[Bug 423372] Re: Use luksSuspend/luksResume in hibernation scripts

[mejo]

I don't agree that this bug is fixed. cryptsetup supports
luksSuspend/luksResume in recent Ubuntu releases, but these functions
are not used for suspend/hibernate yet. Please reopen. Unfortunately I
didn't have time to implement this in Debian yet either.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to cryptsetup in Ubuntu.
https://bugs.launchpad.net/bugs/423372

Title:
  Use luksSuspend/luksResume in hibernation scripts

Status in “cryptsetup” package in Ubuntu:
  Fix Released

Bug description:
  The latest trunk version of cryptsetup introduces support for luksSuspend/luksResume:
  http://code.google.com/p/cryptsetup/source/detail?r=104

  Excerpt from manpage:
  -------
  luksSuspend <name>
  suspends active device (all IO operations are frozen) and wipes encryption key from kernel. Kernel version 2.6.19 or later is required.

  After that operation you have to use \fIluksResume\fR to reinstate
  encryption key (and resume device) or \fIluksClose\fR to remove mapped
  device.

  WARNING: never try to suspend device where is the cryptsetup binary
  itself.

  luksResume <name>
  Resumes suspended device and reinstates encryption key. You will need provide passphrase identical to luksOpen command (using prompting or key file).
  -------

  This feature provides a way to implement secure hibernation without
  having to use an encrypted swap partition. It should be used in
  ubuntu's hibernation scripts as soon as a new stable version of
  cryptsetup is released.