aboutsummaryrefslogtreecommitdiff
path: root/utils/cryptsetup
Commit message (Collapse)AuthorAge
* cryptsetup: update to version 2.7.1Daniel Golle2024-04-04
| | | | | | | | | | | | | | The most notable change is the introduction of (optional) support for hardware OPAL disk encryption. However, as this requires Linux 6.4 or later, support for OPAL is implicitely disabled until targets used for the package build have been updated to Linux 6.6. See release notes for 2.7.0 and 2.7.1 for more details: https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.7/v2.7.0-ReleaseNotes https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.7/v2.7.1-ReleaseNotes Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* utils/cryptsetup: assign PKG_CPE_IDFabrice Fontaine2024-01-25
| | | | | | https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:cryptsetup_project:cryptsetup Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
* cryptsetup: update to version 2.6.1Daniel Golle2023-08-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Cryptsetup 2.6.1 Release Notes ============================== Stable bug-fix release with minor extensions. All users of cryptsetup 2.6.0 should upgrade to this version. Changes since version 2.6.0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ * bitlk: Fixes for BitLocker-compatible on-disk metadata parser (found by new cryptsetup OSS-Fuzz fuzzers). - Fix a possible memory leak if the metadata contains more than one description field. - Harden parsing of metadata entries for key and description entries. - Fix broken metadata parsing that can cause a crash or out of memory. * Fix possible iteration overflow in OpenSSL2 PBKDF2 crypto backend. OpenSSL2 uses a signed integer for PBKDF2 iteration count. As cryptsetup uses an unsigned value, this can lead to overflow and a decrease in the actual iteration count. This situation can happen only if the user specifies --pbkdf-force-iterations option. OpenSSL3 (and other supported crypto backends) are not affected. * Fix compilation for new ISO C standards (gcc with -std=c11 and higher). * fvault2: Fix compilation with very old uuid.h. * verity: Fix possible hash offset setting overflow. * bitlk: Fix use of startup BEK key on big-endian platforms. * Fix compilation with latest musl library. Recent musl no longer implements lseek64() in some configurations. Use lseek() as 64-bit offset is mandatory for cryptsetup. * Do not initiate encryption (reencryption command) when the header and data devices are the same. If data device reduction is not requsted, this leads to data corruption since LUKS metadata was written over the data device. * Fix possible memory leak if crypt_load() fails. * Always use passphrases with a minimal 8 chars length for benchmarking. Some enterprise distributions decided to set an unconditional check for PBKDF2 password length when running in FIPS mode. This questionable change led to unexpected failures during LUKS format and keyslot operations, where short passwords were used for benchmarking PBKDF2 speed. PBKDF2 benchmark calculations should not be affected by this change. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: fix compilation with musl 1.2.4Daniel Golle2023-05-18
| | | | | | | Similar to mdadm also cryptsetup now requires _LARGEFILE64_SOURCE. Add -D_LARGEFILE64_SOURCE to TARGET_CFLAGS to fix compilation. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: update to version 2.6.0Daniel Golle2022-12-20
| | | | | | | | | Update to new major release of cryptsetup. For details, please see the release notes[1]. [1]: https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.6/v2.6.0-ReleaseNotes Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: update to version 2.5.0Daniel Golle2022-09-07
| | | | | | | | Update to new major release of cryptsetup. For details, please see the release notes[1]. [1]: https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.5/v2.5.0-ReleaseNotes Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: fix library paths by calling autoreconfDaniel Golle2022-07-23
| | | | | | | | | Use PKG_FIXUP:=autoreconf when building cryptsetup to prevent accidental linkage against host libraries. Fixes: #19011 Reported-by: @dreirund Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: update to version 2.4.3Josef Schlehofer2022-01-18
| | | | | | Fixes: CVE-2021-4122 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* cryptsetup: update to version 2.4.1Daniel Golle2021-10-09
| | | | | | | Package new experimental SSH token authenticator plugin as new package 'cryptsetup-ssh'. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: update to version 2.3.6Javier Marcet2021-07-24
| | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* cryptsetup: update to version 2.3.5Daniel Golle2021-03-25
