From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from list by lists.gnu.org with archive (Exim 4.71) id 1Z4muI-0002MV-04 for mharc-grub-devel@gnu.org; Tue, 16 Jun 2015 05:11:46 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:45456) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Z4muF-0002L5-6Z for grub-devel@gnu.org; Tue, 16 Jun 2015 05:11:44 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Z4muC-0000Ve-Ga for grub-devel@gnu.org; Tue, 16 Jun 2015 05:11:43 -0400 Received: from johnlane.plus.com ([212.159.104.145]:63682 helo=sodium.amajohn.co.uk) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Z4muC-0000Uy-93 for grub-devel@gnu.org; Tue, 16 Jun 2015 05:11:40 -0400 Received: by sodium.amajohn.co.uk (Postfix, from userid 1000) id A0A168A5; Tue, 16 Jun 2015 10:11:37 +0100 (BST) Received: from hydrogen.amajohn.co.uk (hydrogen.amajohn.co.uk [10.0.200.1]) by sodium.amajohn.co.uk (Postfix) with ESMTPSA id 553EF7F1 for ; Tue, 16 Jun 2015 10:11:37 +0100 (BST) From: John Lane To: grub-devel@gnu.org Subject: Cryptomount enhancements: detached headers, key-files and plain mode Date: Tue, 16 Jun 2015 10:11:11 +0100 Message-Id: <1434445875-6846-1-git-send-email-john@lane.uk.net> X-Mailer: git-send-email 2.1.2 X-Outbound-Checked: Yes X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 212.159.104.145 X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: The development of GNU GRUB List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jun 2015 09:11:44 -0000 These patches provide extensions to the "cryptomount" command. There are four patches: 1. Support LUKS detached headers so that the header can be separated from the data payload, e.g. by storing on external removable media such as a USB key. 2. Support key files so that passphrase entry can be suppressed. The passphrase can be stored in a "key file" that can be stored, for example, on external removable media such as a USB key. 3. Support plain dm-crypt mode. Allow plain volumes to be opened. This is largely a re-factoring of exisitng code to allow the crypto routines be used independently of LUKS. 4. Support for hyphens in UUID. The "-u" option of cryptomount accepts a UUID. This option allows that to be delimited with hyphens so that the same format can be given to Grub as is passed to the Linux kernel boot options. I can supply more information as required in reply to the individual patches.