Re: [dm-crypt] [ANNOUNCE] cryptsetup 1.3.0-rc1 (test release candidate)

[Milan Broz <mbroz@redhat.com>]

On 03/14/2011 10:13 PM, Rudolf Deilmann wrote:

> 2) Offset, skip and sizelimit support

> I was able to open such a partition with plain dmsetup; 'cryptsetup
> loopaesOpen' didn't work because '--size','--skip' and '--offset' are
> not supported. Perhaps you could add support for these switches to
> loopaesOpen; the necessary changes in cryptsetup seems trivial.
> ( '--offset' - but not '--skip' - is already mentioned in the manpage
> as a supported option for loopaesOpen )

I added offset support, seems loopAES always uses offset==skip
(IOW initial vector is always related to absolute sector size on the device).

Reading of keyfile from device can be limited by --keyfile-size switch,
but as described elsewhere there is no internal gpg support, so gpg encrypted
key is stored on device itself, you have to process it using gpg first.

I do not plan to add sizelimit option, this can just cause confusion.

(In fact you can do that using cryptsetup resize command afterwards
or by limiting underlying device. If it is problem, please show me
real example where it is needed.)

I'll release another RC soon (also with keyfile limits rewritten).

Thanks,
Milan