22 lines
833 B
Text
22 lines
833 B
Text
Cryptsetup 1.7.5 Release Notes
|
|
==============================
|
|
|
|
Changes since version 1.7.4
|
|
|
|
* Fixes to luksFormat to properly support recent kernel running in FIPS mode.
|
|
|
|
Cryptsetup must never use a weak key even if it is just used for testing
|
|
of algorithm availability. In FIPS mode, weak keys are always rejected.
|
|
|
|
A weak key is for example detected if the XTS encryption mode use
|
|
the same key for the tweak and the encryption part.
|
|
|
|
* Fixes accesses to unaligned hidden legacy TrueCrypt header.
|
|
|
|
On a native 4k-sector device the old hidden TrueCrypt header is not
|
|
aligned with the hw sector size (this problem was fixed in later TrueCrypt
|
|
on-disk format versions).
|
|
|
|
Cryptsetup now properly aligns the read so it does not fail.
|
|
|
|
* Fixes to optional dracut ramdisk scripts for offline re-encryption on initial boot.
|