commit | c740324636efb7738ac48847759488d1625942d5 | [log] [tgz] |
---|---|---|
author | Ondrej Kozina <okozina@redhat.com> | Sat Dec 09 15:56:14 2017 +0100 |
committer | Milan Broz <gmazyland@gmail.com> | Sun Dec 10 19:56:14 2017 +0100 |
tree | 09acaa258cab84b1c00857cab460d5abc19d0745 | |
parent | f049afcb5bc36908ef572631752fcd3315aa9142 [diff] |
Derive VK kernel key description from digest id Originally the key description for VK was derived from segment id. This could lead to ambiguity when keyslot key is verified and loaded in kernel keyring using activation functions with CRYPT_ACTIVATE_KEYRING_KEY flag raised.
Cryptsetup is utility used to conveniently setup disk encryption based on DMCrypt kernel module.
These include plain dm-crypt volumes, LUKS volumes, loop-AES and TrueCrypt (including VeraCrypt extension) format.
Project also includes veritysetup utility used to conveniently setup DMVerity block integrity checking kernel module and, since version 2.0, integritysetup to setup DMIntegrity block integrity kernel module.
LUKS is the standard for Linux hard disk encryption. By providing a standard on-disk-format, it does not
only facilitate compatibility among distributions, but also provides secure management of multiple user passwords.
In contrast to existing solution, LUKS stores all setup necessary setup information in the partition header,
enabling the user to transport or migrate his data seamlessly.
Last version of the LUKS format specification is available here.
All release tarballs and release notes are hosted on kernel.org.
The latest cryptsetup TESTING version is 2.0.0-rc1
The latest cryptsetup version is 1.7.5
Previous versions
For development version code, please refer to source page, mirror on kernel.org or GitHub.
For libcryptsetup documentation see libcryptsetup API page.
The libcryptsetup API/ABI changes are tracked in compatibility report.
NLS PO files are maintained by TranslationProject.
Please always read FAQ first. For cryptsetup and LUKS related questions, please use the dm-crypt mailing list, dm-crypt@saout.de.
If you want to subscribe just send an empty mail to dm-crypt-subscribe@saout.de.
You can also browse list archive or read it through web interface.