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: fix compilation with full NLSRosen Penev2020-09-28
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* cryptsetup: update to version 2.3.4Daniel Golle2020-09-27
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: update to 2.3.3Rosen Penev2020-06-06
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* cryptsetup: add NLS supportRosen Penev2020-03-14
| | | | | | | | Needed for uClibc-ng. Added InstallDev section. Because why not. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* cryptsetup: update to 2.3.0Rosen Penev2020-03-04
| | | | | | | | | | | Use PKG_INSTALL for consistency between packages. Add PKG_BUILD_PARALLEL for faster compilation. Fix wrong locking path. First discovered here: https://forum.openwrt.org/t/cannot-setup-dm-crypt/56836 Signed-off-by: Rosen Penev <rosenp@gmail.com>
* cryptsetup: update to version 2.2.2Daniel Golle2020-01-07
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* treewide: Use default PKG_BUILD_DIR when possibleJeffery To2019-10-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This removes lines that set PKG_BUILD_DIR when the set value is no different from the default value. Specifically, the line is removed if the assigned value is: * $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION) The default PKG_BUILD_DIR was updated[1] to incorporate BUILD_VARIANT if it is set, so now this is identical to the default value. * $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_SOURCE_SUBDIR) if PKG_SOURCE_SUBDIR is set to $(PKG_NAME)-$(PKG_VERSION), making it the same as the previous case * $(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION) This is the same as the default PKG_BUILD_DIR when there is no BUILD_VARIANT. * $(BUILD_DIR)/[name]-$(PKG_VERSION) where [name] is a string that is identical to PKG_NAME [1]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=e545fac8d968864a965edb9e50c6f90940b0a6c9 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* treewide: Change .*GPL.*+ licenses to SPDX compatible identifierSven Eckelmann2019-09-10
| | | | | | | | The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL licenses. But a lot of packages did use a different, non-SPDX style with a "+" at the end instead of "-or-later". Signed-off-by: Sven Eckelmann <sven@narfation.org>
* cryptsetup: update to version 2.1.0Daniel Golle2019-03-02
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: Remove OpenSSL variantRosen Penev2019-01-31
| | | | | | | | | | OpenSSL is only used for hashing while being a huge dependency (689.4KB for mips_24kc. Cryptsetup also supports and recommends argon2 for hashing, which is not provided by OpenSSL. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* cryptsetup: Replace libgcrypt with AFALGRosen Penev2019-01-31
| | | | | | | | | | | | Add several configure arguments to speed up build time. Switch from using libgcrypt to using the kernel directly. This has a number of benefits including smaller size and faster speed. It also allows selection of desired crypto primatives instead of having all of them. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* cryptsetup: update to version 2.0.6Daniel Golle2019-01-29
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: Update to 2.0.5Rosen Penev2018-10-30
| | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* cryptsetup: Update to 2.0.4Rosen Penev2018-08-07
| | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* cryptsetup: Update to 2.0.3Rosen Penev2018-06-14
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* cryptsetup: update to version 1.7.5Daniel Golle2017-06-05
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: move to Encryption submenuAlberto Bursi2016-10-23
| | | | | Part of a wider housekeeping effort on the packages repository. Signed-off-by: Alberto Bursi <alberto.bursi@outlook.it>
* cryptsetup: update to version 1.7.2Daniel Golle2016-06-14
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: fix MD5SUM forgotten during updateDaniel Golle2016-03-09
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: update to version 1.7.1Daniel Golle2016-03-09
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: update to 1.7.0Daniel Golle2015-12-03
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: bump versionDaniel Golle2015-04-02
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: bump copyright headerDaniel Golle2014-12-05
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: add PKG_LICENSE informationDaniel Golle2014-12-05
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* import cryptsetup from oldpackagesDaniel Golle2014-12-05
and bump version to 1.6.6 and switch to kernel.org mirror Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Powered by cgit, Themed by Ted Yin.