From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.saout.de ([127.0.0.1]) by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X45UkHVflaYO for ; Sun, 4 Sep 2011 20:56:25 +0200 (CEST) Received: from smtp.meme.com (janus.meme.com [69.17.73.118]) by mail.saout.de (Postfix) with ESMTP for ; Sun, 4 Sep 2011 20:56:24 +0200 (CEST) Received: from mofo.meme.com (unknown [192.168.1.2]) by smtp.meme.com (Postfix) with ESMTP id 239E0A061 for ; Sun, 4 Sep 2011 13:56:22 -0500 (CDT) Received: from mofo (localhost.localdomain [127.0.0.1]) by mofo.meme.com (Postfix) with ESMTP id 053F343D00 for ; Sun, 4 Sep 2011 13:56:22 -0500 (CDT) Date: Sun, 04 Sep 2011 13:56:21 -0500 From: "Karl O. Pinc" Message-Id: <1315162581.32720.3@mofo> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=-j1u6pxOrdPbNK/JAVRMn" Subject: [dm-crypt] cryptsetup.8 man page patches List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de --=-j1u6pxOrdPbNK/JAVRMn Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, Attached are 3 patches to cryptsetup.8 you may or may not find useful. (Patches to be applied from within the man directory). The first and second must be applied in order. Patched against the latest svn readonly. cryptsetup.8.sentences.patch1: Sentence structure edits and clarification of what effective revocation means. cryptsetup.8.slots.patch2 New text explaining the "slot" and "key" vocabulary. cryptsetup.8.luksremovekey.patch3 Since the vocabulary (remove) used in luksRemoveKey differs from that (kill) used in luksKillSlot clarify that they do the same thing. (IMO, it would have been nice if the operation names were "symmetric", say, 'luksRemoveKey' and 'luksRemoveSlot because after glancing at the code it seems they wind up calling the same function. Oh well.) Regards, Karl Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein --=-j1u6pxOrdPbNK/JAVRMn Content-Type: text/x-patch; charset=us-ascii; name=cryptsetup.8.sentences.patch1 Content-Disposition: attachment; filename=cryptsetup.8.sentences.patch1 Content-Transfer-Encoding: quoted-printable --- cryptsetup.8 2011-09-04 12:03:10.000000000 -0500 +++ cryptsetup.8.sentences 2011-09-04 13:25:57.000000000 -0500 @@ -32,9 +32,10 @@ If \-\-size (in sectors) is not specified, the size of the underlying bloc= k device is used. .SH LUKS EXTENSION LUKS, Linux Unified Key Setup, is a standard for hard disk encryption. -It standardizes a partition header, as well as the format of the bulk data= . -LUKS can manage multiple passwords, that can be revoked effectively -and that are protected against dictionary attacks with PBKDF2. +It standardizes a partition header as well as the format of the bulk data. +LUKS can manage multiple passwords that can be individually revoked and +effectively scrubbed from persistent media, and that are protected +against dictionary attacks with PBKDF2. =20 These are valid LUKS actions: =20 --=-j1u6pxOrdPbNK/JAVRMn Content-Type: text/x-patch; charset=us-ascii; name=cryptsetup.8.slots.patch2 Content-Disposition: attachment; filename=cryptsetup.8.slots.patch2 Content-Transfer-Encoding: quoted-printable --- cryptsetup.8.sentences 2011-09-04 13:25:57.000000000 -0500 +++ cryptsetup.8.slots 2011-09-04 13:36:09.000000000 -0500 @@ -37,6 +37,12 @@ effectively scrubbed from persistent media, and that are protected against dictionary attacks with PBKDF2. =20 +Each password, usually called a +.B key +in this document, is associated with a slot, of which there are typically = 8. +Key operations that do not specify a slot affect the first slot +matching the supplied key. + These are valid LUKS actions: =20 \fIluksFormat\fR [] --=-j1u6pxOrdPbNK/JAVRMn Content-Type: text/x-patch; charset=us-ascii; name=cryptsetup.8.luksremovekey.patch3 Content-Disposition: attachment; filename=cryptsetup.8.luksremovekey.patch3 Content-Transfer-Encoding: quoted-printable --- cryptsetup.8.slots 2011-09-04 13:36:09.000000000 -0500 +++ cryptsetup.8.luksremovekey 2011-09-04 13:38:20.000000000 -0500 @@ -95,7 +95,7 @@ .PP \fIluksRemoveKey\fR []=20 .IP -remove supplied key or key file from LUKS device +remove supplied key or key file from LUKS device in the manner of \fIluksK= illSlot\fR. .PP \fIluksChangeKey\fR [] .IP --=-j1u6pxOrdPbNK/JAVRMn--