From e92a49aca387d5666161f8fb5ed2358461b061d3 Mon Sep 17 00:00:00 2001 From: Gardouille Date: Thu, 22 Oct 2020 17:06:29 +0200 Subject: [PATCH] Ensure to use plain64 for Luks cipher --- debian/chroot.install | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/debian/chroot.install b/debian/chroot.install index 8c0a915..3a1f13f 100755 --- a/debian/chroot.install +++ b/debian/chroot.install @@ -69,7 +69,7 @@ if [ "${manage_part}" -eq 0 ]; then parted "${hdd}" set 2 lvm on if [ "${manage_luks}" -eq 0 ]; then rm -f -- "${luks_key_file}" && printf '%b' "${luks_passphrase}" > "${luks_key_file}" - cryptsetup -c aes-xts-plain -s 512 --use-random -y luksFormat "${hdd}"2 "${luks_passphrase}" --key-file "${luks_key_file}" || exit 2 + cryptsetup -c aes-xts-plain64 -s 512 --use-random -y luksFormat "${hdd}"2 "${luks_passphrase}" --key-file "${luks_key_file}" || exit 2 cryptsetup luksOpen "${hdd}"2 "${luks_pv_name}" --key-file "${luks_key_file}" || exit 2 pvcreate /dev/mapper/"${luks_pv_name}" || exit 3 vgcreate "${vgname}" /dev/mapper/"${luks_pv_name}" || exit 3