1. 13 Mar, 2019 1 commit
  2. 28 Jan, 2019 1 commit
  3. 25 Jan, 2019 1 commit
  4. 22 Jan, 2019 1 commit
  5. 10 Jan, 2019 1 commit
    • Milan Broz's avatar
      Add --debug-json switch and log level. · 51dd2762
      Milan Broz authored
      The JSON structures should not be printed by default to debug log.
      
      This flag introduces new debug level that prints JSON structures
      and keeps default debug output separate.
      51dd2762
  6. 07 Jan, 2019 1 commit
    • Milan Broz's avatar
      Add keyslot encryption params. · 307a7ad0
      Milan Broz authored
      This patch makes available LUKS2 per-keyslot encryption settings to user.
      
      In LUKS2, keyslot can use different encryption that data.
      
      We can use new crypt_keyslot_get_encryption and crypt_keyslot_set_encryption
      API calls to set/get this encryption.
      
      For cryptsetup new --keyslot-cipher and --keyslot-key-size options are added.
      
      The default keyslot encryption algorithm (if cannot be derived from data encryption)
      is now available as configure options (default is aes-xts-plain64 with 512-bits key).
      NOTE: default was increased from 256-bits.
      307a7ad0
  7. 01 Jan, 2019 1 commit
  8. 12 Dec, 2018 1 commit
  9. 06 Dec, 2018 1 commit
  10. 05 Dec, 2018 2 commits
    • Milan Broz's avatar
      integrity: support detached data device. · 316ec5b3
      Milan Broz authored
      Since the kernel 4.18 there is a possibility to speficy external
      data device for dm-integrity that stores all integrity tags.
      
      The new option --data-device in integritysetup uses this feature.
      316ec5b3
    • Milan Broz's avatar
      Add automatic recalculation to dm-integrity. · d06defd8
      Milan Broz authored
      Linux kernel since version 4.18 supports automatic background
      recalculation of integrity tags for dm-integrity.
      
      This patch adds new integritysetup --integrity-recalculate options
      that uses this option.
      d06defd8
  11. 03 Dec, 2018 1 commit
  12. 26 Oct, 2018 1 commit
  13. 21 Jul, 2018 1 commit
    • Rafael Fontenelle's avatar
      Fix typos · f35ec977
      Rafael Fontenelle authored
      A bunch of typos reported by codespell, most of them comments in the code
      f35ec977
  14. 19 Jul, 2018 1 commit
  15. 11 Jul, 2018 1 commit
  16. 03 May, 2018 1 commit
  17. 24 Apr, 2018 1 commit
  18. 19 Apr, 2018 2 commits
  19. 12 Apr, 2018 1 commit
  20. 31 Mar, 2018 1 commit
    • Milan Broz's avatar
      veritysetup: add support for --check-at-most-once option. · fef5121c
      Milan Broz authored
      The kernel 4.17 will include a new dm-verity flag that
      instructs kernel to verify data blocks only once.
      
      This patch adds support for it to libcryptsetup and veritysetup.
      
      This flag can be dangerous; if you can control underlying device
      (you can change its content after it was verified) it will no longer
      prevent reading tampered data and also it does not prevent to silent
      data corrruptions that appears after the block was once read.
      fef5121c
  21. 23 Mar, 2018 1 commit
  22. 08 Mar, 2018 1 commit
    • Milan Broz's avatar
      Support detached header for cryptsetup-reencrypt. · a22a24bc
      Milan Broz authored
      This patch allows encryption/decryption of the whole device,
      IOW add encryption later with detached header.
      
      This operation can be dangerous, there is no fixed bindings between
      the specific LUKS header and data device (encrypted data device
      contains no magic signatures).
      a22a24bc
  23. 27 Feb, 2018 1 commit
  24. 13 Feb, 2018 2 commits
  25. 20 Jan, 2018 1 commit
  26. 04 Jan, 2018 1 commit
  27. 07 Dec, 2017 1 commit
    • Milan Broz's avatar
      Limit KDF memory by available physical memory. · fa1f8c0d
      Milan Broz authored
      On some systems the requested amount of memory causes OOM killer
      to kill the process (instead of returning ENOMEM).
      
      For now, we never try to use more than half of available
      physical memory.
      fa1f8c0d
  28. 08 Nov, 2017 1 commit
  29. 30 Oct, 2017 1 commit
  30. 16 Oct, 2017 1 commit
  31. 14 Oct, 2017 1 commit
  32. 12 Oct, 2017 1 commit
    • Milan Broz's avatar
      Use non-recursive automake. · d77bbe93
      Milan Broz authored
      This change also causes that now binaries and libraries are placed in
      build root directory.
      
      Now we can use subdir-objects for automake.
      d77bbe93
  33. 10 Oct, 2017 1 commit
  34. 04 Oct, 2017 1 commit
  35. 27 Sep, 2017 1 commit
  36. 24 Sep, 2017 2 commits