bugGNU GRUB - Bugs: bug #45641, cryptomount with dmsetup-like...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #45641: cryptomount with dmsetup-like arguments

Submitted by:  Krzysztof Leszczyński <chewbaccakl>
Submitted on:  Mon 27 Jul 2015 08:58:28 PM UTC  
 
Category: SecuritySeverity: Major
Priority: 3 - LowItem Group: Feature Request
Status: NonePrivacy: Public
Assigned to: NoneOriginator Name: Krzusi
Open/Closed: OpenRelease: 
Release: Git masterReproducibility: Every Time
Planned Release: 2.03+

Tue 28 Jul 2015 03:39:44 AM UTC, comment #1:

See http://lists.gnu.org/archive/html/grub-devel/2015-06/msg00109.html. Discussion better goes to grub-devel.

Andrei Borzenkov <arvidjaar>
Project Member
Mon 27 Jul 2015 08:58:28 PM UTC, original submission:

We know grub can open encrypted volumes with luks or geli headers.
Is it possible to specify AES-XTS encrypted volume without luks/geli?

For instance: my main lvm's pv volume is defined with dmsetup as:

sda_crypt: 0 12345678 crypt aes-xts-plain 0000000000000000000000000000000000000000000000000000000000000000 0 8:0 409600

and I would love to map is with something similar to (nonexistend) command:

cryptomap (sda_crypt) 0 12345678 --cipher=aes-xts-plain --key=0000000000000000000000000000000000000000000000000000000000000000 --dev=(hd0) --offset=409600

I think it should be possible by making an easy patch to grub-core/disk/cryptodisk.c but perhaps it is not necessary, is it?

Krzysztof Leszczyński <chewbaccakl>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by phcoder (Updated the item)
  • -unavailable- added by arvidjaar (Posted a comment)
  • -unavailable- added by chewbaccakl (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 2 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 11 Oct 2016 01:47:48 PM UTCphcoderPriority5 - Normal=>3 - Low
    Wed 02 Mar 2016 10:45:53 AM UTCphcoderPlanned ReleaseNone=>2.03+

    Back to the top


    Powered by Savane 3.1-cleanup1