URL:
<http://savannah.gnu.org/bugs/?45641>
Summary: cryptomount with dmsetup-like arguments
Project: GNU GRUB
Submitted by: chewbaccakl
Submitted on: Mon 27 Jul 2015 08:58:28 PM GMT
Category: Security
Severity: Major
Priority: 5 - Normal
Item Group: Feature Request
Status: None
Privacy: Public
Assigned to: None
Originator Name: Krzusi
Originator Email:
Open/Closed: Open
Discussion Lock: Any
Release:
Release: Git master
Reproducibility: Every Time
Planned Release: None
_______________________________________________________
Details:
We know grub can open encrypted volumes with luks or geli headers.
Is it possible to specify AES-XTS encrypted volume without luks/geli?
For instance: my main lvm's pv volume is defined with dmsetup as:
sda_crypt: 0 12345678 crypt aes-xts-plain
0000000000000000000000000000000000000000000000000000000000000000 0 8:0 409600
and I would love to map is with something similar to (nonexistend) command:
cryptomap (sda_crypt) 0 12345678 --cipher=aes-xts-plain
--key=0000000000000000000000000000000000000000000000000000000000000000
--dev=(hd0) --offset=409600
I think it should be possible by making an easy patch to
grub-core/disk/cryptodisk.c but perhaps it is not necessary, is it?
_______________________________________________________
Reply to this item at:
<http://savannah.gnu.org/bugs/?45641>
_______________________________________________
Message sent via/by Savannah
http://savannah.gnu.org/
_______________________________________________
Bug-grub mailing list
Bug-grub@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-grub
