An buga saitin abubuwan amfani na Cryptsetup 2.6 don daidaita ɓoyayyun ɓangarori na diski a cikin Linux ta amfani da module dm-crypt. Aiki tare da dm-crypt, LUKS, LUKS2, BITLK, loop-AES da TrueCrypt/VeraCrypt partitions ana goyan bayan. Hakanan ya haɗa da saitin tabbatarwa da kayan aikin saiti na gaskiya don saita sarrafa ingantattun bayanai dangane da dm-verity da dm-integrity modules.
Mahimmin haɓakawa:
- Ƙarin tallafi don ɓoyayyen na'urorin ajiya ta amfani da tsarin FileVault2 da aka yi amfani da shi don ɓoyayyen faifai cikakke a cikin macOS. Cryptsetup, a haɗe tare da direban hfsplus, yanzu na iya buɗe fayafai na USB mai rufaffen FileVault2 a cikin yanayin rubutu akan tsarin tare da kwaya ta Linux ta yau da kullun. Ana tallafawa samun damar tuƙi tare da tsarin fayil na HFS + kuma tare da ɓangarorin Ma'ajiyar Core (ba a tallafa wa ɓangarori masu APFS tukuna).
- An keɓe ɗakin karatu na libcryptsetup na kulle-kulle na duniya akan duk ƙwaƙwalwar ajiya ta hanyar kiran mlockall(), wanda aka yi amfani da shi don hana zubar da mahimman bayanai zuwa ɓangaren musanyawa. Saboda ƙetare iyaka akan iyakar girman ƙwaƙwalwar da aka katange lokacin aiki ba tare da haƙƙin tushen ba, sabon sigar ta shafi zaɓin kullewa kawai ga wuraren ƙwaƙwalwar ajiya waɗanda ke adana maɓallan ɓoyewa.
- An ƙara fifikon hanyoyin aiwatar da mahimman ƙira (PBKDF).
- An ƙara ayyuka don ƙara alamun LUKS2 da maɓallan binary zuwa maɓallan maɓalli na LUKS (maɓallin maɓalli), baya ga kalmomin wucewa da maɓallai masu goyan baya a baya.
- An ba da ikon cire maɓallin bangare ta amfani da kalmar wucewa, fayil mai maɓalli, ko alama.
- An ƙara zaɓin "--use-tasklets" zuwa saitunan tabbatarwa don haɓaka aiki akan wasu tsarin kwaya na Linux 6.x.
source: budenet.ru