[dm-crypt] Option "validate passphrase" for command cryptsetup

Arno Wagner arno at wagner.name
Tue Jun 19 14:29:16 CEST 2012


I think having this functionality is a good idea.

Arno


On Tue, Jun 19, 2012 at 01:26:22PM +0200, Milan Broz wrote:
> On 06/19/2012 12:53 PM, Louis wrote:
> > 	Hello,
> > 	for information, I wrote a small C program to check if the given
> > passphrase is correct, without doing anything on the disk. The command
> > is used this way:
> 
> > 	If you think it can benefit cryptsetup, I offer to write the necessary
> > patch to include it to cryptsetup (as a "luksValidateKey" LUKS action).
> 
> Special program or command is IMHO overkill, isn't enough just to add option
> to cryptsetup luksOpen (--dry-run, --no-activate, whatever you prefer)?
> 
> So it will work just like
> 
> # cryptsetup luksOpen /dev/sdc anything --dry-run --verbose
> Enter passphrase for /dev/sdc: 
> No key available with this passphrase.
> Enter passphrase for /dev/sdc: 
> Key slot 0 unlocked.
> Command successful.
> 
> Trivial to add to code... (while I am doing another RC today, it can be done
> today even ;-)
> 
> Milan
> _______________________________________________
> dm-crypt mailing list
> dm-crypt at saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt
> 

-- 
Arno Wagner,    Dr. sc. techn., Dipl. Inform.,   Email: arno at wagner.name 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
One of the painful things about our time is that those who feel certainty 
are stupid, and those with any imagination and understanding are filled 
with doubt and indecision. -- Bertrand Russell 


More information about the dm-crypt mailing list