]> git.ipfire.org Git - thirdparty/grub.git/commitdiff
tests/util/grub-fs-tester: Use Argon2id for LUKS2 test
authorGary Lin <glin@suse.com>
Wed, 15 Oct 2025 03:00:26 +0000 (11:00 +0800)
committerDaniel Kiper <daniel.kiper@oracle.com>
Tue, 21 Oct 2025 12:09:02 +0000 (14:09 +0200)
Given that the LUKS1 test already covers PBKDF2, the default KDF for the
LUKS2 test has been switched to Argon2id to ensure both algorithms are
validated.

Signed-off-by: Gary Lin <glin@suse.com>
Tested-By: Waldemar Brodkorb <wbx@openadk.org>
Reviewed-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
tests/util/grub-fs-tester.in

index cac58dafa8ad7af19784c01fdeaef95382a61709..126f19a7e882c59872275ce42658eaa5e9f0e252 100644 (file)
@@ -860,8 +860,14 @@ for LOGSECSIZE in $(range "$MINLOGSECSIZE" "$MAXLOGSECSIZE" 1); do
                    MOUNTDEVICE="/dev/mapper/grub_test-testvol"
                    MOUNTFS=ext2
                    "mkfs.ext2" -L "$FSLABEL" -q "${MOUNTDEVICE}"  ;;
-               x"luks"*)
-                   echo -n "$PASS" | cryptsetup luksFormat --type "$fs" --sector-size $SECSIZE --pbkdf pbkdf2 --force-password --disable-locks $LODEVICE
+               xluks1)
+                   echo -n "$PASS" | cryptsetup luksFormat --type luks1 --sector-size $SECSIZE --pbkdf pbkdf2 --force-password --disable-locks $LODEVICE
+                   echo -n "$PASS" | cryptsetup open --disable-locks $LODEVICE "$DMNAME"
+                   MOUNTDEVICE="/dev/mapper/${DMNAME}"
+                   MOUNTFS=ext2
+                   "mkfs.ext2" -L "$FSLABEL" -q "${MOUNTDEVICE}"  ;;
+               xluks2)
+                   echo -n "$PASS" | cryptsetup luksFormat --type luks2 --sector-size $SECSIZE --pbkdf argon2id --force-password --disable-locks $LODEVICE
                    echo -n "$PASS" | cryptsetup open --disable-locks $LODEVICE "$DMNAME"
                    MOUNTDEVICE="/dev/mapper/${DMNAME}"
                    MOUNTFS=ext2