bugGNU GRUB - Bugs: bug #55093, Add LUKS2 support

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #55093: Add LUKS2 support

Submitted by:  dllud <dllud>
Submitted on:  Sun 25 Nov 2018 01:32:49 PM UTC  
Votes:  246  
 
Category:  Security Severity:  Major
Priority:  5 - Normal Item Group:  Feature Request
Status:  None Privacy:  Public
Assigned to:  None Originator Name: 
Open/Closed:  Open Release: 
Release:  Git master Reproducibility:  None
Planned Release:  None

Fri 29 Mar 2019 08:58:21 AM UTC, comment #1:

I second this request. Since cryptsetup now defaults to LUKS2 on all major distributions, the current setup of full-disk encryption with Calamares/cryptsetup/GRUB fails/breaks on all major distributions due to lack of LUKS2 support by GRUB.

Please add LUKS2 support to GRUB. Thank you.

Reference:
https://gitlab.com/cryptsetup/cryptsetup/blob/master/docs/v2.1.0-ReleaseNotes
https://github.com/calamares/calamares/issues/1096
https://github.com/calamares/calamares/issues/1099

João Sousa <jotapesse>
Sun 25 Nov 2018 01:32:49 PM UTC, original submission:

The LUKS2 format brings several advantages over the original LUKS format. Some of the most important are (1) data integrity protection and (2) memory-hard functions for key derivation.

GRUB supports the original LUKS format, allowing the setup of full-disk encryption (FDE) schemes where GRUB decrypts an encrypted /boot partition.
Adding support for LUKS2 on GRUB would improve the security on these FDE schemes, specially due to the two new LUKS2 advantages mentioned above.

I found several references online (Arch Wiki, Stackoverflow, etc.) to the lack of LUKS2 support on GRUB. I decided to open this feature request since I could find no mention of LUKS2 on both the bug tracker and the mailing lists.

dllud <dllud>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by nckx (Voted in favor of this item)
  • -email is unavailable- added by deathtrip (Voted in favor of this item)
  • -email is unavailable- added by jotapesse (Posted a comment)
  • -email is unavailable- added by jotapesse (Voted in favor of this item)
  • -email is unavailable- added by arshin (Voted in favor of this item)
  • -email is unavailable- added by trautwein (Voted in favor of this item)
  • -email is unavailable- added by eschwartz
  • -email is unavailable- added by pfactum (Voted in favor of this item)
  • -email is unavailable- added by dllud (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 246 encouragements so far.

    Only logged-in users can vote.

     

     

     

    Follow 7 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2019-04-15 nckx Carbon-Copy- => Added nckx
    2019-04-11 deathtrip Carbon-Copy- => Added deathtrip
    2019-03-29 jotapesse Carbon-Copy- => Added jotapesse
    2019-03-27 arshin Carbon-Copy- => Added arshin
    2019-03-13 trautwein Carbon-Copy- => Added trautwein
    2019-01-31 eschwartz Carbon-Copy- => Added eschwartz
    2019-01-04 pfactum Carbon-Copy- => Added pfactum

    Back to the top


    Powered by Savane 3.4