[pkg-cryptsetup-devel] Bug#494584: [cryptsetup] luksFormat does not know --cipher aes-xts-plain

[C. Dominik Bodi]

Package: cryptsetup
Version: 2:1.0.6-6
Severity: normal

--- Please enter the report below this line. ---
the command:
cryptsetup --verbose --cipher aes-xts-plain --verify-passphrase luksFormat /dev/hda2

fails with the following error message:
Command failed: Failed to setup dm-crypt key mapping.
Check kernel for support for the aes-xts-plain cipher spec and verify that /dev/hda2 contains at least 133 sectors

However, running the command:
cryptsetup create --verbose --cipher aes-xts-plain --verify-passphrase crypt0 /dev/hda2

works without any errors.

It seems, while cryptsetup does know about the aes-xts-plain cipher method, the luks extension does not. It would be desirable 
to have luks know about XTS, as well, as it is regared to be more secure than CBC or LRW.

Regards,
C. Dominik Bodi
--- System information. ---
Architecture: amd64
Kernel:       Linux 2.6.26.2-hirsch-3

Debian Release: lenny/sid

--- Package information. ---
Depends                     (Version) | Installed
=====================================-+-===============
libc6                      (>= 2.7-1) | 2.7-13
libdevmapper1.02.1     (>= 2:1.02.20) | 2:1.02.27-3
libpopt0                    (>= 1.14) | 1.14-4
libuuid1                              | 1.41.0-3
dmsetup                               | 2:1.02.27-3