aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-09-18cryptsetup: Add build for eng productHEADmastermainMark Salyzyn
Add Android.mk, popt helper, some static configuration files, NOTICE and MODULE_LICENSE_GPL file. Signed-off-by: Mark Salyzyn <salyzyn@google.com> Bug: 23181629 Bug: 24133481 Change-Id: Ib17c7ab4f9c3fca6b80765cac34c2ec22e670961
2015-09-08Set devel version.Milan Broz
2015-09-08Add release notes for 1.6.7 link.Milan Broz
2015-09-08Prepare version 1.6.8.Milan Broz
2015-09-08Add 1.6.8 release notes.Milan Broz
2015-09-08Fix some signed/unsigned compiler warnings.Milan Broz
2015-09-08Fix benign warning in clang analysis output.Milan Broz
2015-09-05Add zh_CN.po.Milan Broz
2015-08-31Update es.po.Milan Broz
2015-08-30Update nl.po.Milan Broz
2015-08-28Update po files.Milan Broz
2015-08-27Update fr.po.Milan Broz
2015-08-27Override password quality check if used cipher is cipher_null.Milan Broz
2015-08-27Update po files.Milan Broz
2015-08-26Fix misleading error messages in reencrypt.Milan Broz
2015-08-26Update libcryptsetup.h comments.Milan Broz
2015-08-26Move string_to_size to userspace tools.Milan Broz
2015-08-26Properly support stdin "-" handling for luksAddKey.Milan Broz
2015-08-26Use stdin and "-" file check wrapper.Milan Broz
2015-08-26Print cryptsetup library version in crypto init.Milan Broz
2015-08-26Do not link FIPS helper to cryptsetup anymore.Milan Broz
Just print info about FIPS mode in RNG init.
2015-08-26Ingore Whirlpool test instead of failing.Milan Broz
2015-08-19Cryptsetup resize will try resize also underlying device.Milan Broz
If encrypted device is file-backed, resize should try to resize underlying loop device as well.
2015-07-02If the null cipher is used, allow only empty password for LUKS.Milan Broz
The cipher_null is no-encryption, it can be used for testing or temporarily when encrypting device (cryptsetup-reencrypt). Accepting only empty password prevents situation when you replace a LUKS header on an unlocking device with the faked header using null cipher (and the same UUID). Here a system could think that the device was properly unlocked (with any entered password) and will try to use this unencrypted partition instead. (IOW it prevents situation when attacker intentionaly forces an user to boot into dirrerent system just by LUKS header manipulation.) Properly configured systems should have an additional integrity protection in place here (LUKS here provides only confidentiality) but it is better to not not allow this situation in the first place. (Despite the fact that once you allow physical tampering of your system it cannot be properly secured anymore.)
2015-07-02Do not use real password when unlocking "fake" header on reecryption.Milan Broz
If reencrypt removes encryption (or adds encryption to not yet encrypted system) there is a temporary header using null (none) cipher. We do not need to pass through password when unlocking these devices.
2015-07-02Allow to enter empty password through stdin pipe.Milan Broz
Also always use empty passsword when using null cipher in tests.
2015-07-02Silence repeated device removal in verity test.Milan Broz
2015-04-19Update po files.Milan Broz
2015-03-23Update README.md.Milan Broz
2015-03-23Set devel version.Milan Broz
2015-03-23Update po files.Milan Broz
2015-03-23Include prototype for stat().Milan Broz
2015-03-23Bump libcryptsetup version.Milan Broz
2015-03-23Prepare version 1.6.7.Milan Broz
2015-03-20Update po files.Milan Broz
2015-03-20Use silent rules in autoconf.Milan Broz
2015-03-19Update po files.Milan Broz
2015-03-19Update URLs (->gitlab.com).Milan Broz
The code.google is going to be abandoned. Thank you you for all the fish.
2015-03-19Fix typo in URL.Milan Broz
2015-03-19Add notes about releases.Milan Broz
2015-03-19Add README.md for project page info.Milan Broz
2015-03-19Test device read only once for O_DIRECT.Milan Broz
Also do not report error for disappeared device (it is reported later on real access).
2015-03-18Detect if O_DIRECT is usable on device allocation.Milan Broz
Try to read the first sector of a device when allocating device context. Should fix issue#247.
2015-02-27Reorder algorithms for VeraCrypt modes.Milan Broz
2015-02-26Update de.po.Milan Broz
2015-02-25Clarify using of VeraCrypt modes in libcryptsetup.h.Milan Broz
2015-02-24Support VeraCrypt devices (TrueCrypt extension).Milan Broz
Add CRYPT_TCRYPT_VERA_MODES libcryptswtup flag and --veracrypt option. Fixes issue#245.
2015-02-23Update kernel version in man page.Milan Broz
2015-02-20Fix typo in man page.Milan Broz
Fixes issue#244.
2015-02-20Add low-level performance options for dmcrypt tuning.Milan Broz
The patch adds the two options --perf-same_cpu_crypt --perf-submit_from_crypt_cpus that set the same named options inside dmcrypt (available in Linux kernel 3.20 and later).