[dm-crypt] cryptsetup problem on Raspberry Pi 2 w 512bit key-size (works on Raspberry Pi 1, x86_64, 256bit)

Milan Broz gmazyland at gmail.com
Sun Feb 22 21:20:10 CET 2015


On 02/22/2015 08:40 PM, Johannes Ernst wrote:
>> (If us use other hash it works even on Pi? Try sha1 and sha256 at least.)
> 
> It appears independent of the hash involved: I tried sha1, sha256 in addition to the original sha256. The behavior is the same:
> 1. cryptsetup open … does not open
> 2. cryptsetup open —debug opens on the second attempt to put the password in.

ok, this is really strange.


One (random) guess from the log:

> # Using userspace crypto wrapper to access keyslot area.

it means that code is using kernel userspace crypto
(and cryptsetup already revealed at least two problems there...)

Could you try it without it? (Code should fallback to old dmcrypt temporary devices mode).

You can do it either by

 - disabling/blacklisting kernel modules which provides it: af_alg.ko and algif_skcipher.ko
  (or disable CRYPTO_USER_API, CRYPTO_USER_API_SKCIPHER when compiling kernel)

 - try to run older cryptsetup (at least 1.6.4 or older)

I am afraid I cannot help more here without reproducing it...
(Is it RPI2 only issue or anyone see it on other ARM device?)

Milan


More information about the dm-crypt mailing list