Bug#455508: [Pkg-cryptsetup-devel] Bug#455508: cryptsetup: should add blowfish, serpent and twofish to initrd

2007-12-12 Thread Piotr Roszatycki 
2007/12/11, David Härdeman [EMAIL PROTECTED]:
 I'm not quite sure I understand. If you setup a blowfish crypto device in
 /etc/crypttab, then the blowfish module will be copied to the initramfs.
 The unconditional copying of aes is just there as a safety net.

Ah, I didn't realize that I need to update initrd after I changed the
alghoritm. I didn't use cipher argument in /etc/crypttab and just
recreated LUKS volumen with another cipher. I was suprised that system
didn't boot because the standard initrd didn't contain basic modules.

I think that MODULES=most schema for initramfs *should* include the
four basic crypto modules and with MODULES=dep schema cryptsetup
scripts *should* guess with one is used.

Thank you.
-- 
 .''`.Piotr Roszatycki
: :' :mailto:[EMAIL PROTECTED]
`. `' mailto:[EMAIL PROTECTED]
  `-

Bug#455508: [Pkg-cryptsetup-devel] Bug#455508: cryptsetup: should add blowfish, serpent and twofish to initrd

2007-12-11 Thread David Härdeman 
On Mon, December 10, 2007 16:07, Piotr Roszatycki wrote:
 The installer allows to choose crypt algorhitm (aes, twofish,
 blowfish, serpent) but cryptsetup copies to initrd only one of them:
 aes.

 I.e. for slow CPU systems the blowfish alghorims seems to be a better
 choise.

I'm not quite sure I understand. If you setup a blowfish crypto device in
/etc/crypttab, then the blowfish module will be copied to the initramfs.
The unconditional copying of aes is just there as a safety net.

-- 
David Härdeman




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#455508: cryptsetup: should add blowfish, serpent and twofish to initrd

2007-12-10 Thread Piotr Roszatycki 
Package: cryptsetup
Version: 2:1.0.5-1
Tags: patch

The installer allows to choose crypt algorhitm (aes, twofish,
blowfish, serpent) but cryptsetup copies to initrd only one of them:
aes.

I.e. for slow CPU systems the blowfish alghorims seems to be a better choise.
-- 
 .''`.Piotr Roszatycki
: :' :mailto:[EMAIL PROTECTED]
`. `' mailto:[EMAIL PROTECTED]
  `-
diff -Nru cryptsetup-1.0.6~pre1.orig/debian/initramfs/cryptroot-hook cryptsetup-1.0.6~pre1/debian/initramfs/cryptroot-hook
--- cryptsetup-1.0.6~pre1.orig/debian/initramfs/cryptroot-hook	2007-12-10 15:01:55.0 +
+++ cryptsetup-1.0.6~pre1/debian/initramfs/cryptroot-hook	2007-12-10 15:05:02.0 +
@@ -365,7 +365,7 @@
 
 # Unless MODULES = dep, we always add a basic subset of modules/tools
 if [ $MODULES != dep ]; then
-	for mod in dm_mod dm_crypt aes sha256 cbc; do
+	for mod in dm_mod dm_crypt aes blowfish serpent twofish sha256 cbc; do
 		manual_add_modules $mod
 	done
 	copy_exec /sbin/cryptsetup /sbin