[dm-crypt] [ANNOUNCE] cryptsetup 1.7.5

Milan Broz gmazyland at gmail.com
Thu Apr 27 10:55:17 CEST 2017

The stable cryptsetup 1.7.5 release is available at


Please note that release packages are located on kernel.org


Feedback and bug reports are welcomed.

Cryptsetup 1.7.5 Release Notes

Changes since version 1.7.4

* Fixes to luksFormat to properly support recent kernel running in FIPS mode.

  Cryptsetup must never use a weak key even if it is just used for testing
  of algorithm availability. In FIPS mode, weak keys are always rejected.

  A weak key is for example detected if the XTS encryption mode use
  the same key for the tweak and the encryption part.

* Fixes accesses to unaligned hidden legacy TrueCrypt header.

  On a native 4k-sector device the old hidden TrueCrypt header is not
  aligned with the hw sector size (this problem was fixed in later TrueCrypt
  on-disk format versions).

  Cryptsetup now properly aligns the read so it does not fail.

* Fixes to optional dracut ramdisk scripts for offline re-encryption on initial boot.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://www.saout.de/pipermail/dm-crypt/attachments/20170427/1c979e19/attachment.asc>

More information about the dm-crypt mailing list