** Changed in: cryptsetup (Ubuntu) Status: Fix Committed => Fix Released
** Also affects: cryptsetup (Ubuntu Zesty) Importance: Undecided Status: New ** Changed in: cryptsetup (Ubuntu Zesty) Status: New => Triaged ** Changed in: cryptsetup (Ubuntu Zesty) Importance: Undecided => Medium -- You received this bug notification because you are a member of नेपाली भाषा समायोजकहरुको समूह, which is subscribed to Xenial. Matching subscriptions: Ubuntu 16.04 Bugs https://bugs.launchpad.net/bugs/1715010 Title: Fix XTS encryption with FIPS enabled kernels Status in cryptsetup package in Ubuntu: Fix Released Status in cryptsetup source package in Xenial: Fix Released Status in cryptsetup source package in Zesty: Triaged Bug description: SRU Justification: Impact: The kernel crypto API rejects weak XTS keys in FIPS mode and the current version of cryptsetup in xenial do some tests with a zeroed key to check cipher availability in the kernel. These two behaviors combined make impossible to use disk encryption with XTS while using a kernel in FIPS mode. Fix: apply the following fix to cryptsetup: https://gitlab.com/cryptsetup/cryptsetup/commit/3c2135b36bbc52d052e4ced7c94dc4981eb07a53 Testcase: Try to setup disk encryption with XTS while the kernel is in FIPS mode. N.B.: This is not yet fixed in artful so cannot be released. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/1715010/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~group.of.nepali.translators Post to : group.of.nepali.translators@lists.launchpad.net Unsubscribe : https://launchpad.net/~group.of.nepali.translators More help : https://help.launchpad.net/ListHelp