32 lines
1.3 KiB
Text
32 lines
1.3 KiB
Text
Cryptsetup 1.5.1 Release Notes
|
|
==============================
|
|
|
|
Changes since version 1.5.0
|
|
|
|
* The libcryptsetup library now tries to initialize device-mapper backend and
|
|
loop devices only if they are really needed (lazy initializations).
|
|
This allows some operations to be run by a non-root user.
|
|
|
|
(Unfortunately LUKS header keyslot operations still require temporary dm-crypt
|
|
device and device-mapper subsystem is available only to superuser.)
|
|
|
|
Also clear error messages are provided if running as non-root user and
|
|
operation requires privileged user.
|
|
|
|
* Veritysetup can be now used by a normal user for creating hash image to file
|
|
and also it can create hash image if doesn't exist.
|
|
(Previously it required pre-allocated space.)
|
|
|
|
* Added crypt_keyslot_area() API call which allows external tools
|
|
to get exact keyslot offsets and analyse content.
|
|
|
|
An example of a tool that searches the keyslot area of a LUKS container
|
|
for positions where entropy is low and hence there is a high probability
|
|
of damage is in misc/kesylot_checker.
|
|
(Thanks to Arno Wagner for the code.)
|
|
|
|
* Optimized seek to keyfile-offset if key offset is large.
|
|
|
|
* Fixed luksHeaderBackup for very old v1.0 unaligned LUKS headers.
|
|
|
|
* Various fixes for problems found by a several static analysis tools.
|