From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.saout.de ([127.0.0.1]) by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U-zOar-uc1f5 for ; Tue, 19 Jun 2012 14:29:17 +0200 (CEST) Received: from v4.tansi.org (ns.km33513-03.keymachine.de [87.118.94.3]) by mail.saout.de (Postfix) with ESMTP for ; Tue, 19 Jun 2012 14:29:17 +0200 (CEST) Received: from gatewagner.dyndns.org (84-74-164-202.dclient.hispeed.ch [84.74.164.202]) by v4.tansi.org (Postfix) with ESMTPA id 9BD81205E4E for ; Tue, 19 Jun 2012 14:29:16 +0200 (CEST) Date: Tue, 19 Jun 2012 14:29:16 +0200 From: Arno Wagner Message-ID: <20120619122915.GA1317@tansi.org> References: <4FE05A32.9010402@gresille.org> <4FE061DE.5080200@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4FE061DE.5080200@gmail.com> Subject: Re: [dm-crypt] Option "validate passphrase" for command cryptsetup List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de I think having this functionality is a good idea. Arno On Tue, Jun 19, 2012 at 01:26:22PM +0200, Milan Broz wrote: > On 06/19/2012 12:53 PM, Louis wrote: > > Hello, > > for information, I wrote a small C program to check if the given > > passphrase is correct, without doing anything on the disk. The command > > is used this way: > > > If you think it can benefit cryptsetup, I offer to write the necessary > > patch to include it to cryptsetup (as a "luksValidateKey" LUKS action). > > Special program or command is IMHO overkill, isn't enough just to add option > to cryptsetup luksOpen (--dry-run, --no-activate, whatever you prefer)? > > So it will work just like > > # cryptsetup luksOpen /dev/sdc anything --dry-run --verbose > Enter passphrase for /dev/sdc: > No key available with this passphrase. > Enter passphrase for /dev/sdc: > Key slot 0 unlocked. > Command successful. > > Trivial to add to code... (while I am doing another RC today, it can be done > today even ;-) > > Milan > _______________________________________________ > dm-crypt mailing list > dm-crypt@saout.de > http://www.saout.de/mailman/listinfo/dm-crypt > -- Arno Wagner, Dr. sc. techn., Dipl. Inform., Email: arno@wagner.name GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F ---- One of the painful things about our time is that those who feel certainty are stupid, and those with any imagination and understanding are filled with doubt and indecision. -- Bertrand Russell