| == Cryptsetup 1.1.2 Release Notes == |
| |
| This release fixes a regression (introduced in 1.1.1 version) in handling |
| key files containing new line characters (affects only files read from |
| standard input). |
| |
| Cryptsetup can accept passphrase on stdin (standard input). |
| |
| Handling of new line (\n) character is defined by input specification: |
| |
| * if keyfile is specified as "-" (using --key-file=- of by "-" positional argument |
| in luksFormat and luksAddKey, like cat file | cryptsetup --key-file=- <action>), |
| input is processed as normal binary file and no new line is interpreted. |
| |
| * if there is no key file specification (with default input from stdin pipe |
| like echo passphrase | cryptsetup <action>) input is processed as input from terminal, |
| reading will stop after new line is detected. |
| |
| Moreover, luksFormat now understands --key-file (in addition to positional key |
| file argument). |
| |
| N.B. Using of standard input and pipes for passphrases should be avoided if possible, |
| cryptsetup have no control of used pipe buffers between commands in scripts and cannot |
| guarantee that all passphrase/key-file buffers are properly wiped after use. |
| |
| === changes since version 1.1.1 === |
| |
| * Fix luksFormat/luksOpen reading passphrase from stdin and "-" keyfile. |
| * Support --key-file/-d option for luksFormat. |
| * Fix description of --key-file and add --verbose and --debug options to man page. |
| * Add verbose log level and move unlocking message there. |
| * Remove device even if underlying device disappeared (remove, luksClose). |
| * Fix (deprecated) reload device command to accept new device argument. |
