[pkg-cryptsetup-devel] Bug#1028907: cryptsetup: initramfs hook can't handle xchacha20, aes-adantium-plain64
Łukasz Stelmach
steelman at post.pl
Sat Jan 14 18:41:46 GMT 2023
Package: cryptsetup
Version: 2:2.3.7-1+deb11u1
Severity: normal
X-Debbugs-Cc: Łukasz Stelmach <steelman at post.pl>
Dear Maintainer,
The populate_CRYPTO_MODULES() function in
/usr/share/initramfs-tools/hooks/cryptroot can't properly derive
required module names (MODULES=dep in initramfs.conf) from dmsetup
ouptput when using adantium[1] encryption. In such cases the cipher string
is:
xchacha20,aes-adantium-plain64
(or xchacha12 on even less performant platforms).
Workaround: manually add the following modules to
/etc/initramfs-tools/modules:
aes_generic
chacha_generic
nhpoly1350
xts
[1] https://lwn.net/Articles/776721/
-- System Information:
Debian Release: 11.6
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.10.0-11-amd64 (SMP w/4 CPU threads)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages cryptsetup depends on:
ii cryptsetup-bin 2:2.3.7-1+deb11u1
ii debconf [debconf-2.0] 1.5.77
ii dmsetup 2:1.02.175-2.1
ii libc6 2.31-13+deb11u5
Versions of packages cryptsetup recommends:
ii cryptsetup-initramfs 2:2.3.7-1+deb11u1
ii cryptsetup-run 2:2.3.7-1+deb11u1
Versions of packages cryptsetup suggests:
ii dosfstools 4.2-1
ii keyutils 1.6.1-2
ii liblocale-gettext-perl 1.07-4+b1
-- debconf information:
cryptsetup/prerm_active_mappings: true
--
Miłego dnia,
Łukasz Stelmach
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 617 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-cryptsetup-devel/attachments/20230114/c34f935e/attachment.sig>
More information about the pkg-cryptsetup-devel
mailing list