From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=BAYES_40, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2A3BFC433B4 for ; Fri, 14 May 2021 14:25:02 +0000 (UTC) Received: from mail.server123.net (mail.server123.net [78.46.64.186]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 8EDA061107 for ; Fri, 14 May 2021 14:25:01 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 8EDA061107 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=scientia.net Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=dm-crypt-bounces@saout.de X-Virus-Scanned: amavisd-new at saout.de Received-SPF: None (mailfrom) identity=mailfrom; client-ip=23.83.212.47; helo=cyan.elm.relay.mailchannels.net; envelope-from=calestyo@scientia.net; receiver= X-Greylist: delayed 566 seconds by postgrey-1.37 at siona; Fri, 14 May 2021 16:22:02 CEST Received: from cyan.elm.relay.mailchannels.net (cyan.elm.relay.mailchannels.net [23.83.212.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.server123.net (Postfix) with ESMTPS for ; Fri, 14 May 2021 16:22:01 +0200 (CEST) X-Sender-Id: instrampxe0y3a|x-authsender|calestyo@scientia.net Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id EC1317E219F for ; Fri, 14 May 2021 14:12:30 +0000 (UTC) Received: from mailgw-01.dd24.net (100-96-27-188.trex.outbound.svc.cluster.local [100.96.27.188]) (Authenticated sender: instrampxe0y3a) by relay.mailchannels.net (Postfix) with ESMTPA id E51F57E1497 for ; Fri, 14 May 2021 14:12:29 +0000 (UTC) X-Sender-Id: instrampxe0y3a|x-authsender|calestyo@scientia.net Received: from mailgw-01.dd24.net (mailgw-01.dd24.net [193.46.215.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384) by 100.96.27.188 (trex/6.2.1); Fri, 14 May 2021 14:12:30 +0000 X-MC-Relay: Neutral X-MailChannels-SenderId: instrampxe0y3a|x-authsender|calestyo@scientia.net X-MailChannels-Auth-Id: instrampxe0y3a X-Bubble-Attack: 3e09338a42092db8_1621001550459_2052804694 X-MC-Loop-Signature: 1621001550459:2217319161 X-MC-Ingress-Time: 1621001550459 Received: from heisenberg.fritz.box (ppp-46-244-246-192.dynamic.mnet-online.de [46.244.246.192]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: calestyo@scientia.net) by smtp.dd24.net (Postfix) with ESMTPSA id 363915FC26 for ; Fri, 14 May 2021 14:12:28 +0000 (UTC) Message-ID: From: Christoph Anton Mitterer To: dm-crypt@saout.de Date: Fri, 14 May 2021 16:12:27 +0200 In-Reply-To: <286a7fed-2e24-b622-d9fd-ed3445a547be@gmail.com> References: <286a7fed-2e24-b622-d9fd-ed3445a547be@gmail.com> User-Agent: Evolution 3.38.3-1 MIME-Version: 1.0 Message-ID-Hash: ZZNAZVID762UOUO5ZCVWTZKN6EVAYRNK X-Message-ID-Hash: ZZNAZVID762UOUO5ZCVWTZKN6EVAYRNK X-MailFrom: calestyo@scientia.net X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dm-crypt.saout.de-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; suspicious-header X-Mailman-Version: 3.3.2 Precedence: list Subject: [dm-crypt] Re: Reading the passphrase from a key-file List-Id: List-Help: List-Post: List-Subscribe: List-Unsubscribe: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit On Fri, 2021-05-14 at 15:41 +0200, Milan Broz wrote: > But if the input is a binary file, it will stop on the first EOL > (then you must use --keyfile-size). > Please read "NOTES ON PASSPHRASE PROCESSING FOR LUKS" in the man > page. The manpage might be a bit ambiguous there, it says: >>From key file: The complete keyfile is read up to the compiled-in >maximum size. Newline characters do not terminate the input. What exactly is a key file here? I assume "luksFormat []" definitely counts to it. Thus everyone who created his volumes like this, should be on the safe side (an quickly notice in any other operations, if he doesn't use the full key), right? Same, when "--key-file=someActualFile luksFormat " is used, I guess. But what about when --key-file=- is used? That's kind of a mix between "key file" and stdin, the later which is documented to end et EOL. I strongly hope in that case it also read the *full* stdin? Cheers, Chris. _______________________________________________ dm-crypt mailing list -- dm-crypt@saout.de To unsubscribe send an email to dm-crypt-leave@saout.de