Your message dated Thu, 19 Aug 2021 01:48:31 +0000
with message-id <[email protected]>
and subject line Bug#949336: fixed in cryptsetup 2:2.4.0-1
has caused the Debian Bug report #949336,
regarding integritysetup: HMAC(SHA256) key truncated to 106/114bytes in
standalone mode
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
949336: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=949336
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: cryptsetup-bin
Version: 2:2.1.0-5+deb10u2
Severity: important
Dear Maintainers,
this is an unfortunate folowup to #935702. I thank Milan Broz very much
for fixing that one so quickly.
Unfortunately, even though the mapped size is now correct,
integritysetup still silently configures a DM device that cannot be read
and only gives I/O errors. Most likely this is another issue specific to
large volumes on 32-bit systems.
Affected versions:
"testing" 2:2.2.2-1
"stable" 2:2.1.0-5+deb10u2
Working version:
same as in #935702
Affected command:
integritysetup --integrity hmac-sha256 --integrity-key-size=4096
--integrity-key-file=/IDISK.ikey open /dev/sda IDISK
Best,
n.b.f.
--- End Message ---
--- Begin Message ---
Source: cryptsetup
Source-Version: 2:2.4.0-1
Done: Guilhem Moulin <[email protected]>
We believe that the bug you reported is fixed in the latest version of
cryptsetup, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guilhem Moulin <[email protected]> (supplier of updated cryptsetup package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 19 Aug 2021 03:11:11 +0200
Source: cryptsetup
Architecture: source
Version: 2:2.4.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Cryptsetup Team
<[email protected]>
Changed-By: Guilhem Moulin <[email protected]>
Closes: 949336 987769 990490
Changes:
cryptsetup (2:2.4.0-1) unstable; urgency=low
.
[ Guilhem Moulin ]
* New upstream release.
* Salsa CI: Set SALSA_CI_BLHC_ARGS to avoid failing when *test* files are
built without the "right" LDFLAGS.
* Remove obsolete upstart configuration files on upgrade and purge.
(Closes: #990490)
* d/*.{pre,post}*: Explicitly exit with status code 0.
* d/copyright: Set field Upstream-Name.
* d/control: Bump Standards-Version to 4.5.1 (no changes necessary).
* d/control: Remove cryptsetup-run from cryptsetup's Recommends.
(Closes: #987769)
* d/control: Demote cryptsetup-initramfs from cryptsetup's Recommends to
Suggests. This concludes the package split started in 2:2.0.3-1 during
the Buster release cycle.
.
[ Ayla Ounce ]
* Add support for --perf_* flags to initramfs.
.
cryptsetup (2:2.4.0~rc1-1+exp1) experimental; urgency=medium
.
* New upstream release candidate.
* d/copyright: Update file.
* d/cryptsetup.docs: Add upstream's README.md.
.
cryptsetup (2:2.4.0~rc0-1+exp1) experimental; urgency=medium
.
* New upstream release candidate 2.4.0. Highlights include:
+ Support for external libraries (plugins) for handling LUKS2 token
objects.
+ Experimental SSH token handler and cryptsetup-ssh(8) utility (both
shipped in the 'cryptsetup' binary package) as a demonstration of the
external LUKS2 token interface. This adds libssh-dev to build-depends.
+ Change default LUKS2 PBKDF to Argon2id from Argon2i.
+ Increase minimal memory cost for Argon2 benchmark to 64MiB (suggested
value in Argon2 RFC).
+ Autodetect optimal encryption sector size on LUKS2 format.
+ integritysetup: add integrity-recalculate-reset flag.
+ cryptsetup: retains keyslot number in luksChangeKey for LUKS2.
+ Add close --deferred and --cancel-deferred options.
.
cryptsetup (2:2.3.6-1+exp1) experimental; urgency=medium
.
* New upstream bugfix release. (Closes: #949336)
Checksums-Sha1:
d5a345cd94add05630c402359da0d6b182914a38 2885 cryptsetup_2.4.0-1.dsc
8140052921159e4f73779f031b5f4fdcc8b5861c 11316821 cryptsetup_2.4.0.orig.tar.gz
6ee1c6f07d9654f274e914fb845426bad7a8bf6c 116628
cryptsetup_2.4.0-1.debian.tar.xz
26f16e8764a0336a848026068b47f3ecadbb44f4 9710
cryptsetup_2.4.0-1_amd64.buildinfo
Checksums-Sha256:
ef74dc9bb19013b2c8b644b1277d3e6d7c19ba86fcd185e6c12a1afd8cf23cf8 2885
cryptsetup_2.4.0-1.dsc
42385cc8ba22538f1b5ab0e5d5eb765a1d01333928cc1bb597621d26e40fc083 11316821
cryptsetup_2.4.0.orig.tar.gz
17ef4a37c22925cd5d2de16faf4d1a2e9c786fdbfb79ed98b8613cac1ef28ad4 116628
cryptsetup_2.4.0-1.debian.tar.xz
a2ce53e41e7491206ac9f103a3531f6debc60d862b64fa614b94c26480e57c8e 9710
cryptsetup_2.4.0-1_amd64.buildinfo
Files:
20833f27773b00de287f859ef22f85e6 2885 admin optional cryptsetup_2.4.0-1.dsc
1d68c2103b3acc57dc348929fe39a44a 11316821 admin optional
cryptsetup_2.4.0.orig.tar.gz
cd1daeac6d9401f7c1aec6eeb860595c 116628 admin optional
cryptsetup_2.4.0-1.debian.tar.xz
48e72380d7f3a5b10de0fbd6211ccc26 9710 admin optional
cryptsetup_2.4.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=7iOW
-----END PGP SIGNATURE-----
--- End Message ---
