aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Expand)AuthorFilesLines
11 daysAvoid divide by zero in uint64_mult_overflow.HEADmastermainMilan Broz1-0/+2
2024-04-09Update README for version 2.7.2.Milan Broz1-4/+4
2024-04-09Add warning about OPAL admin PIN to man page and release notes.Milan Broz2-0/+16
2024-04-04Add 2.7.2 release notes.Milan Broz1-0/+23
2024-04-04tests: print OPAL device parameters in test envirenment if specifiedMilan Broz1-0/+5
2024-04-04CI: add WD PC SN740 OPAL drive jobDaniel Zatovic1-33/+33
2024-04-04po: update es.po (from translationproject.org)Antonio Ceballos1-483/+513
2024-04-03Compile --disable-hw-opal variant.coverity_scanOndrej Kozina1-1/+2
2024-04-03Do not check passphrase quality in-before erase.Ondrej Kozina1-2/+1
2024-04-03Relicense older script to LGPL fro GPL2.0 only.Milan Broz1-6/+13
2024-04-03FAQ: update license version to CC BY-SA 4.0.Milan Broz1-10/+5
2024-04-03Fix invalid assert for hw-opal data segment keys.Ondrej Kozina2-54/+61
2024-04-02Fix data segment length compensation on misaligned partitions.Ondrej Kozina1-2/+2
2024-03-26CI: make OPAL jobs uninterruptibleDaniel Zatovic1-3/+3
2024-03-26Add --hw-opal-factory-reset switch in erase options explicitly.Ondrej Kozina1-0/+7
2024-03-26Check HW OPAL range parameters in proper units.Ondrej Kozina3-12/+22
2024-03-21tests: run systemd tests using meson only when requestedDaniel Zatovic2-1/+2
2024-03-07Update Readme for 2.7.1.Milan Broz1-4/+4
2024-03-07tests: Fix Makefile * Meson to include all fs images.Milan Broz2-1/+4
2024-03-07Update LUKS2 spec.Milan Broz1-0/+0
2024-03-07Add 2.7.1 release notes.Milan Broz1-0/+30
2024-03-07test: Fix tests on RHEL7 clones (no keyring in dm-crypt).Milan Broz3-19/+61
2024-03-07Add xfs V5 image to tests.Milan Broz5-12/+27
2024-03-06tests: fix compat-test-opal bug for empty LUKS2 passphrase.Ondrej Kozina1-2/+2
2024-03-06tests: move luks1 decryption resume test.Ondrej Kozina1-1/+1
2024-03-06tests: fix fips mode detection contradiction in various tests.Ondrej Kozina5-10/+10
2024-03-06po: update uk.po (from translationproject.org)Yuri Chornoivan1-484/+514
2024-03-06po: update ro.po (from translationproject.org)Remus-Gabriel Chelu1-483/+515
2024-03-06po: update pl.po (from translationproject.org)Jakub Bogusz1-484/+514
2024-03-06po: update ja.po (from translationproject.org)Hiroshi Takekawa1-484/+514
2024-03-06po: update fr.po (from translationproject.org)Frédéric Marchal1-485/+515
2024-03-06po: update de.po (from translationproject.org)Roland Illig1-483/+513
2024-03-06po: update cs.po (from translationproject.org)Petr Pisar1-484/+516
2024-03-06Set devel version.Milan Broz2-2/+2
2024-03-05Add regression test for resuming LUKS1 decryption.Ondrej Kozina4-2/+16
2024-03-05Fix regression in LUKS1 decryption.Ondrej Kozina1-1/+2
2024-02-29Require --debug log in bug report issue template.Milan Broz1-0/+3
2024-02-29Allow all stable branches in GitHub actions.Milan Broz2-4/+2
2024-02-29Allow --link-vk-to-keyring with --test-passphrase option.Ondrej Kozina4-1/+61
2024-02-28Fix abort triggered by initializing decryption via --active-name.Ondrej Kozina2-12/+29
2024-02-22Fix indentation in integritysetup man page and crypt description.Milan Broz1-5/+3
2024-02-22Sort options in man pages alphabetically.Milan Broz4-984/+984
2024-02-22Fix JSON exampe in progress-frequency option.Milan Broz2-4/+4
2024-02-22Fix veritysetup man page typo.Milan Broz1-2/+2
2024-02-22Fix compilation with libargon2 argon when internal disabledSergei Ilinykh1-2/+3
2024-02-22CI: fix improper distro specification for 32-bit Debian.Daniel Zatovic2-6/+6
2024-02-22CI: don't store kernel log, only check for coredumps.Daniel Zatovic9-12/+10
2024-02-22CI: increase disk size for csmock job.Daniel Zatovic1-0/+1
2024-02-22CI: add OPAL jobs.Daniel Zatovic2-0/+135
2024-02-22CI: update jobs for new CI infrastrucureDaniel Zatovic9-25/+41
2024-02-21Fix crypto vectors test in meson.Ondrej Kozina1-0/+2
2024-02-18Skip test if keyctl is missingTobias Rosenkranz1-0/+1
2024-02-13Do not require argon2.h if implemented natively in crypto library.Milan Broz1-3/+6
2024-02-13Fix mistake in crypt_set_keyring_to_link documentation.Ondrej Kozina1-1/+1
2024-02-12cryptsetup.spec: drop libargon2 in favour of openssl implementation.Ondrej Kozina1-2/+2
2024-02-09Fix configure Argon2 OpenSSL detection to not compile internal Argon2.Milan Broz2-3/+6
2024-01-24Version 2.7.0.v2.7.0Milan Broz8-502/+534
2024-01-23Fix local variable name that hides global one.Milan Broz1-4/+4
2024-01-23Update copyright notice to include 2024 year.Milan Broz133-247/+247
2024-01-23Unify error code for missing key description.Ondrej Kozina3-3/+3
2024-01-23Update API documentation for crypt_set_keyring_to_link.Ondrej Kozina1-3/+0
2024-01-23Replace code for missing key error in API.Ondrej Kozina3-6/+7
2024-01-22tests: use per-test keyring for caching VKs.Ondrej Kozina1-25/+52
2024-01-22Do not drop keys from keyring on successfull reencryption recovery.Ondrej Kozina1-1/+2
2024-01-20Fix typo in verity test.Milan Broz1-1/+1
2024-01-20Fix autoconf valgrind test.Milan Broz1-2/+2
2024-01-19Add tests for device activation using multiple VKs.Daniel Zatovic3-7/+273
2024-01-19Allow activating multi key devices using VKs in keyring.Daniel Zatovic7-22/+300
2024-01-19Add tests for storing VK in keyring during resume.Daniel Zatovic1-0/+9
2024-01-19Add tests for storing multiple VKs in a custom keyring.Daniel Zatovic2-3/+161
2024-01-19Allow linking multiple VKs (also in reencryption).Daniel Zatovic5-48/+225
2024-01-19Fix tests to support --disable-keyring option.Milan Broz2-18/+8
2024-01-19po: update es.po (from translationproject.org)Antonio Ceballos1-689/+938
2024-01-19po: update cs.po (from translationproject.org)Petr Pisar1-691/+943
2024-01-17LUKS2: add more sanity assignments to header code.Milan Broz1-0/+2
2024-01-17LUKS2: add sanity check for hdr_size.Milan Broz1-5/+14
2024-01-17Add a few tainted data info for coverity to avoid warnings.Milan Broz2-8/+19
2024-01-17Silence false positive cppcheck warning.Milan Broz1-1/+1
2024-01-17Fix signed (error) return from read in loop utils.Milan Broz1-1/+1
