[PATCH] Default to XTS cipher mode for new LUKS devices.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



---
 storage/formats/luks.py |    6 ++++++
 1 files changed, 6 insertions(+), 0 deletions(-)

diff --git a/storage/formats/luks.py b/storage/formats/luks.py
index f5c2363..251e54d 100644
--- a/storage/formats/luks.py
+++ b/storage/formats/luks.py
@@ -66,6 +66,12 @@ class LUKS(DeviceFormat):
         self.key_size = kwargs.get("key_size")
         self.mapName = kwargs.get("name")
 
+        if not self.exists and not self.cipher:
+            self.cipher = "aes-xts-plain"
+            if not self.key_size:
+                # default to the max (512 bits) for aes-xts
+                self.key_size = 512
+
         # FIXME: these should both be lists, but managing them will be a pain
         self.__passphrase = kwargs.get("passphrase")
         self._key_file = kwargs.get("key_file")
-- 
1.6.0.6

_______________________________________________
Anaconda-devel-list mailing list
Anaconda-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/anaconda-devel-list

[Index of Archives]     [Kickstart]     [Fedora Users]     [Fedora Legacy List]     [Fedora Maintainers]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]
  Powered by Linux