From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gmazyland@gmail.com>
Received: from mail-wm1-x334.google.com (mail-wm1-x334.google.com
 [IPv6:2a00:1450:4864:20::334])
 (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
 (No client certificate requested)
 by mail.server123.net (Postfix) with ESMTPS
 for <dm-crypt@saout.de>; Sat, 10 Oct 2020 19:48:28 +0200 (CEST)
Received: by mail-wm1-x334.google.com with SMTP id d3so12894516wma.4
 for <dm-crypt@saout.de>; Sat, 10 Oct 2020 10:48:28 -0700 (PDT)
References: <CAOnaoi-fB2YZ=aY2kt+dZvPByef1amRTToXLno5-DDY+=tnTSg@mail.gmail.com>
From: Milan Broz <gmazyland@gmail.com>
Message-ID: <1973481a-7b54-e7eb-ea29-f71bdb5acfe4@gmail.com>
Date: Sat, 10 Oct 2020 19:48:25 +0200
MIME-Version: 1.0
In-Reply-To: <CAOnaoi-fB2YZ=aY2kt+dZvPByef1amRTToXLno5-DDY+=tnTSg@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Subject: Re: [dm-crypt] SSD encryption using cryptsetup
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <https://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <https://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <https://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: KRISHNAJA MENON <krishnajamenon92@gmail.com>, dm-crypt@saout.de

On 10/10/2020 05:06, KRISHNAJA MENON wrote:
> Setup details:
> Machine 1: Ubuntu x86_64
> Machine 2: Linux-aarch64 (arm)
> 
> 1. luksFormat an external SDD on x86 using *aes-cbc-plain:ripemd160* on x86 machine

This cipher specification is nonsense, plain IV does not take arguments and it will
be rejected by a recent kernels.
(Moreover, CBC with plain IV mode is insecure due to predictable IV.)

Please *do* *not* change defaults if you do not understand security impact.
If you want CBC mode (XTS mode is default for LUKS), use aes-cbc-essiv:sha256

(It should fail even in luksFormat, but you did not send neither debug output nor version related...)

Milan