From b06bc5e4f3daee93e4d9d12babe9e12adff8c1c8 Mon Sep 17 00:00:00 2001 From: Thierry Vignaud Date: Sat, 28 Jan 2012 22:42:58 +0000 Subject: (format_part) use better cipher for encrypted fses (Dave Hodgins, mga#3092) --- perl-install/NEWS | 2 ++ perl-install/fs/dmcrypt.pm | 2 +- perl-install/install/NEWS | 3 +++ 3 files changed, 6 insertions(+), 1 deletion(-) diff --git a/perl-install/NEWS b/perl-install/NEWS index 19e4a167e..346f7ff06 100644 --- a/perl-install/NEWS +++ b/perl-install/NEWS @@ -1,4 +1,6 @@ - make drakclock systemd compatible +- diskdrake: + o use better cipher for encrypted fses (mga#3092) Version 13.79 - 25 January 2012 diff --git a/perl-install/fs/dmcrypt.pm b/perl-install/fs/dmcrypt.pm index 3d6f790d4..93edaa4dc 100644 --- a/perl-install/fs/dmcrypt.pm +++ b/perl-install/fs/dmcrypt.pm @@ -65,7 +65,7 @@ sub format_part { my $tmp_key_file = "/tmp/.dmcrypt_key-$$"; common::with_private_tmp_file($tmp_key_file, $part->{dmcrypt_key}, sub { - _run_or_die('luksFormat', '--batch-mode', devices::make($part->{device}), $_[0]); + _run_or_die('--cipher=aes-xts-benbi', '--key-size=512', 'luksFormat', '--batch-mode', devices::make($part->{device}), $_[0]); }); fs::format::after_formatting($part, 1); } diff --git a/perl-install/install/NEWS b/perl-install/install/NEWS index 776b2252a..0b2f91162 100644 --- a/perl-install/install/NEWS +++ b/perl-install/install/NEWS @@ -1,3 +1,6 @@ +- diskdrake: + o use better cipher for encrypted fses (mga#3092) + Version 13.80 - 26 January 2012 - kill old gtk+ warnings that confuse people -- cgit v1.2.1