| Cryptsetup 1.6.3 Release Notes | |
| ============================== | |
| Changes since version 1.6.2 | |
| * Fix cryptsetup reencryption tool to work properly | |
| with devices using 4kB sectors. | |
| * Always use page size if running through loop device, | |
| this fixes failures for external LUKS header and | |
| filesystem requiring 4kB block size. | |
| * Fix TCRYPT system encryption mapping for multiple partitions. | |
| Since this commit, one can use partition directly as device parameter. | |
| If you need to activate such partition from image in file, | |
| please first use map partitioned loop device (losetup -P) | |
| on image. | |
| (Cryptsetup require partition offsets visible in kernel sysfs | |
| in this mode.) | |
| * Support activation of old TrueCrypt containers using CBC mode | |
| and whitening (created in TrueCrypt version < 4.1). | |
| This requires Linux kernel 3.13 or later. | |
| (Containers with cascade CBC ciphers are not supported.) | |
| * Properly display keys in dump --dump-master-key command | |
| for TrueCrypt CBC containers. | |
| * Rewrite cipher benchmark loop which was unreliable | |
| on very fast machines. | |
| * Add warning if LUKS device was activated using non-cryptsetup | |
| library which did not set UUID properly (e.g. cryptmount). | |
| (Some commands, like luksSuspend, are not available then.) | |
| * Support length limitation also for plain (no hash) length. | |
| This can be used for mapping problematic cryptosystems which | |
| wipes some key (losetup sometimes set last 32 byte to zero, | |
| which can be now configured as --hash plain:31 parameter). | |
| * Fix hash limit if parameter is not a number. | |
| (The whole key was set to zero instead of command failure.) | |
| * Unify --key-slot behavior in cryptsetup_reencrypt tool. | |
| * Update dracut example scripts for system reencryption on first boot. | |
| * Add command line option --tcrypt-backup to access TCRYPT backup header. | |
| * Fix static compilation with OpenSSL. |