1 Cryptsetup 1.5.1 Release Notes 2 ============================== 3 4 Changes since version 1.5.0 5 6 * The libcryptsetup library now tries to initialize device-mapper backend and 7 loop devices only if they are really needed (lazy initializations). 8 This allows some operations to be run by a non-root user. 9 10 (Unfortunately LUKS header keyslot operations still require temporary dm-crypt 11 device and device-mapper subsystem is available only to superuser.) 12 13 Also clear error messages are provided if running as non-root user and 14 operation requires privileged user. 15 16 * Veritysetup can be now used by a normal user for creating hash image to file 17 and also it can create hash image if doesn't exist. 18 (Previously it required pre-allocated space.) 19 20 * Added crypt_keyslot_area() API call which allows external tools 21 to get exact keyslot offsets and analyse content. 22 23 An example of a tool that searches the keyslot area of a LUKS container 24 for positions where entropy is low and hence there is a high probability 25 of damage is in misc/kesylot_checker. 26 (Thanks to Arno Wagner for the code.) 27 28 * Optimized seek to keyfile-offset if key offset is large. 29 30 * Fixed luksHeaderBackup for very old v1.0 unaligned LUKS headers. 31 32 * Various fixes for problems found by a several static analysis tools.