[PATCH v3 0/3] Cryptomount detached headers

From: brutser@perso.be
To: grub-devel@gnu.org
Cc: dkiper@net-space.pl, development@efficientek.com, ps@pks.im
Subject: [PATCH v3 0/3] Cryptomount detached headers
Date: Fri, 29 Jul 2022 20:56:18 +0200 (CEST)	[thread overview]
Message-ID: <ea-mime-62e42d52-3d39-40e2decc@www.mailo.com> (raw)

[-- Attachment #1: Type: text/plain, Size: 981 bytes --]

testing detached header failed:

1. built grub payload with following modules: ahci usb_keyboard part_msdos part_gpt at_keyboard cbfs cryptodisk luks2 lvm gcry_rijndael gcry_sha1 gcry_sha256 gcry_sha512

2. encrypt a partition: cryptsetup luksFormat --type luks2 -q -h sha512 -s 512 --pbkdf pbkdf2 --header /path/to/header --luks2-metadata-size=16k --luks2-keyslots-size=512k /dev/sda1

(where --luks2-metadata-size=16k --luks2-keyslots-size=512k is optional, this is just to minimize header size, but I also tested without).

3. from the grub cmd, i try to decrypt this partition using: cryptomount -H /path/to/header (ahci0,msdos1)

4. I also tried luks1 encryption with detached header.

whatever I try, I always get the same error:

"no cryptodisk module can handle this device"

Is this feature not 100% implemented yet, I saw people already verifying the patches and would expect this to be working, so if yes, this seems like a bug.

[-- Attachment #2: Type: text/html, Size: 1137 bytes --]