Pedro Monreal Gonzalez
766e121282
* Full release notes in:
- https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.0-ReleaseNotes
* Introduce support for inline mode (use HW sectors with additional hardware
metadata space).
* Finalize use of keyslot context API.
* Make all keyslot context types fully self-contained.
* Add --key-description and --new-key-description cryptsetup options.
* Support more precise keyslot selection in reencryption initialization.
* Allow reencryption to resume using token and volume keys.
* Cryptsetup repair command now tries to check LUKS keyslot areas for corruption.
* Opal2 SED: PSID keyfile is now expected to be 32 alphanumeric characters.
* Opal2: Avoid the Erase method and use Secure Erase for locking range.
* Opal2: Fix some error description (in debug only).
* Opal2: Do not allow deferred deactivation.
* Allow --reduce-device-size and --device-size combination for reencryption
(encrypt) action.
* Fix the userspace storage backend to support kernel "capi:" cipher specification format.
* Disallow conversion from LUKS2 to LUKS1 if kernel "capi:" cipher specification is used.
* Explicitly disallow kernel "capi:" cipher specification format for LUKS2
keyslot encryption.
* Do not allow conversion of LUKS2 to LUKS1 if an unbound keyslot is present.
* cryptsetup: Adjust the XTS key size for kernel "capi:" cipher specification.
* Remove keyslot warning about possible failure due to low memory.
* Do not limit Argon2 KDF memory cost on systems with more than 4GB of available memory.
* Properly report out of memory error for cryptographic backends implementing Argon2.
* Avoid KDF2 memory cost overflow on 32-bit platforms.
* Do not use page size as a fallback for device block size.
* veritysetup: Check hash device size in advance.
* Print a better error message for unsupported LUKS2 AEAD device resize.
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=213
17 lines
833 B
Plaintext
17 lines
833 B
Plaintext
-----BEGIN PGP SIGNATURE-----
|
|
|
|
iQIzBAABCAAdFiEEKikYJD/eRmSNBob52bBXe9k+mPwFAmhaZNcACgkQ2bBXe9k+
|
|
mPzlnQ//QW9L3cA+GZqhKF8tzjXTiKC15f9aljTYyX2vFoSV8B9m1D9UbycYvE0l
|
|
oae42flXRUKMSZIBvVydUn3d8Z8D56y5Jcmzt9BGl73EE9SX5b9C8W/z6iICpPpj
|
|
JoxMAN16zbV2vdoi0XESQRsVRSxepFQO9NfrGYIyJh23vXFBwOKseDLjuDWKD88N
|
|
4tsfrAc5/kpj0rxPqLztgqBuwlbUCIR9oLmbhtHiTNCGyL/ndlMLaWQ1iHr7Ujwn
|
|
3Haax9Z2bjNcCSNTeitWE+ICVTYTwFy2lEe1E6gHwqpAbkxsjXxyufcYEjBCFn8E
|
|
oZgKxxG+rkNPoo3qCJzlqSXyFW41Qb5BaYjGcG3mCyr6i7Ye8RlSkVsi5lUJQjb2
|
|
GXLp0x69YygxTi2mrjSl0teWR56lHgAyYLMdc5HmsM5C0fYxXlUBfzg8vLdJ0wut
|
|
XPllh9g3B2HI41iZnKWw9zXViMB60ZymxfUzMLxybywJqVpi/MzoGhDXsoQqIBq2
|
|
wgLg54V8O93DQpMJXB7N93vm2ASI31figfCdmW47SivPEiISQA9hgpuNwpy1tvG7
|
|
a9Mllytle0ytIYkdqRvMRXwaSAv63Q/pd8MefiivDdj1GOcmkLpo+njsCkp+IoAF
|
|
+DWXMcDOS19fuPxMiLPdXf7m0dTZfjMpG5C8uCNpf84LlWcLKEs=
|
|
=U/wu
|
|
-----END PGP SIGNATURE-----
|