This bug was fixed in the package cryptsetup - 2:1.6.6-5ubuntu2.1
---
cryptsetup (2:1.6.6-5ubuntu2.1) xenial; urgency=medium
* d/p/fips-fix-luksformat-with-recent-kernels -- fix luksFormat with recent
FIPS enabled kernels. (LP: #1715010)
-- Marcelo Henrique Cerri Thu, 10 Aug
** Changed in: cryptsetup (Ubuntu)
Status: Fix Committed => Fix Released
** Also affects: cryptsetup (Ubuntu Zesty)
Importance: Undecided
Status: New
** Changed in: cryptsetup (Ubuntu Zesty)
Status: New => Triaged
** Changed in: cryptsetup (Ubuntu Zesty)
Importance: Un
** Tags removed: verification-needed-xenial
** Tags added: verification-done-xenial
** Description changed:
SRU Justification:
Impact: The kernel crypto API rejects weak XTS keys in FIPS mode and
the current version of cryptsetup in xenial do some tests with a zeroed
key to check ciph
Hi, I installed the proposed cryptsetup and ran the common criteria
testcases for cryptsetup, that before had failed. My environment
includes the fips-supported kernel and modules. With the new cryptsetup,
all the common criteria cryptsetup testcases passed.
--
You received this bug notification
We'll have to wait with releasing the xenial change until the artful's
2:1.7.3-4ubuntu1 version migrates to the release pocket.
By the way - seeing this bug, doesn't this also affect zesty?
** Also affects: cryptsetup (Ubuntu Xenial)
Importance: Undecided
Status: New
** Changed in: cry
