[pkg-cryptsetup-devel] Bug#896968: cryptsetup with luks2 not working on debian buster netinst

[Christian Dietrich]

Hi,

it looks like "af_alg" and "algif_skcipher" kernel modules are not
available in debian buster daily netinst iso.
I've also checked ubuntu bionic beaver daily netinst iso, after adding
libgcc1 everything is working as expected.
"af_alg" and "algif_skcipher" kernel modules are available
and automatically loaded.

Best
Christian

2018-04-26 14:15 GMT+02:00 Guilhem Moulin <guilhem at debian.org>:

> Control: tag -1 + d-i moreinfo
>
> Hi,
>
> On Thu, 26 Apr 2018 at 13:24:44 +0200, Christian Dietrich wrote:
> > I'm trying to install Debian Buster to an LUKS2 encrypted partition:
> >
> > cryptsetup luksFormat /dev/sda1 -> works
> > cryptsetup --type=luks2 luksFormat /dev/sda1 -> "libgcc_s.so.1 must be
> > installed for pthread_cancel to work"
>
> This is because LUKS2 defaults to the argon PBKDF algorithm for key
> derivation, and libargon2 uses pthread_cancel.  (You can choose PBKDF2
> instead, which is LUKS1's default PBKDF algorithm, by passing `--pbkdf
> PBKDF2`.)  I don't think it makes sense to make the udeb depend on
> libgcc1, given that LUKS2 isn't the default LUKS version yet.
>
> > after manually installing "libgcc1" (libgcc_s.so.1):
> >
> > cryptsetup --type=luks2 luksFormat /dev/sda1 -> works
> > cryptsetup --type=luks2 open /dev/sda1 crypt -> doesnt work (nothing
> > shows up at /dev/mapper/)
>
> Is kernel userspace crypto available?  (Are the ‘algif_skcipher’ and
> ‘af_alg’ kernel modules loaded?)  If yes, please add `--debug` to run
> cryptsetup in debug mode, and attach the debug output to your reply.
>
> Cheers,
> --
> Guilhem.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-cryptsetup-devel/attachments/20180426/7cce6b29/attachment.html>