[pkg-cryptsetup-devel] Bug#1112484: cryptsetup-initramfs does not support empty passphrases

[Johannes Schauer Marin Rodrigues]

Package: cryptsetup-initramfs
Version: 2:2.7.5-2
Severity: normal

Hi,

it is possible to supply an empty passphrase to "cryptsetup luksFormat".
It also works without issue to then run "cryptsetup luksOpen" and just
press the enter key to supply the empty passphrase. But when trying to
boot a system with an empty passphrase, the user gets this error
message:

Nothing to read on input.
cryptsetup: ERROR: cryptsetup failed, bad password or options?

I'd like to ask you to either:

 a) support supplying an empty passphrase at the initramfs prompt or
 b) improve the error message to tell the user that cryptsetup-initramfs does
    not support empty passphrases

Thanks!

cheers, josch


-- Package-specific info:

-- System Information:
Debian Release: 13.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: arm64 (aarch64)
Foreign Architectures: armhf, i386, amd64

Kernel: Linux 6.12.38-mnt-reform-arm64 (SMP w/6 CPU threads)
Kernel taint flags: TAINT_CRAP, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages cryptsetup-initramfs depends on:
ii  busybox-static [busybox]                1:1.37.0-6+b3
ii  cryptsetup                              2:2.7.5-2
ii  debconf [debconf-2.0]                   1.5.91
ii  initramfs-tools [linux-initramfs-tool]  0.148.3

Versions of packages cryptsetup-initramfs recommends:
ii  console-setup  1.240
ii  kbd            2.7.1-2

cryptsetup-initramfs suggests no packages.

-- debconf-show failed