bugGNU GRUB - Bugs: bug #55093, Add LUKS2 support

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #55093: Add LUKS2 support

Submitter:  dllud <dllud>
Submitted:  Sun 25 Nov 2018 01:32:49 PM UTC
Votes:  1039  
 
Category:  Security Severity:  Major
Priority:  5 - Normal Item Group:  Feature Request
Status:  None Privacy:  Public
Assigned to:  None Originator Name: 
Open/Closed:  Open Release:  Git master
Release:  Reproducibility:  None
Planned Release:  None

( Jump to the original submission )

Sun 16 Jan 2022 06:32:39 PM UTC, comment #10: 

It seems that LUKS2 support has been implemented, but there also seems to be bugs in the implementation (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945404). My suggestion is to close this bug and open a new one to address the new bugs

Peter Willis <peterww>
Wed 12 Aug 2020 10:51:01 AM UTC, comment #9: 

365e0cc3e7e44151c14dd29514c2f870b49f9755 did not update grub_util_get_dm_abstraction() in grub-core/osdep/devmapper/getroot.c, so "grub-probe -t abstraction" will still not recognize LUKS2 volumes, leading to e.g. this Debian bug.

Gabor Gombas <gombasg>
Fri 10 Jan 2020 07:05:13 PM UTC, comment #8: 

comment #5:

> Yay, this is implemented in https://git.savannah.gnu.org/cgit/grub.git/commit/?id=365e0cc3e7e44151c14dd29514c2f870b49f9755


Awesome! Thanks to everyone involved in getting this implemented!

nickb
Fri 10 Jan 2020 05:11:01 PM UTC, comment #7: 

So far we've had 2.00, 2.02, 2.4, so based on this trend I would expect it to appear in a 2.06 release.

I've got no ideas about the developers' expected release timeframe, though.

Eli Schwartz <eschwartz>
Fri 10 Jan 2020 04:47:54 PM UTC, comment #6: 

Great news! Any idea about which GRUB version will include that patch, as well as the approximate release date of such version?

dllud <dllud>
Fri 10 Jan 2020 02:49:08 PM UTC, comment #5: 
Eli Schwartz <eschwartz>
Mon 04 Nov 2019 09:41:02 PM UTC, comment #4: 

Thanks for the heads-up Graaskaeg! And thanks to Patrick Steinhardt for putting in the effort. Much appreciated.

It's a pity that Argon2i support is still missing. Hopefully Patrick can have a go at it once this major and necessary step is completed.

dllud <dllud>
Mon 04 Nov 2019 09:07:11 PM UTC, comment #3: 

For those following this bug, there looks to be good news on the GRUB-devel mailing list.

https://lists.gnu.org/archive/html/grub-devel/2019-11/msg00000.html

Patrick Steinhardt has prepared some patches to support LUKS2 disc encryption.

Thank you Patrick.

Graaskaeg

Pontus Gråskæg <graaskaegp>
Wed 29 May 2019 08:43:03 PM UTC, comment #2: 

For the crucial piece of infrastructure that Grub is to many distributions, this should have a higher priority. Not having LUKS2 support is increasingly going to reflect bad on Grub and GNU otherwise. (I know that cryptsetup isn't a GNU project, but it is licensed under GPL. And it is the only GPL-ed disk-encryption, LUKS is a gold standard.)

Peter Passchier <pepa65>
Fri 29 Mar 2019 08:58:21 AM UTC, comment #1: 

I second this request. Since cryptsetup now defaults to LUKS2 on all major distributions, the current setup of full-disk encryption with Calamares/cryptsetup/GRUB fails/breaks on all major distributions due to lack of LUKS2 support by GRUB.

Please add LUKS2 support to GRUB. Thank you.

Reference:
https://gitlab.com/cryptsetup/cryptsetup/blob/master/docs/v2.1.0-ReleaseNotes
https://github.com/calamares/calamares/issues/1096
https://github.com/calamares/calamares/issues/1099

João Sousa <jotapesse>
Sun 25 Nov 2018 01:32:49 PM UTC, original submission:  

The LUKS2 format brings several advantages over the original LUKS format. Some of the most important are (1) data integrity protection and (2) memory-hard functions for key derivation.

GRUB supports the original LUKS format, allowing the setup of full-disk encryption (FDE) schemes where GRUB decrypts an encrypted /boot partition.
Adding support for LUKS2 on GRUB would improve the security on these FDE schemes, specially due to the two new LUKS2 advantages mentioned above.

