GNU GRUB - Bugs: bug #55093, Add LUKS2 support
You are not allowed to post comments on this tracker with your current authentication level.
bug #55093: Add LUKS2 support
Submitter: | dllud <dllud> | ||
Submitted: | Sun 25 Nov 2018 01:32:49 PM UTC | ||
Votes: | 1438 | ||
Category: | Security | Severity: | Major |
Priority: | 5 - Normal | Item Group: | Feature Request |
Status: | None | Privacy: | Public |
Assigned to: | None | Originator Name: | |
Open/Closed: | Open | Release: | Git master |
Release: | Reproducibility: | None | |
Planned Release: | None |
Jump to the original submission
Sun 18 Feb 2024 10:25:10 AM UTC, comment #17: |
MeganerdNL <meganerdnl> |
Mon 25 Dec 2023 11:58:05 AM UTC, comment #16: maybe worth mentioning, there are a few working patch sets for argon support circulating for arch, like this here:
|
akallabeth <akallabeth> |
Mon 27 Nov 2023 12:29:15 AM UTC, comment #15: One thing that I haven't seen mentioned anywhere (not in the commit that added LUKS2 support, not in ArchWiki or other places) is that not only does the keyslot need to be PBKDF2, but it also needs to use a sha256 hash and/or the keyslot hash has to be equal to the AF hash. Keyslot=sha512, AF=sha256 didn't work. I didn't try with both as sha256, but someone reported it worked for them: https://wiki.archlinux.org/title/Talk:GRUB#LUKS2_in_2.12rc1
|
Jernej Jakob <jjakob> |
Wed 02 Aug 2023 01:42:04 PM UTC, comment #14: Unfortunately I (as original submitter) am unable to change the bug title. "Add full LUKS2 support" would indeed be a proper title. If a maintainer comes by, please change the title.
|
dllud <dllud> |
Wed 02 Aug 2023 12:40:21 PM UTC, comment #13: Maybe this bug report could be renamed to something like "Add full LUKS2 support", or "Add complete LUKS2 support".
|
GNUtoo <gnutoo> |
Sat 29 Jul 2023 01:42:43 AM UTC, comment #12:
|
Joseph Dalrymple <swivel> |
Sun 12 Feb 2023 12:54:20 PM UTC, comment #11: Found the package https://aur.archlinux.org/packages/grub-improved-luks2-git in the AUR. There are patches for the master branch that add the necessary algorithms, Argon2i and Argon2id.
No it is not. Current version is limited to support LUKS2 with PBKDF2 (see grub-core/disk/luks2.c 461)
Why create an additional page if the errors in this one are still not fully resolved? |
Medoo <medoo> |
Sun 16 Jan 2022 06:32:39 PM UTC, comment #10: It seems that LUKS2 support has been implemented, but there also seems to be bugs in the implementation (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945404). My suggestion is to close this bug and open a new one to address the new bugs |
Peter Willis <peterww> |
Wed 12 Aug 2020 10:51:01 AM UTC, comment #9: 365e0cc3e7e44151c14dd29514c2f870b49f9755 did not update grub_util_get_dm_abstraction() in grub-core/osdep/devmapper/getroot.c, so "grub-probe -t abstraction" will still not recognize LUKS2 volumes, leading to e.g. this Debian bug. |
Gabor Gombas <gombasg> |
Fri 10 Jan 2020 07:05:13 PM UTC, comment #8:
|
nickb |
Fri 10 Jan 2020 05:11:01 PM UTC, comment #7: So far we've had 2.00, 2.02, 2.4, so based on this trend I would expect it to appear in a 2.06 release.
|
Eli Schwartz <eschwartz> |
Fri 10 Jan 2020 04:47:54 PM UTC, comment #6: Great news! Any idea about which GRUB version will include that patch, as well as the approximate release date of such version? |
dllud <dllud> |
Fri 10 Jan 2020 02:49:08 PM UTC, comment #5: Yay, this is implemented in https://git.savannah.gnu.org/cgit/grub.git/commit/?id=365e0cc3e7e44151c14dd29514c2f870b49f9755 |
Eli Schwartz <eschwartz> |
Mon 04 Nov 2019 09:41:02 PM UTC, comment #4: Thanks for the heads-up Graaskaeg! And thanks to Patrick Steinhardt for putting in the effort. Much appreciated.
