Your message dated Fri, 11 Jul 2025 22:09:03 +0200
with message-id <ahfvx1wzctncu...@debian.org>
and subject line Re: Bug#1109117: release-notes: cryptsetup: Document cipher
and password hashing algorithm changes for plain mode
has caused the Debian Bug report #1109117,
regarding release-notes: cryptsetup: Document cipher and password hashing
algorithm changes for plain mode
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1109117: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109117
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release-notes
Severity: normal
Hi,
cryptsetup ≥2:2.7.0~ has new default default cipher and password hashing
algorithms for plain mode, which might break some existing setups and
therefore should be mentioned in the release notes. The following text
from cryptsetup=2:2.7.0~rc0-1's NEWS entry can probably be copied
verbatim.
--8<--------------------------------------------------------------------->8--
Default cipher and password hashing for plain mode have respectively
been changed to aes-xts-plain64 and sha256 (from aes-cbc-essiv:sha256
resp. ripemd160).
The new values matches what is used for LUKS, but the change does NOT
affect LUKS volumes.
This is a backward incompatible change for plain mode when relying on
the defaults, which (for plain mode only) is strongly advised against.
For many releases the Debian wrappers found in the ‘cryptsetup’ binary
package have spewed a loud warning for plain devices from crypttab(5)
where ‘cipher=’ or ‘hash=’ are not explicitly specified. The
cryptsetup(8) executable now issue such a warning as well.
--8<--------------------------------------------------------------------->8--
--
Guilhem.
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
On Fri, 11 Jul 2025 at 18:15:38 +0100, Justin B Rye wrote:
> I > already said this in
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070314#10
> but I gather you didn't see that.
Oops sorry for the duplicate, I forgot I had filed the request already.
--
Guilhem.
signature.asc
Description: PGP signature
--- End Message ---
