Re: [PATCH] Default to XTS cipher mode for new LUKS devices.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 04/06/2009 05:14 PM, David Lehman wrote:
---
  storage/formats/luks.py |    6 ++++++
  1 files changed, 6 insertions(+), 0 deletions(-)

diff --git a/storage/formats/luks.py b/storage/formats/luks.py
index f5c2363..251e54d 100644
--- a/storage/formats/luks.py
+++ b/storage/formats/luks.py
@@ -66,6 +66,12 @@ class LUKS(DeviceFormat):
          self.key_size = kwargs.get("key_size")
          self.mapName = kwargs.get("name")

+        if not self.exists and not self.cipher:
+            self.cipher = "aes-xts-plain"
+            if not self.key_size:
+                # default to the max (512 bits) for aes-xts
+                self.key_size = 512
+
          # FIXME: these should both be lists, but managing them will be a pain
          self.__passphrase = kwargs.get("passphrase")
          self._key_file = kwargs.get("key_file")

Sounds good to me.  Patch looks fine.

--
David Cantrell <dcantrell@xxxxxxxxxx>
Red Hat / Honolulu, HI

_______________________________________________
Anaconda-devel-list mailing list
Anaconda-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/anaconda-devel-list

[Index of Archives]     [Kickstart]     [Fedora Users]     [Fedora Legacy List]     [Fedora Maintainers]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]
  Powered by Linux