|
dllud <dllud> |
Mon 04 Nov 2019 09:07:11 PM UTC, comment #3: For those following this bug, there looks to be good news on the GRUB-devel mailing list.
|
Pontus Gråskæg <graaskaegp> |
Wed 29 May 2019 08:43:03 PM UTC, comment #2: For the crucial piece of infrastructure that Grub is to many distributions, this should have a higher priority. Not having LUKS2 support is increasingly going to reflect bad on Grub and GNU otherwise. (I know that cryptsetup isn't a GNU project, but it is licensed under GPL. And it is the only GPL-ed disk-encryption, LUKS is a gold standard.) |
Peter Passchier <pepa65> |
Fri 29 Mar 2019 08:58:21 AM UTC, comment #1: I second this request. Since cryptsetup now defaults to LUKS2 on all major distributions, the current setup of full-disk encryption with Calamares/cryptsetup/GRUB fails/breaks on all major distributions due to lack of LUKS2 support by GRUB.
|
João Sousa <jotapesse> |
Sun 25 Nov 2018 01:32:49 PM UTC, original submission:
The LUKS2 format brings several advantages over the original LUKS format. Some of the most important are (1) data integrity protection and (2) memory-hard functions for key derivation.
|
dllud <dllud> |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
There are 1438 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 25 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2024-02-18 | meganerdnl | Carbon-Copy | - | Added meganerdnl | |
2024-01-18 | rodolfoser | Carbon-Copy | - | Added rodolfoser | |
2023-11-13 | brittlepatch | Carbon-Copy | - | Added brittlepatch | |
2023-09-25 | gray_wolf | Carbon-Copy | - | Added gray_wolf | |
2023-09-09 | hvhaugwitz | Carbon-Copy | - | Added hvhaugwitz | |
2023-08-02 | dllud | Carbon-Copy | - | Added dllud | |
2021-06-29 | calestyo | Carbon-Copy | - | Added calestyo | |
2021-03-22 | je_vv | Carbon-Copy | - | Added je_vv | |
2020-11-16 | ayers | Carbon-Copy | - | Added -email is unavailable- | |
2020-08-12 | vaso | Carbon-Copy | - | Added vaso | |
2019-11-25 | stigok | Carbon-Copy | - | Added stigok | |
2019-11-06 | zlima12 | Carbon-Copy | - | Added zlima12 | |
2019-11-05 | ynakao | Carbon-Copy | - | Added ynakao | |
2019-11-04 | graaskaegp | Carbon-Copy | - | Added graaskaegp | |
2019-10-18 | nickb | Carbon-Copy | - | Added nickb | |
2019-09-27 | grub_luks2 | Carbon-Copy | - | Added grub_luks2 | |
2019-09-17 | danij3l | Carbon-Copy | - | Added -email is unavailable- | |
Carbon-Copy | - | Added danij3l | |||
2019-08-25 | archont | Carbon-Copy | - | Added archont | |
2019-08-23 | astein58 | Carbon-Copy | - | Added astein58 | |
2019-08-11 | _78879 | Carbon-Copy | - | Added fturco | |
2019-08-10 | toddward | Carbon-Copy | - | Added toddward | |
2019-07-28 | sascha_silbe | Carbon-Copy | - | Added sascha_silbe | |
2019-07-15 | safocl | Carbon-Copy | - | Added safocl | |
2019-07-15 | vdanjean | Carbon-Copy | - | Added vdanjean |
Powered by Savane 3.13-d3ae.
Corresponding source code
According to the original commit on implementing (initial) LUKS2 support in GRUB, the Argon2i(d) KDF's are not implemented because of lack of support in the libcrypt library. So it seems to me, the real 'problem' is this library.
Isn't it already implented though?
Or what (else) is holding it back right now?