Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-119083

Libcryptsetup API for encryption default parameters.

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Epic Epic
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • cryptsetup
    • None
    • Libcryptsetup API for encryption default parameters.
    • None
    • rhel-storage-crs
    • 5
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      Libcryptsetup lacks API providing (safe) dafault encryption parameters for reencryption (all modes) or luksFormat actions. The CLI provides defaults but there couple users of libcryptsetup that would make good use of the API.

      Libblockdev (vtrefny@redhat.com) and, I guess also Stratis project, would make good use of the API. Any future change in default encryption parameters would affect libcryptsetup users.

      Also, there are different default for ordinary installations and RHEL instalations in FIPS mode. Eventual new future "profiles" might be added (embedded devices, RHEL on ARM devices, etc.).

              okozina@redhat.com Ondrej Kozina
              okozina@redhat.com Ondrej Kozina
              Ondrej Kozina Ondrej Kozina
              Guangwu Zhang Guangwu Zhang
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated: