* Markus Huehnerbein | 2007-08-29 16:41:57 [+0200]: >Thanks a lot! I confirm that it works with "-s 128" and also if "-s" is >skipped! But if I try to use cryptsetup with ESSIV (cryptsetup -c >aes-cbc-essiv:sha256 -y -s 128 luksFormat /dev/hda2) I get the same what about sha128 instead? >error. If the "geode-aes" does not support essiv why is this task not >performed by another algorithm in the cryptoAPI? Actually it is. geode does not support keys != 128 bit. ESSIV uses as key the output of sha256 what is 256. Check dmesg please. If my theory is correct than you should see in dmesg or somewhere: "Failed to set key for ESSIV cipher" Is it? >Thanks, >Markus Sebastian - To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html