Ebipụtala ihe ọrụ Cryptsetup 2.6, emebere iji hazie izo ya ezo nke akụkụ diski na Linux site na iji modul dm-crypt. Na-akwado dm-crypt, LUKS, LUKS2, BITLK, loop-AES na TrueCrypt/VeraCrypt partitions. Ọ gụnyekwara veritysetup na ngwa ntọala ntọala maka ịhazi njikwa iguzosi ike n'ezi ihe data dabere na dm-verity na modul dm-integrity.
Nkwalite isi:
- Nkwado agbakwunyere maka ngwaọrụ nchekwa ezoro ezo site na iji usoro FileVault2 ejiri maka izo ya ezo diski zuru oke na macOS. Cryptsetup yana onye ọkwọ ụgbọ ala hfsplus nwere ike mepee draịva USB ezoro ezo na FileVault2 na ọnọdụ ọgụgụ na sistemụ nwere kernel Linux oge niile. A na-akwado ịnweta draịva nwere sistemu faịlụ HFS+ yana nkebi Nchekwa isi (anaghị akwado nkebi nwere APFS).
- A tọhapụrụ ọba akwụkwọ libcryptsetup na mkpọchi zuru ụwa ọnụ nke ebe nchekwa niile site na oku mlockall(), nke ejiri gbochie mwepu nke data nzuzo na nkebi swap. N'ihi ịfefe oke oke nke ebe nchekwa akpọchiri mgbe ọ na-agba ọsọ na-enweghị ikike mgbọrọgwụ, ụdị ọhụrụ a na-emetụta mkpọchi nhọrọ naanị na mpaghara ebe nchekwa ebe echekwara igodo nzuzo.
- Ihe kacha mkpa nke usoro na-eme ọgbọ isi (PBKDF) abawanyela.
- Ọrụ agbakwunyere iji tinye akara LUKS2 na igodo ọnụọgụ abụọ na oghere igodo LUKS, na mgbakwunye na faịlị na faịlụ igodo akwadoburu.
- Ọ ga-ekwe omume iweghachite igodo nkebi site na iji passphrase, faịlụ nwere igodo, ma ọ bụ akara ngosi.
- Agbakwunyere nhọrọ "--use-tasklets" na nhazi ntọala iji melite arụmọrụ na ụfọdụ sistemu na-agba Linux 6.x kernel.
isi: opennet.ru