2024-01-17Use gcc 13 for GitHub actions.Milan Broz3-3/+3
2024-01-16Fix some grammar issues suggested by auto-correction tools.Ondrej Kozina1-14/+14
2024-01-16Update kernel keyring usage documentation.Ondrej Kozina1-0/+23
2024-01-15Fix some grammar issues suggested by auto-correction tools.Ondrej Kozina1-15/+15
2024-01-15docs: Describe additional LUKS2 locks.Ondrej Kozina1-0/+36
2024-01-05tests: add in-place LUKS2 encryption api test.Ondrej Kozina1-0/+54
2024-01-05tests: add helper for creating arbitrary linear mapping.Ondrej Kozina2-7/+23
2024-01-05Respect CRYPT_ACTIVATE_SHARED in reencryption.Ondrej Kozina3-4/+7
2024-01-05po: update uk.po (from translationproject.org)Yuri Chornoivan1-152/+163
2024-01-05po: update ro.po (from translationproject.org)Remus-Gabriel Chelu1-152/+164
2024-01-05po: update pl.po (from translationproject.org)Jakub Bogusz1-150/+161
2024-01-05po: update ja.po (from translationproject.org)Hiroshi Takekawa1-150/+161
2024-01-05po: update fr.po (from translationproject.org)Frédéric Marchal1-150/+161
2024-01-05po: update de.po (from translationproject.org)Roland Illig1-151/+162
2023-12-22Add note for luksSuspend to man page.Milan Broz1-0/+4
2023-12-20Update cryptsetup.spec.Milan Broz1-3/+3
2023-12-20man: Update authenticated encryption trim description and add referencesKrassy Boykinov1-4/+6
2023-12-20Version 2.7.0-rc1.v2.7.0-rc1Milan Broz4-155/+166
2023-12-20Fix doxygen tags for API docs.Milan Broz1-14/+28
2023-12-20Update release notes for 2.7.0-rc1 and LUKS2 doc.Milan Broz2-12/+22
2023-12-20Add keyring linking API placeholders for multi-key scenarios.Daniel Zatovic4-50/+87
2023-12-19opal: Fix benign gcc warning for possible uninitialized value.Milan Broz1-1/+1
2023-12-19opal: Do not verify passphrase by default on luksErase.Milan Broz1-1/+1
2023-12-18opal: add comments to all lockless opal calls.Ondrej Kozina1-0/+11
2023-12-17Report Argon2 crypto backend version in debug outputMilan Broz5-11/+42
2023-12-17Use uppercase OPAL in messages.Milan Broz3-9/+9
2023-12-13opal: add exclusive lock to avoid race.Ondrej Kozina5-4/+130
2023-12-13opal: do not always re-lock range on failed activation.Ondrej Kozina3-39/+56
2023-12-13test: check if device remains usable after failed attempt to double activation.Ondrej Kozina1-1/+5
2023-12-13Drop unused crypt_read_lock helper.Ondrej Kozina2-25/+0
2023-12-13opal: no need to export internal opal_enabled function.Ondrej Kozina2-28/+22
2023-12-04opal: erase key cached in kernel when LR gets locked.Ondrej Kozina2-7/+15
2023-12-04po: update zh_CN.po (from translationproject.org)Boyuan Yang1-1464/+3415
2023-12-04po: update uk.po (from translationproject.org)Yuri Chornoivan1-684/+925
2023-12-04po: update ro.po (from translationproject.org)Remus-Gabriel Chelu1-691/+936
2023-12-04po: update pl.po (from translationproject.org)Jakub Bogusz1-681/+919
2023-12-04po: update ja.po (from translationproject.org)Hiroshi Takekawa1-681/+919
2023-12-04po: update fr.po (from translationproject.org)Frédéric Marchal1-687/+925
2023-12-04po: update de.po (from translationproject.org)Roland Illig1-689/+927
