| commit | f1195961f36b19ce9008dabf11ee8362803bcd92 | |
| author | Daniel P. Berrangé <berrange@redhat.com> | |
| Tue, 10 May 2022 13:27:33 +0000 (10 14:27 +0100) | ||
| committer | Daniel P. Berrangé <berrange@redhat.com> | |
| Thu, 27 Oct 2022 11:55:27 +0000 (27 12:55 +0100) | ||
| tree | 6111a083fda6ed1a8395dc6eaf481412ad2a701f | treesnapshot (tar.gz zip) |
| parent | c1d8634c207defb547a57515729233e47f65718f | commitdiff |
crypto: enforce that LUKS stripes is always a fixed value
Although the LUKS stripes are encoded in the keyslot header and so
potentially configurable, in pratice the cryptsetup impl mandates
this has the fixed value 4000. To avoid incompatibility apply the
same enforcement in QEMU too. This also caps the memory usage for
key material when QEMU tries to open a LUKS volume.
Reviewed-by: Richard W.M. Jones <rjones@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
Although the LUKS stripes are encoded in the keyslot header and so
potentially configurable, in pratice the cryptsetup impl mandates
this has the fixed value 4000. To avoid incompatibility apply the
same enforcement in QEMU too. This also caps the memory usage for
key material when QEMU tries to open a LUKS volume.
Reviewed-by: Richard W.M. Jones <rjones@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
| crypto/block-luks.c | diffblobblamehistory |