bugGNU GRUB - Bugs: bug #55093, Add LUKS2 support


You are not allowed to post comments on this tracker with your current authentication level.

bug #55093: Add LUKS2 support

Submitted by:  dllud <dllud>
Submitted on:  Sun 25 Nov 2018 01:32:49 PM UTC  
Votes:  492  
Category:  Security Severity:  Major
Priority:  5 - Normal Item Group:  Feature Request
Status:  None Privacy:  Public
Assigned to:  None Originator Name: 
Open/Closed:  Open Release: 
Release:  Git master Reproducibility:  None
Planned Release:  None

Wed 29 May 2019 08:43:03 PM UTC, comment #2: 

For the crucial piece of infrastructure that Grub is to many distributions, this should have a higher priority. Not having LUKS2 support is increasingly going to reflect bad on Grub and GNU otherwise. (I know that cryptsetup isn't a GNU project, but it is licensed under GPL. And it is the only GPL-ed disk-encryption, LUKS is a gold standard.)

Peter Passchier <pepa65>
Fri 29 Mar 2019 08:58:21 AM UTC, comment #1: 

I second this request. Since cryptsetup now defaults to LUKS2 on all major distributions, the current setup of full-disk encryption with Calamares/cryptsetup/GRUB fails/breaks on all major distributions due to lack of LUKS2 support by GRUB.

Please add LUKS2 support to GRUB. Thank you.


João Sousa <jotapesse>
Sun 25 Nov 2018 01:32:49 PM UTC, original submission:  

The LUKS2 format brings several advantages over the original LUKS format. Some of the most important are (1) data integrity protection and (2) memory-hard functions for key derivation.

GRUB supports the original LUKS format, allowing the setup of full-disk encryption (FDE) schemes where GRUB decrypts an encrypted /boot partition.
Adding support for LUKS2 on GRUB would improve the security on these FDE schemes, specially due to the two new LUKS2 advantages mentioned above.

I found several references online (Arch Wiki, Stackoverflow, etc.) to the lack of LUKS2 support on GRUB. I decided to open this feature request since I could find no mention of LUKS2 on both the bug tracker and the mailing lists.

dllud <dllud>


No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by fturco
  • -email is unavailable- added by toddward (Voted in favor of this item)
  • -email is unavailable- added by sascha_silbe
  • -email is unavailable- added by safocl (Voted in favor of this item)
  • -email is unavailable- added by vdanjean (Voted in favor of this item)
  • -email is unavailable- added by pepa65 (Posted a comment)
  • -email is unavailable- added by nckx (Voted in favor of this item)
  • -email is unavailable- added by deathtrip (Voted in favor of this item)
  • -email is unavailable- added by jotapesse (Posted a comment)
  • -email is unavailable- added by jotapesse (Voted in favor of this item)
  • -email is unavailable- added by arshin (Voted in favor of this item)
  • -email is unavailable- added by trautwein (Voted in favor of this item)
  • -email is unavailable- added by eschwartz
  • -email is unavailable- added by pfactum (Voted in favor of this item)
  • -email is unavailable- added by dllud (Submitted the item)

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 492 encouragements so far.

    Only logged-in users can vote.




    Follow 12 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2019-08-11 fturco Carbon-Copy- => Added fturco
    2019-08-10 toddward Carbon-Copy- => Added toddward
    2019-07-28 sascha_silbe Carbon-Copy- => Added sascha_silbe
    2019-07-15 safocl Carbon-Copy- => Added safocl
    2019-07-15 vdanjean Carbon-Copy- => Added vdanjean
    2019-04-15 nckx Carbon-Copy- => Added nckx
    2019-04-11 deathtrip Carbon-Copy- => Added deathtrip
    2019-03-29 jotapesse Carbon-Copy- => Added jotapesse
    2019-03-27 arshin Carbon-Copy- => Added arshin
    2019-03-13 trautwein Carbon-Copy- => Added trautwein
    2019-01-31 eschwartz Carbon-Copy- => Added eschwartz
    2019-01-04 pfactum Carbon-Copy- => Added pfactum

    Back to the top

    Powered by Savane 3.5