Zida za Crypsetup 2.6 zasindikizidwa, zokonzedwa kuti zikhazikitse kubisa kwa magawo a disk mu Linux pogwiritsa ntchito dm-crypt module. Imathandizira kugwira ntchito ndi dm-crypt, LUKS, LUKS2, BITLK, loop-AES ndi magawo a TrueCrypt/VeraCrypt. Zimaphatikizanso zida za veritysetup ndi integritysetup pokonza maulamuliro a kukhulupirika kwa data potengera ma module a dm-verity ndi dm-integrity.
Kusintha kwakukulu:
- Thandizo lowonjezera la zida zosungirako zosungidwa pogwiritsa ntchito njira ya FileVault2 yomwe imagwiritsidwa ntchito pakubisa kwathunthu disk mu macOS. Crypsetup kuphatikiza ndi hfsplus driver tsopano atha kutsegula ma drive a USB osungidwa ndi FileVault2 mumayendedwe owerengera pamakina okhala ndi Linux kernel. Kufikira ma drive ndi HFS+ file system komanso magawo a Core Storage amathandizidwa (magawo omwe ali ndi APFS sanagwiritsidwebe).
- Laibulale ya libcryptsetup imamasulidwa ku kutseka kwapadziko lonse kwa kukumbukira konse kudzera pa foni ya mlockall(), yomwe idagwiritsidwa ntchito poletsa kutulutsa kwachinsinsi pagawo losinthana. Chifukwa cha kupitirira malire pa kukula kwakukulu kwa kukumbukira kotsekedwa pamene ikuyenda popanda mizu, mtundu watsopanowu umagwira ntchito yotseka mosankha kumalo okumbukira omwe makiyi achinsinsi amasungidwa.
- Kuyika patsogolo kwa njira zopangira ma key generation (PBKDF) kwawonjezedwa.
- Ntchito zowonjezeredwa kuti muwonjezere ma tokeni a LUKS2 ndi makiyi a binary ku LUKS keyslot, kuwonjezera pa mawu achinsinsi omwe adathandizidwa kale ndi mafayilo ofunikira.
- Ndizotheka kubweza kiyi yogawa pogwiritsa ntchito mawu achinsinsi, fayilo yokhala ndi kiyi, kapena chizindikiro.
- Onjezani "-use-tasklets" njira yotsimikizira kukhazikitsa kuti muwongolere magwiridwe antchito pamakina ena omwe ali ndi Linux 6.x kernel.
Source: opennet.ru