Na}{

File Content: `v2.3.6-ReleaseNotes`

Cryptsetup 2.3.6 Release Notes
==============================
Stable bug-fix release with minor extensions.

All users of cryptsetup 2.x and later should upgrade to this version.

Changes since version 2.3.5
~~~~~~~~~~~~~~~~~~~~~~~~~~~

* integritysetup: Fix possible dm-integrity mapping table truncation.

  While integritysetup in standalone mode (no encryption) was not
  designed to provide keyed (and cryptographically strong) data
  integrity protection, some options can use such algorithms (HMAC).

  If a key is used, it is directly sent to the kernel dm-integrity as
  a mapping table option (no key derivation is performed).
  For HMAC, such a key could be quite long (up to 4096 bytes in
  integritysetup CLI).

  Unfortunately, due to fixed buffers and not correctly checking string
  truncation, some parameter combinations could cause truncation
  of the dm-integrity mapping table.
  In most cases, the table was rejected by the kernel.
  The worst possible case was key truncation for HMAC options
  (internal_hash and journal_mac dm-integrity table options).

  This release fixes possible truncation and also adds more sanity
  checks to reject truncated options.
  Also, integritysetup now mentions maximal allowed key size
  in --help output.

  For old standalone dm-integrity devices where the key length was
  truncated, you have to modify (shorten) --integrity-key-size
  resp. --journal-integrity-key-size option now.

  This bug is _not_ present for dm-crypt/LUKS, LUKS2 (including
  integrity protection), or dm-verity devices; it affects only
  standalone dm-integrity with HMAC integrity protection.

* cryptsetup: Backup header can be used to activate TCRYPT device.
  Use --header option to specify the header.

* cryptsetup: Avoid LUKS2 decryption without detached header.
  This feature will be added later and is currently not supported.

* Additional fixes and workarounds for common warnings produced
  by some static analysis tools (like gcc-11 analyzer) and additional
  code hardening.

* Fix standalone libintl detection for compiled tests.

* Add Blake2b and Blake2s hash support for crypto backends.
  Kernel and gcrypt crypto backend support all variants.
  OpenSSL supports only Blake2b-512 and Blake2s-256.
  Crypto backend supports kernel notation e.g. "blake2b-512".

Name	Size	Permission
examples	---	0755
AUTHORS	137 bytes	0644
FAQ.gz	48990 bytes	0644
Keyring.txt	2724 bytes	0644
LUKS2-locking.txt	2711 bytes	0644
NEWS.Debian.gz	1057 bytes	0644
README.Debian.gz	5680 bytes	0644
README.debug	2731 bytes	0644
README.gnupg	1848 bytes	0644
README.gnupg-sc	2354 bytes	0644
README.keyctl	3583 bytes	0644
README.md.gz	2223 bytes	0644
README.opensc.gz	2219 bytes	0644
changelog.Debian.gz	2251 bytes	0644
copyright	9292 bytes	0644
v1.0.7-ReleaseNotes	2921 bytes	0644
v1.1.0-ReleaseNotes.gz	2275 bytes	0644
v1.1.1-ReleaseNotes	1796 bytes	0644
v1.1.2-ReleaseNotes	1594 bytes	0644
v1.1.3-ReleaseNotes	482 bytes	0644
v1.2.0-ReleaseNotes.gz	2124 bytes	0644
v1.3.0-ReleaseNotes.gz	2134 bytes	0644
v1.3.1-ReleaseNotes	421 bytes	0644
v1.4.0-ReleaseNotes.gz	2253 bytes	0644
v1.4.1-ReleaseNotes	889 bytes	0644
v1.4.2-ReleaseNotes	1630 bytes	0644
v1.4.3-ReleaseNotes	2359 bytes	0644
v1.5.0-ReleaseNotes.gz	3320 bytes	0644
v1.5.1-ReleaseNotes	1295 bytes	0644
v1.6.0-ReleaseNotes.gz	3818 bytes	0644
v1.6.1-ReleaseNotes	1041 bytes	0644
v1.6.2-ReleaseNotes	985 bytes	0644
v1.6.3-ReleaseNotes	1859 bytes	0644
v1.6.4-ReleaseNotes	2036 bytes	0644
v1.6.5-ReleaseNotes	2479 bytes	0644
v1.6.6-ReleaseNotes	1093 bytes	0644
v1.6.7-ReleaseNotes	3333 bytes	0644
v1.6.8-ReleaseNotes	2061 bytes	0644
v1.7.0-ReleaseNotes	3101 bytes	0644
v1.7.1-ReleaseNotes	1371 bytes	0644
v1.7.2-ReleaseNotes	1487 bytes	0644
v1.7.3-ReleaseNotes	811 bytes	0644
v1.7.4-ReleaseNotes	657 bytes	0644
v1.7.5-ReleaseNotes	833 bytes	0644
v2.0.0-ReleaseNotes.gz	9728 bytes	0644
v2.0.1-ReleaseNotes.gz	2226 bytes	0644
v2.0.2-ReleaseNotes.gz	1992 bytes	0644
v2.0.3-ReleaseNotes.gz	2448 bytes	0644
v2.0.4-ReleaseNotes.gz	2325 bytes	0644
v2.0.5-ReleaseNotes.gz	2068 bytes	0644
v2.0.6-ReleaseNotes.gz	1960 bytes	0644
v2.1.0-ReleaseNotes.gz	3484 bytes	0644
v2.2.0-ReleaseNotes.gz	4582 bytes	0644
v2.2.1-ReleaseNotes	1413 bytes	0644
v2.2.2-ReleaseNotes	2151 bytes	0644
v2.3.0-ReleaseNotes.gz	3250 bytes	0644
v2.3.1-ReleaseNotes	1770 bytes	0644
v2.3.2-ReleaseNotes	1499 bytes	0644
v2.3.3-ReleaseNotes	1396 bytes	0644
v2.3.4-ReleaseNotes.gz	2001 bytes	0644
v2.3.5-ReleaseNotes.gz	3129 bytes	0644
v2.3.6-ReleaseNotes	2316 bytes	0644
v2.4.0-ReleaseNotes.gz	4766 bytes	0644
v2.4.1-ReleaseNotes	1942 bytes	0644
v2.4.2-ReleaseNotes	1375 bytes	0644
v2.4.3-ReleaseNotes.gz	1996 bytes	0644

Name

Size

Permission

Action

examples

---

0755