2023-12-04Add missing vectors tests in valgrind setup.Ondrej Kozina1-0/+9
2023-12-04Simplify meson tests.Ondrej Kozina1-304/+32
2023-11-30Revert "tests: Temporarily disable veritysetup tasklet option test."Milan Broz1-3/+2
2023-11-30fuzz: Try to limit image size in crypt2_load_proto_plain_json_fuzzMilan Broz1-4/+11
2023-11-29Version 2.7.0-rc0.v2.7.0-rc0Milan Broz1-0/+6
2023-11-29Fix some typos found by lintian.Milan Broz13-18/+18
2023-11-29Update pot file.Milan Broz1-673/+931
2023-11-29Tweak some error messages.Milan Broz3-6/+7
2023-11-28Add release notes for 2.7.0-rc0.Milan Broz1-0/+435
2023-11-28Add hw_opal.c for translation.Milan Broz1-0/+1
2023-11-28Set version 2.7.0-rc0.Milan Broz2-4/+4
2023-11-28meson: fix meson_dist_convert scriptMilan Broz1-1/+1
2023-11-28Add missing files to autoconf make dist.Milan Broz2-1/+3
2023-11-28Use proper integer constant in meson_options.txtOndrej Kozina1-1/+1
2023-11-28Override meson default prefix.Ondrej Kozina1-0/+1
2023-11-28Fix some coverity scan issues.Milan Broz2-2/+8
2023-11-27Always print error message for invalid keyring definition.Milan Broz1-15/+15
2023-11-26po: update sr.po (from translationproject.org)Мирослав Николић1-651/+748
2023-11-26po: update ru.po (from translationproject.org)Yuri Kozlov1-6/+6
2023-11-26po: update pl.po (from translationproject.org)Jakub Bogusz1-245/+249
2023-11-26po: update es.po (from translationproject.org)Antonio Ceballos1-1155/+1519
2023-11-26fuzz: add missing flex (util-linux req.) to fix fuzzing buildMilan Broz1-1/+1
2023-11-22tests: fail early if PSID reset does not work for device.Milan Broz1-6/+14
2023-11-22Suspend and resume also dm-integrity device with AEAD.Milan Broz3-7/+98
2023-11-21Do not run sector read check on suspended device.Milan Broz2-1/+21
2023-11-21Do not require init_done for some deive helpers.Milan Broz1-2/+2
2023-11-21Fix wrong key id set when resuming LUKS2 device.Ondrej Kozina2-1/+4
2023-11-20CI: change TSS package name for Debian 12Daniel Zatovic1-1/+1
2023-11-17Drop fake_token_path symbol from tests.Ondrej Kozina3-30/+2
2023-11-17Do not use fake-token-path in ssh and systemd plugin tests.Ondrej Kozina5-34/+46
2023-11-16Add --external-tokens-path parameter in cryptsetup.Ondrej Kozina11-6/+82
2023-11-16Add crypt_token_set_external_path API.Ondrej Kozina3-1/+46
2023-11-15Drop deprecated use of implicit meson setup command.Ondrej Kozina1-2/+2
2023-11-15Fix systemd-test-plugin initialization.Ondrej Kozina1-2/+2
2023-11-15Fix fake systemd tpm path symbol.Ondrej Kozina1-2/+2
2023-11-15compat-test-opal does not depend on differ util.Ondrej Kozina1-1/+0
2023-11-15Speed up compat-test-opal valgrind test.Ondrej Kozina1-4/+8
2023-11-15Enable valgrind tests in meson.Ondrej Kozina25-73/+538
2023-11-15Fix invalid comparison of bool and int types in root meson.build.Ondrej Kozina1-2/+2
2023-11-15Increase minimal meson version to 0.64Ondrej Kozina3-15/+4
2023-11-15CI: disable -Wdeclaration-after-statement warningDaniel Zatovic1-1/+0
2023-11-15Dont mix declarations with code.Daniel Zatovic1-5/+5
