On 03/22/2011 02:37 PM, Martin Kourim wrote: just FYI: This change was intentional, there was no other way because the operator was wrongly overloaded. see http://code.google.com/p/cryptsetup/wiki/Cryptsetup120
Anyway, your suggested fix is wrong for several reasons: - "-s" argument takes size in bits, --keyfile-size in bytes - Option --keysfile-size has "-l" short option, not -d, it is bug in cryptsetup man page (fixed upstream already). - specifying keysize for LUKS in cryptab makes no sense, keysize is read from LUKS header IMHO this line > data /dev/sda8 none > luks,checkargs=ext3,crypt=aes-cbc-essiv:sha256,size=128 should be equivalent to > data /dev/sda8 none luks,checkargs=ext3 (specifying algorithm and keysize make sense only for non-LUKS devices) I think Debian scripts should ignore these options if it is LUKS formatted device. Milan -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

