bugGNU GRUB - Bugs: bug #45641, cryptomount with dmsetup-like...


You are not allowed to post comments on this tracker with your current authentication level.

bug #45641: cryptomount with dmsetup-like arguments

Submitted by:  Krzysztof Leszczyński <chewbaccakl>
Submitted on:  Mon 27 Jul 2015 08:58:28 PM UTC  
Category:  Security Severity:  Major
Priority:  3 - Low Item Group:  Feature Request
Status:  None Privacy:  Public
Assigned to:  None Originator Name:  Krzusi
Open/Closed:  Open Release: 
Release:  Git master Reproducibility:  Every Time
Planned Release:  2.03+

Tue 28 Jul 2015 03:39:44 AM UTC, comment #1:

See http://lists.gnu.org/archive/html/grub-devel/2015-06/msg00109.html. Discussion better goes to grub-devel.

Andrei Borzenkov <arvidjaar>
Project Member
Mon 27 Jul 2015 08:58:28 PM UTC, original submission:

We know grub can open encrypted volumes with luks or geli headers.
Is it possible to specify AES-XTS encrypted volume without luks/geli?

For instance: my main lvm's pv volume is defined with dmsetup as:

sda_crypt: 0 12345678 crypt aes-xts-plain 0000000000000000000000000000000000000000000000000000000000000000 0 8:0 409600

and I would love to map is with something similar to (nonexistend) command:

cryptomap (sda_crypt) 0 12345678 --cipher=aes-xts-plain --key=0000000000000000000000000000000000000000000000000000000000000000 --dev=(hd0) --offset=409600

I think it should be possible by making an easy patch to grub-core/disk/cryptodisk.c but perhaps it is not necessary, is it?

Krzysztof Leszczyński <chewbaccakl>


No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by phcoder (Updated the item)
  • -email is unavailable- added by arvidjaar (Posted a comment)
  • -email is unavailable- added by chewbaccakl (Submitted the item)

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.




    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2016-10-11 phcoder Priority5 - Normal => 3 - Low
    2016-03-02 phcoder Planned ReleaseNone => 2.03+

    Back to the top

    Powered by Savane 3.3