bugGNU GRUB - Bugs: bug #45641, cryptomount with dmsetup-like...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #45641: cryptomount with dmsetup-like arguments

Submitter:  Krzysztof Leszczyński <chewbaccakl>
Submitted:  Mon 27 Jul 2015 08:58:28 PM UTC
   
 
Category:  Security Severity:  Major
Priority:  3 - Low Item Group:  Feature Request
Status:  None Privacy:  Public
Assigned to:  None Originator Name:  Krzusi
Open/Closed:  Open Release:  Git master
Release:  Reproducibility:  Every Time
Planned Release:  2.03+

Tue 28 Jul 2015 03:39:44 AM UTC, comment #1: 

See http://lists.gnu.org/archive/html/grub-devel/2015-06/msg00109.html. Discussion better goes to grub-devel.

Andrei Borzenkov <arvidjaar>
Group Member
Mon 27 Jul 2015 08:58:28 PM UTC, original submission:  

We know grub can open encrypted volumes with luks or geli headers.
Is it possible to specify AES-XTS encrypted volume without luks/geli?

For instance: my main lvm's pv volume is defined with dmsetup as:

    sda_crypt: 0 12345678 crypt aes-xts-plain 0000000000000000000000000000000000000000000000000000000000000000 0 8:0 409600

and I would love to map is with something similar to (nonexistend) command:

    cryptomap (sda_crypt) 0 12345678 --cipher=aes-xts-plain --key=0000000000000000000000000000000000000000000000000000000000000000 --dev=(hd0) --offset=409600

I think it should be possible by making an easy patch to grub-core/disk/cryptodisk.c but perhaps it is not necessary, is it?

Krzysztof Leszczyński <chewbaccakl>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by phcoder (Updated the item)
  • -email is unavailable- added by arvidjaar (Posted a comment)
  • -email is unavailable- added by chewbaccakl (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2016-10-11 phcoder Priority5 - Normal 3 - Low
    2016-03-02 phcoder Planned ReleaseNone 2.03+

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code