[Bug 1558079] Re: cryptsetup tcryptOpen doesn't work anymore

[hede]

AFAIK there was no need for my patch to be included because the trusty
kernel maintainer reverted the upstream kernel.org changes to the kernel
which caused this bad behavior.

It seems like newer trusty kernels are affected again. (I'm not running
trusty with tcrypt-devices anymore, to test this by my own.)

Like in the past it's possible either to revert those changes to the
kernel (like referenced in #12) or patch cryptsetup (like with #7). You
can ask either the Ubuntu cryptsetup or kernel maintainers for fixes. In
past AFAIR it got fixed inside the kernel package but I'd prefer to
patch cryptsetup, if there's any good reason for kernel.org guys to add
those changes to their old-stable kernel releases... *my2ct*

btw: the patch is not needed with current upstream kernels or upstream
cryptsetup, since newer cryptsetup versions are not affected. It's the
combination of newer kernels (or older kernels with backported security
patches) with older cryptsetup which is problematic in case of Ubuntu
trusty.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to cryptsetup in Ubuntu.
https://bugs.launchpad.net/bugs/1558079

Title:
  cryptsetup tcryptOpen doesn't work anymore

Status in cryptsetup package in Ubuntu:
  Confirmed
Status in linux package in Ubuntu:
  Invalid

Bug description:
  I'm using cryptsetup to open TrueCrypt encrypted NTFS filesystems:
  cryptsetup tcryptOpen /dev/sdf2 tcrypt

  At least until linux-image-3.13.0-79-generic this work fine. 
  Booting linux-image-3.13.0-83-generic and running cryptsetup results in:

  Required kernel crypto interface not available.
  Ensure you have algif_skcipher kernel module loaded.

  The module algif_skcipher is loaded, so the tenor of the error message
  is wrong, but cryptsetup cannot open the container, so at least there
  _is_ some error. Probably it's related to some unsupported instruction
  set. With  linux-image-3.13.0-83 there are errors in dmesg which are
  not present with linux-image-3.13.0-79:

  AVX instructions are not detected

  System information:

  OS: Ubuntu 14.04.4 LTS
  CPU: Phenom II X6

  TCRYPT header information for /dev/sdf2
  Version:       	5
  Driver req.:	7
  Sector size:	512
  MK offset:	131072
  PBKDF2 hash:	ripemd160
  Cipher chain:	aes
  Cipher mode:	xts-plain64
  MK bits:       	512

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/1558079/+subscriptions