan Broz | |
2015-08-27 | Update fr.po. | Milan Broz | |
2015-08-27 | Override password quality check if used cipher is cipher_null. | Milan Broz | |
2015-08-27 | Update po files. | Milan Broz | |
2015-08-26 | Fix misleading error messages in reencrypt. | Milan Broz | |
2015-08-26 | Update libcryptsetup.h comments. | Milan Broz | |
2015-08-26 | Move string_to_size to userspace tools. | Milan Broz | |
2015-08-26 | Properly support stdin "-" handling for luksAddKey. | Milan Broz | |
2015-08-26 | Use stdin and "-" file check wrapper. | Milan Broz | |
2015-08-26 | Print cryptsetup library version in crypto init. | Milan Broz | |
2015-08-26 | Do not link FIPS helper to cryptsetup anymore. | Milan Broz | |
Just print info about FIPS mode in RNG init. | |||
2015-08-26 | Ingore Whirlpool test instead of failing. | Milan Broz | |
2015-08-19 | Cryptsetup resize will try resize also underlying device. | Milan Broz | |
If encrypted device is file-backed, resize should try to resize underlying loop device as well. | |||
2015-07-02 | If the null cipher is used, allow only empty password for LUKS. | Milan Broz | |
The cipher_null is no-encryption, it can be used for testing or temporarily when encrypting device (cryptsetup-reencrypt). Accepting only empty password prevents situation when you replace a LUKS header on an unlocking device with the faked header using null cipher (and the same UUID). Here a system could think that the device was properly unlocked (with any entered password) and will try to use this unencrypted partition instead. (IOW it prevents situation when attacker intentionaly forces an user to boot into dirrerent system just by LUKS header manipulation.) Properly configured systems should have an additional integrity protection in place here (LUKS here provides only confidentiality) but it is better to not not allow this situation in the first place. (Despite the fact that once you allow physical tampering of your system it cannot be properly secured anymore.) | |||
2015-07-02 | Do not use real password when unlocking "fake" header on reecryption. | Milan Broz | |
If reencrypt removes encryption (or adds encryption to not yet encrypted system) there is a temporary header using null (none) cipher. We do not need to pass through password when unlocking these devices. | |||
2015-07-02 | Allow to enter empty password through stdin pipe. | Milan Broz | |
Also always use empty passsword when using null cipher in tests. | |||
2015-07-02 | Silence repeated device removal in verity test. | Milan Broz | |
2015-04-19 | Update po files. | Milan Broz | |
2015-03-23 | Update README.md. | Milan Broz | |
2015-03-23 | Set devel version. | Milan Broz | |
2015-03-23 | Update po files. | Milan Broz | |
2015-03-23 | Include prototype for stat(). | Milan Broz | |
2015-03-23 | Bump libcryptsetup version. | Milan Broz | |
2015-03-23 | Prepare version 1.6.7. | Milan Broz | |
2015-03-20 | Update po files. | Milan Broz | |
2015-03-20 | Use silent rules in autoconf. | Milan Broz | |
2015-03-19 | Update po files. | Milan Broz | |
2015-03-19 | Update URLs (->gitlab.com). | Milan Broz | |
The code.google is going to be abandoned. Thank you you for all the fish. | |||
2015-03-19 | Fix typo in URL. | Milan Broz | |
2015-03-19 | Add notes about releases. | Milan Broz | |
2015-03-19 | Add README.md for project page info. | Milan Broz | |
2015-03-19 | Test device read only once for O_DIRECT. | Milan Broz | |
Also do not report error for disappeared device (it is reported later on real access). | |||
2015-03-18 | Detect if O_DIRECT is usable on device allocation. | Milan Broz | |
Try to read the first sector of a device when allocating device context. Should fix issue#247. | |||
2015-02-27 | Reorder algorithms for VeraCrypt modes. | Milan Broz | |
2015-02-26 | Update de.po. | Milan Broz | |
2015-02-25 | Clarify using of VeraCrypt modes in libcryptsetup.h. | Milan Broz | |
2015-02-24 | Support VeraCrypt devices (TrueCrypt extension). | Milan Broz | |
Add CRYPT_TCRYPT_VERA_MODES libcryptswtup flag and --veracrypt option. Fixes issue#245. | |||
2015-02-23 | Update kernel version in man page. | Milan Broz | |
2015-02-20 | Fix typo in man page. | Milan Broz | |
Fixes issue#244. | |||
2015-02-20 | Add low-level performance options for dmcrypt tuning. | Milan Broz | |
The patch adds the two options --perf-same_cpu_crypt --perf-submit_from_crypt_cpus that set the same named options inside dmcrypt (available in Linux kernel 3.20 and later). |