Seti yeCrypsetup 2.6 zvishandiso zvakaburitswa kuti zvigadzirise encryption ye disk partitions muLinux uchishandisa dm-crypt module. Shanda ne dm-crypt, LUKS, LUKS2, BITLK, loop-AES uye TrueCrypt/VeraCrypt zvikamu zvinotsigirwa. Inosanganisirawo veritysetup uye integritysetup zvishandiso kugadzirisa data kutendeseka zvinodzora zvichibva pane dm-verity uye dm-kutendeseka modules.
Kunatsiridza kukuru:
- Yakawedzera tsigiro yemidziyo yekuchengetedza yakavharidzirwa uchishandisa iyo FileVault2 nzira inoshandiswa yakazara disk encryption mu macOS. Crypsetup, yakabatana nehfsplus mutyairi, ikozvino inogona kuvhura FileVault2-yakavharidzirwa USB madhiraivha mukuverenga-kunyora modhi pane masisitimu ane yakajairwa Linux kernel. Kuwana madhiraivha neHFS + faira system uye neCore Storage partitions inotsigirwa (zvikamu neAPFS hazvisati zvatsigirwa).
- Iyo libcryptsetup raibhurari inochengeterwa kukiya kwepasirese pane yese ndangariro kuburikidza nemlockall () kufona, iyo yaishandiswa kudzivirira kuvuza kwe data rakadzama kune iyo swap partition. Nekuda kwekudarika muganho pahukuru hwehukuru hweyeuko yakavharika paunenge uchimhanya usina kodzero dzemidzi, vhezheni iyi itsva inoshanda yakasarudzika kukiya chete kune idzo nzvimbo dzendangariro dzinochengeta makiyi ekunyorera.
- Iko kukoshesa kwemaitiro ekuita kiyi chizvarwa (PBKDF) yakawedzerwa.
- Mabasa akawedzerwa kuwedzera LUKS2 tokens uye makiyi ebhinari kuLUKS kiyi slot (keyslot), mukuwedzera kune yaimbotsigirwa mapassphrases nemakiyi mafaera.
- Iko kugona kuburitsa kiyi yekuparadzanisa uchishandisa passphrase, kiyi faira, kana chiratidzo chakapihwa.
- Yakawedzerwa "-use-tasklets" sarudzo yeveritysetup kuvandudza mashandiro pane mamwe Linux 6.x kernel masisitimu.
Source: opennet.ru