[pkg-cryptsetup-devel] Bug#1028907: cryptsetup: initramfs hook can't handle xchacha20, aes-adantium-plain64

Łukasz Stelmach steelman at post.pl
Sat Jan 14 18:41:46 GMT 2023


Package: cryptsetup
Version: 2:2.3.7-1+deb11u1
Severity: normal
X-Debbugs-Cc: Łukasz Stelmach <steelman at post.pl>

Dear Maintainer,

The populate_CRYPTO_MODULES() function in
/usr/share/initramfs-tools/hooks/cryptroot can't properly derive
required module names (MODULES=dep in initramfs.conf) from dmsetup
ouptput when using adantium[1] encryption. In such cases the cipher string
is:

    xchacha20,aes-adantium-plain64

(or xchacha12 on even less performant platforms). 

Workaround: manually add the following modules to
/etc/initramfs-tools/modules:

    aes_generic
    chacha_generic
    nhpoly1350
    xts

[1] https://lwn.net/Articles/776721/

-- System Information:
Debian Release: 11.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-11-amd64 (SMP w/4 CPU threads)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages cryptsetup depends on:
ii  cryptsetup-bin         2:2.3.7-1+deb11u1
ii  debconf [debconf-2.0]  1.5.77
ii  dmsetup                2:1.02.175-2.1
ii  libc6                  2.31-13+deb11u5

Versions of packages cryptsetup recommends:
ii  cryptsetup-initramfs  2:2.3.7-1+deb11u1
ii  cryptsetup-run        2:2.3.7-1+deb11u1

Versions of packages cryptsetup suggests:
ii  dosfstools              4.2-1
ii  keyutils                1.6.1-2
ii  liblocale-gettext-perl  1.07-4+b1

-- debconf information:
  cryptsetup/prerm_active_mappings: true

-- 
Miłego dnia,
Łukasz Stelmach
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 617 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-cryptsetup-devel/attachments/20230114/c34f935e/attachment.sig>


More information about the pkg-cryptsetup-devel mailing list