[arch-projects] [initscripts][RFC] cryptsetup: deprecate old syntax and default to the systemd one

Christoph Vigano mail at cvigano.de
Sat Jul 28 13:44:01 EDT 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 07/28/2012 07:09 PM, Heiko Baums wrote:
> Am Sat, 28 Jul 2012 18:51:55 +0200 schrieb Jan Steffens
> <jan.steffens at gmail.com>:
> 
>> size= is key size, NOT keyfile size.
>> 
>> It seems systemd's crypttab currently has no means of specifying 
>> keyfile size, so it will always try to read the maximum (up to
>> 8MB according to cryptsetup --help).
> 
> And what is the difference between the keyfile size and the key
> size?

According to crypttab(5):
"size=
Specifies the key size in bits; see cryptsetup(8) for possible values
and the default value of this option."

As it is custom in cryptography, key sizes are given in bits, like RSA
4096 which means the key is 512 bytes long.

If your former size argument was given in bytes, convert that number
to bits and try again.

Greetings,
Christoph

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBCAAGBQJQFCThAAoJEOGIwUZuUxpnuF4P/j5HEGN6Hb4xPrUmiFoMycpZ
oZJ8jEmKFlZveqDFg3f9KAFPxtmgwOK8Wneb1DrBkqviiRqm71n4w/IXPuiFDXtF
XtENAo9QAfIxdEZovBNeEid8v7npc1Xn5WnKHsZOTbdOqsl1gYqQCDNI/pdu9JLQ
XW1Ipan9KtUEIN+vvA3vXJaa380i6RP6zsIoGfxbJrEk4yzSzIFn66dYwBsOrBlg
/VYVs48PtO41F5mwKszTfyQ3zfMEsowFv+CbPAiZIRObka6MTn7eKno/TifnkYXF
6WKAVI/6bdPeoerRe2fjluZimOBiAzsjiSjIOLgkPzEDu8bdUi0SDmr6d5ot5OFu
PfvjNeRHJq7KAil6BxbBW+g9SOUQ77bvhXDNowwurqtSV0uPAxrI5G17mBhoSzdG
Bqi++11BLVbsMhhDmy+nt9ChN1ktZSDawDC6C80pxKg/4UAMRmk5Opf0d0yLUzsS
yOTg42cz7sGQ6Ibcx5vtWBk3jrmrz534cxUhXyxx3Gt0tE27AvgJ9HARvPeepVwX
j3/g1TvyQFdL9SyOwjH3A4af2RtQsR4PsmGPuyI0zht8/IVP5ylU2jL5hznHHMin
wKaA4BL1hazgRXb3saHWNvUs/y9mTWx82147qZpfu0Ys9PKoGgvDOj4wt22YMJ9x
DJEIinJhNr92L/6hRA7y
=5g4a
-----END PGP SIGNATURE-----


More information about the arch-projects mailing list