Re: [arch-projects] [initscripts][RFC] cryptsetup: deprecate old syntax and default to the systemd one

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 07/28/2012 07:09 PM, Heiko Baums wrote:

Am Sat, 28 Jul 2012 18:51:55 +0200 schrieb Jan Steffens :

...

size= is key size, NOT keyfile size.

It seems systemd's crypttab currently has no means of specifying keyfile size, so it will always try to read the maximum (up to 8MB according to cryptsetup --help).

And what is the difference between the keyfile size and the key size?

According to crypttab(5): "size= Specifies the key size in bits; see cryptsetup(8) for possible values and the default value of this option." As it is custom in cryptography, key sizes are given in bits, like RSA 4096 which means the key is 512 bytes long. If your former size argument was given in bytes, convert that number to bits and try again. Greetings, Christoph -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBCAAGBQJQFCThAAoJEOGIwUZuUxpnuF4P/j5HEGN6Hb4xPrUmiFoMycpZ oZJ8jEmKFlZveqDFg3f9KAFPxtmgwOK8Wneb1DrBkqviiRqm71n4w/IXPuiFDXtF XtENAo9QAfIxdEZovBNeEid8v7npc1Xn5WnKHsZOTbdOqsl1gYqQCDNI/pdu9JLQ XW1Ipan9KtUEIN+vvA3vXJaa380i6RP6zsIoGfxbJrEk4yzSzIFn66dYwBsOrBlg /VYVs48PtO41F5mwKszTfyQ3zfMEsowFv+CbPAiZIRObka6MTn7eKno/TifnkYXF 6WKAVI/6bdPeoerRe2fjluZimOBiAzsjiSjIOLgkPzEDu8bdUi0SDmr6d5ot5OFu PfvjNeRHJq7KAil6BxbBW+g9SOUQ77bvhXDNowwurqtSV0uPAxrI5G17mBhoSzdG Bqi++11BLVbsMhhDmy+nt9ChN1ktZSDawDC6C80pxKg/4UAMRmk5Opf0d0yLUzsS yOTg42cz7sGQ6Ibcx5vtWBk3jrmrz534cxUhXyxx3Gt0tE27AvgJ9HARvPeepVwX j3/g1TvyQFdL9SyOwjH3A4af2RtQsR4PsmGPuyI0zht8/IVP5ylU2jL5hznHHMin wKaA4BL1hazgRXb3saHWNvUs/y9mTWx82147qZpfu0Ys9PKoGgvDOj4wt22YMJ9x DJEIinJhNr92L/6hRA7y =5g4a -----END PGP SIGNATURE-----