I found several references online (Arch Wiki, Stackoverflow, etc.) to the lack of LUKS2 support on GRUB. I decided to open this feature request since I could find no mention of LUKS2 on both the bug tracker and the mailing lists.

dllud <dllud>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by peterww (Posted a comment)
  • -email is unavailable- added by calestyo
  • -email is unavailable- added by je_vv
  • -email is unavailable- added by ayers
  • -email is unavailable- added by vaso (Voted in favor of this item)
  • -email is unavailable- added by gombasg (Posted a comment)
  • -email is unavailable- added by nickb (Posted a comment)
  • -email is unavailable- added by eschwartz (Posted a comment)
  • -email is unavailable- added by stigok (Voted in favor of this item)
  • -email is unavailable- added by zlima12 (Voted in favor of this item)
  • -email is unavailable- added by ynakao
  • -email is unavailable- added by graaskaegp (Posted a comment)
  • -email is unavailable- added by graaskaegp (Voted in favor of this item)
  • -email is unavailable- added by nickb (Voted in favor of this item)
  • -email is unavailable- added by grub_luks2 (Voted in favor of this item)
  • -email is unavailable- added by danij3l
  • -email is unavailable- added by danij3l (Voted in favor of this item)
  • -email is unavailable- added by archont (Voted in favor of this item)
  • -email is unavailable- added by astein58 (Voted in favor of this item)
  • -email is unavailable- added by fturco
  • -email is unavailable- added by toddward (Voted in favor of this item)
  • -email is unavailable- added by sascha_silbe
  • -email is unavailable- added by safocl (Voted in favor of this item)
  • -email is unavailable- added by vdanjean (Voted in favor of this item)
  • -email is unavailable- added by pepa65 (Posted a comment)
  • -email is unavailable- added by nckx (Voted in favor of this item)
  • -email is unavailable- added by deathtrip (Voted in favor of this item)
  • -email is unavailable- added by jotapesse (Posted a comment)
  • -email is unavailable- added by jotapesse (Voted in favor of this item)
  • -email is unavailable- added by arshin (Voted in favor of this item)
  • -email is unavailable- added by trautwein (Voted in favor of this item)
  • -email is unavailable- added by eschwartz
  • -email is unavailable- added by pfactum (Voted in favor of this item)
  • -email is unavailable- added by dllud (Submitted the item)
  •  

    There are 1039 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

     

     

    Follow 25 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2021-06-29 calestyo Carbon-Copy- Added calestyo
    2021-03-22 je_vv Carbon-Copy- Added je_vv
    2020-11-16 ayers Carbon-Copy- Added -email is unavailable-
    2020-08-12 vaso Carbon-Copy- Added vaso
    2019-11-25 stigok Carbon-Copy- Added stigok
    2019-11-06 zlima12 Carbon-Copy- Added zlima12
    2019-11-05 ynakao Carbon-Copy- Added ynakao
    2019-11-04 graaskaegp Carbon-Copy- Added graaskaegp
    2019-10-18 nickb Carbon-Copy- Added nickb
    2019-09-27 grub_luks2 Carbon-Copy- Added grub_luks2
    2019-09-17 danij3l Carbon-Copy- Added -email is unavailable-
        Carbon-Copy- Added danij3l
    2019-08-25 archont Carbon-Copy- Added archont
    2019-08-23 astein58 Carbon-Copy- Added astein58
    2019-08-11 fturco Carbon-Copy- Added fturco
    2019-08-10 toddward Carbon-Copy- Added toddward
    2019-07-28 sascha_silbe Carbon-Copy- Added sascha_silbe
    2019-07-15 safocl Carbon-Copy- Added safocl
    2019-07-15 vdanjean Carbon-Copy- Added vdanjean
    2019-04-15 nckx Carbon-Copy- Added nckx
    2019-04-11 deathtrip Carbon-Copy- Added deathtrip
    2019-03-29 jotapesse Carbon-Copy- Added jotapesse
    2019-03-27 arshin Carbon-Copy- Added arshin
    2019-03-13 trautwein Carbon-Copy- Added trautwein
    2019-01-31 eschwartz Carbon-Copy- Added eschwartz

    Back to the top


    Powered by Savane 3.9