| Cryptsetup 1.7.5 Release Notes | |
| ============================== | |
| Changes since version 1.7.4 | |
| * Fixes to luksFormat to properly support recent kernel running in FIPS mode. | |
| Cryptsetup must never use a weak key even if it is just used for testing | |
| of algorithm availability. In FIPS mode, weak keys are always rejected. | |
| A weak key is for example detected if the XTS encryption mode use | |
| the same key for the tweak and the encryption part. | |
| * Fixes accesses to unaligned hidden legacy TrueCrypt header. | |
| On a native 4k-sector device the old hidden TrueCrypt header is not | |
| aligned with the hw sector size (this problem was fixed in later TrueCrypt | |
| on-disk format versions). | |
| Cryptsetup now properly aligns the read so it does not fail. | |
| * Fixes to optional dracut ramdisk scripts for offline re-encryption on initial boot. |