2023-11-15Remove obsolate AC_C_CONST macro.Daniel Zatovic1-1/+0
2023-11-13CI: don't use non-existent meson flagDaniel Zatovic1-1/+1
2023-11-13CI: switch compilation test to Ubuntu Lunar (23.04)Daniel Zatovic2-4/+4
2023-11-13CI: switch Debian runner from 11 to 12Daniel Zatovic1-5/+5
2023-11-13tests: Temporarily disable veritysetup tasklet option test.Milan Broz1-2/+3
2023-11-07tests: Clean up also dm-integrity device in OPAL testMilan Broz1-0/+1
2023-11-07Fix memory leaks detected in compat-test-opal.Ondrej Kozina2-5/+8
2023-11-06tests: Do not run OPAL test with valgrind if variables are not setMilan Broz1-1/+1
2023-11-06Add hint about missing OPAL support in kernel.Ondrej Kozina1-1/+1
2023-11-06Enable tests fixed with recent commits.Ondrej Kozina1-7/+0
2023-11-06Abort LUKS2 reencryption early if OPAL device used.Ondrej Kozina1-0/+5
2023-11-06Add LUKS2 OPAL requirement flag.Ondrej Kozina3-10/+30
2023-11-06Add more onlyLUKS helpers for convenience.Ondrej Kozina3-11/+21
2023-11-03Fix memory leak in kernel keyring keyslot context.Ondrej Kozina2-9/+5
2023-11-03Fix memleak in test.Ondrej Kozina1-7/+0
2023-11-03Fix memory leak in device context.Ondrej Kozina1-0/+1
2023-11-02Remove inital opal-test.Ondrej Kozina3-104/+1
2023-11-02Add basic compat-opal-test.Ondrej Kozina3-0/+1325
2023-11-02Do not allow decryption on devices with unsupported parameters.Ondrej Kozina1-0/+2
2023-11-02Do not allow --integrity option in reencryption action.Ondrej Kozina1-2/+2
2023-11-02Move LUKS2 legacy reencryption flag check.Ondrej Kozina1-5/+9
2023-11-02Restrict --hw-opal options only to luksFormat action.Ondrej Kozina2-2/+4
2023-11-02Fail early if OPAL is selected with LUKS1.Ondrej Kozina1-0/+5
2023-11-02Dump OPAL key size in bits.Ondrej Kozina1-1/+1
2023-11-02Do not fail format actions by interrupting device wipe.Ondrej Kozina2-2/+10
2023-10-31Add missing exclusive open check in crypt_format_luks2_opal.Ondrej Kozina1-0/+14
2023-10-31Improve cmd line options man pages related to SED OPAL.Ondrej Kozina1-2/+18
2023-10-31Add --key-file support in luksErase action with LUKS2 opal.Ondrej Kozina3-5/+18
2023-10-31Correctly erase opal lr when luksFormat action fails.Ondrej Kozina1-7/+22
2023-10-30fuzzing: Fix crypt2_load_fuzz to not touch const dataMilan Broz1-48/+50
2023-10-27crypto_backend: remove superfluous memset fot hash and hmac contextsMilan Broz3-6/+0
2023-10-27tests: fix oss-fuzz buildMilan Broz1-2/+2
2023-10-18Fix tests in FIPS mode.Ondrej Kozina1-1/+1
2023-10-16Respect keyslot id while activating device by token.Ondrej Kozina2-45/+120
2023-10-16libdevmapper: propagate key mgmt related kernel ioctl error on _dm_create_dev...Lennart Poettering1-1/+9
2023-10-09Check passphrase for user selected keyslot only.Ondrej Kozina1-1/+1
2023-10-05plain: Add note to man page about cipher options.Milan Broz1-2/+6
2023-10-05tests: Avoid new plain type warnings if missing options.Milan Broz5-41/+43
2023-10-05plain: Set default cipher to aes-xts-plain64 and hash to sha256.Milan Broz2-4/+4
2023-10-05plain: Print warning if using default cipher ahd hash options.Milan Broz1-0/+18