Skip to content

[regression]: cryptsetup with luks2 and serpent-xts-plain64 is broken

When i try to create an encrypt file with luks2 and serpent-xts-plain64:

cryptsetup --type luks2 --pbkdf argon2id --cipher serpent-xts-plain64 --key-size 512 --hash sha512 --use-random --verify-passphrase luksFormat disk.img

I get the error: Cannot use serpent-xts-plain64 cipher for keyslot encryption.

Doing the same with luks2 and aes-xts-plain64 works:

cryptsetup --type luks2 --pbkdf argon2id --cipher aes-xts-plain64 --key-size 512 --hash sha512 --use-random --verify-passphrase luksFormat disk.img

This seems to be a bug and should get fixed.

BTW doing the same with luks1 and serpent-xts-plain64 works:

cryptsetup --type luks1 --cipher serpent-xts-plain64 --key-size 512 --hash sha512 --use-random --verify-passphrase luksFormat disk.img

Edited by Thomas