Re: [dm-crypt] cryptsetup problem on Raspberry Pi 2 w 512bit key-size (works on Raspberry Pi 1, x86_64, 256bit)

[Johannes Ernst <johannes.ernst@gmail.com>]

It’s not the keyboard layout: I interact with both Pi’s through ssh and terminal on OSX. And it even happens with extremely simple pass phrases such as ‘asdf’.


> On Feb 20, 2015, at 14:25, Lars Winterfeld <lars.winterfeld@tu-ilmenau.de> wrote:
> 
> Hi.
> 
> You could add another keyslot with a keyfile and open the device with
> that to be absolutely sure you did not just miss-type the password
> (because of a different keyboard layout on the Raspberry Pi 2 etc.)
> 
> 
> 
> On 20.02.2015 22:37, Johannes Ernst wrote:
>> TL;DR: 
>>    cryptsetup --hash sha512 --key-size 512 -v luksFormat ./test.img
>> cannot be opened again on the new Raspberry Pi 2. Shorter key-size, and other platforms work.
>> 
>> This is a bit a puzzler to me …
>> 
>> This is what I do:
>>    # Create 8M image
>>    dd if=/dev/zero of=./test.img count=8 bs=1M
>>    # Set up encryption -- enter a suitable password when asked
>>    cryptsetup --hash sha512 --key-size 512 -v luksFormat ./test.img
>>    # Now attempt to open it, entering the same password
>>    cryptsetup open test.img test
>> 
>> and indeed it works for me on x86_64, the Raspberry PI 1, and the BeagleBone Black. However, it fails on the Raspberry Pi 2 with:
>> 	"No key available with this passphrase."
>> 
>> If I create the encrypted image on the Raspberry Pi 2, I can open it on other platforms. However, I cannot open any image with these parameters on the Raspberry Pi 2, regardless where it was created.
>> 
>> If I set the key-size to 256 bit, it works on all platforms.
>> 
>> The Raspberry Pi 2 is an ARM v7 processor, unlike the Raspberry Pi 1. But then, the BeagleBone Black is Arm V7, too.
>> 
>> Puzzled ...
>> 
>> 
>> 
>> 
>> Johannes.
>> 
>> _______________________________________________
>> dm-crypt mailing list
>> dm-crypt@saout.de
>> http://www.saout.de/mailman/listinfo/dm-crypt
>> 
> 
> 
> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt