[dm-crypt] cryptsetup problem on Raspberry Pi 2 w 512bit key-size (works on Raspberry Pi 1, x86_64, 256bit)

Lars Winterfeld lars.winterfeld at tu-ilmenau.de
Fri Feb 20 23:25:49 CET 2015


You could add another keyslot with a keyfile and open the device with
that to be absolutely sure you did not just miss-type the password
(because of a different keyboard layout on the Raspberry Pi 2 etc.)

On 20.02.2015 22:37, Johannes Ernst wrote:
> TL;DR: 
>     cryptsetup --hash sha512 --key-size 512 -v luksFormat ./test.img
> cannot be opened again on the new Raspberry Pi 2. Shorter key-size, and other platforms work.
> This is a bit a puzzler to me …
> This is what I do:
>     # Create 8M image
>     dd if=/dev/zero of=./test.img count=8 bs=1M
>     # Set up encryption -- enter a suitable password when asked
>     cryptsetup --hash sha512 --key-size 512 -v luksFormat ./test.img
>     # Now attempt to open it, entering the same password
>     cryptsetup open test.img test
> and indeed it works for me on x86_64, the Raspberry PI 1, and the BeagleBone Black. However, it fails on the Raspberry Pi 2 with:
> 	"No key available with this passphrase."
> If I create the encrypted image on the Raspberry Pi 2, I can open it on other platforms. However, I cannot open any image with these parameters on the Raspberry Pi 2, regardless where it was created.
> If I set the key-size to 256 bit, it works on all platforms.
> The Raspberry Pi 2 is an ARM v7 processor, unlike the Raspberry Pi 1. But then, the BeagleBone Black is Arm V7, too.
> Puzzled ...
> Johannes.
> _______________________________________________
> dm-crypt mailing list
> dm-crypt at saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://www.saout.de/pipermail/dm-crypt/attachments/20150220/b8a83752/attachment.asc>

More information about the dm-crypt mailing list