]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/cryptsetup/cryptsetup.c
cryptsetup: Add LUKS2 token support. 12636/head
authorMilan Broz <gmazyland@gmail.com>
Mon, 27 May 2019 07:44:14 +0000 (09:44 +0200)
committerMilan Broz <gmazyland@gmail.com>
Tue, 28 May 2019 13:49:16 +0000 (15:49 +0200)
commit894bb3ca4c730cc9e9d46ef5004ba4ca5e201d8d
treeb2d4cb3f746d74df6b3a879ad92a5ef82e35445f
parentea9a9d49e4af31c49e5c216e7e5e2f533e727579
cryptsetup: Add LUKS2 token support.

LUKS2 supports so-called tokens. The libcryptsetup internally
support keyring token (it tries to open device using specified
keyring entry).
Only if all token fails (or are not available), it uses a passphrase.

This patch aligns the functionality with the cryptsetup utility
(cryptsetup luksOpen tries tokens first) but does not replace
the systemd native ask-password function (can be used the same in
combination with this patch).
src/cryptsetup/cryptsetup.c