Re: [dm-crypt] cryptsetup upgrade to 1.6.x unlocking problem in initramfs

[Arno Wagner <arno@wagner.name>]

On Fri, Sep 05, 2014 at 17:29:26 CEST, Milan Broz wrote:
[...] 
> I do not think there is a list of required kernel modules. Perhaps it
> should be added somewhere.  But I am afraid exact list will depend on
> kernel versions and other configuration (crypto mgr, fips, hw accel. 
> support, ...)
> 
> In short, for kernel backend, AF_ALG must be supported in general.
> 
> Then for LUKS: generic hash support, specific hash used in LUKS and HMAC
> is required.  With 1.6.5 and later it will optionally utilize also
> skcipher interface (so you need the block cipher and block mode used in
> LUKS header.
> 
> For TrueCrypt support you need the same, (hash, hmac, block cipher, block
> mode).
> 
> Perhaps man page or FAQ could be more descriptive here (... send a patch
> ;-)

It think eventually we will need some kind of trouble-shooting
FAQ or manual, but at this time it seems the incidents where that
problem manifests are rare enough that we can deal on the list 
with it. I have been thinking for a while about splitting up
the FAQ though, but at the moment I simply do not have the time 
to it right. Maybe later this year.

Gr"usse,
Arno

-- 
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: arno@wagner.name
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -- Plato

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier