\u00cbsht\u00eb publikuar seti i veglave Cryptsetup 2.8, i cili \u00ebsht\u00eb i destinuar p\u00ebr konfigurimin e enkriptimit t\u00eb pjes\u00ebve t\u00eb diske n\u00eb Linux duke p\u00ebrdorur modulin dm-crypt. P\u00ebrkrah pun\u00ebn me pjes\u00ebt dm-crypt, LUKS, LUKS2, BITLK, loop-AES dhe TrueCrypt\/VeraCrypt. N\u00eb p\u00ebrb\u00ebrje p\u00ebrfshihen gjithashtu veglat veritysetup dhe integritysetup p\u00ebr konfigurimin e kontrollit t\u00eb integritetit t\u00eb t\u00eb dh\u00ebnave bazuar n\u00eb modulet dm-verity dhe dm-integrity. <\/p>\n
P\u00ebrmir\u00ebsimet kryesore: <\/p>\n
\n
\u00cbsht\u00eb shtuar mb\u00ebshtetje p\u00ebr modin inline, i cili lejon p\u00ebrdorimin e sektoreve t\u00eb zgjeruar me nj\u00eb hap\u00ebsir\u00eb t\u00eb shtuar p\u00ebr ruajtjen e metadatuar. Sektor\u00ebt e till\u00eb mb\u00ebshteten nga disa disqe NVMe, duke lejuar, p\u00ebrve\u00e7 zon\u00ebs s\u00eb t\u00eb dh\u00ebnave, q\u00eb n\u00eb sektor t\u00eb vendoset gjithashtu dhe nj\u00eb bllok metadatuar (p.sh., 4096 byte p\u00ebr t\u00eb dh\u00ebna + 64 byte p\u00ebr metadatat).\n
Cryptsetup mund t\u00eb p\u00ebrdor\u00eb nj\u00eb zon\u00eb metadata n\u00eb sektor p\u00ebr t\u00eb ruajtur informacionin sh\u00ebrbyes, duke eliminuar nevoj\u00ebn p\u00ebr nj\u00eb shtres\u00eb shtes\u00eb mbi dm-integrity, e cila \u00ebsht\u00eb p\u00ebrgjegj\u00ebse p\u00ebr akordimin e hap\u00ebsir\u00ebs p\u00ebr metadatet. Si rezultat, mund t\u00eb anashkalohet regjistrimi dm-integrity, i cili \u00ebsht\u00eb nj\u00eb ngushtic\u00eb q\u00eb ndikon negativisht n\u00eb performanc\u00eb. N\u00eb kernelin Linux, mund\u00ebsit\u00eb e nevojshme p\u00ebr funksionin inline jan\u00eb t\u00eb pranishme q\u00eb nga versioni 6.11. P\u00ebr aktivizimin e modit inline, \u00ebsht\u00eb shtuar opsioni «—integrity-inline». <\/p>\n
\u00cbsht\u00eb p\u00ebrmir\u00ebsuar gati p\u00ebr API Keyslot Context p\u00ebr manipulimin me slotet e \u00e7el\u00ebsave. Ky API i ri ka lejuar zgjerimin e funksionalitetit t\u00eb shum\u00eb komandave ekzistuese, si funksionet e aktivizimit t\u00eb token\u00ebve, rifillimin e pun\u00ebs me pajisjen e enkriptuar t\u00eb pezulluar dhe ekzekutimin e ri-enkryptimit (reencryption).\n
N\u00eb utilitarin cryptsetup jan\u00eb shtuar opsionet «—key-description» dhe «—new-key-description» p\u00ebr t\u00eb lidhur p\u00ebrshkrimin me \u00e7el\u00ebsat.\n
\u00cbsht\u00eb shtuar mund\u00ebsia e rifillimit t\u00eb operacionit t\u00eb pezulluar t\u00eb ri-enkryptimit (reencryption), duke p\u00ebrdorur token dhe \u00e7el\u00ebsat e pjes\u00ebs.\n
N\u00eb implementimin e komand\u00ebs «repair» \u00ebsht\u00eb shtuar nj\u00eb kontroll p\u00ebr d\u00ebmtimin e zonave me slotet e \u00e7el\u00ebsave LUKS.\n
N\u00eb komand\u00ebn veritysetup \u00ebsht\u00eb shtuar opsioni «—error-as-corruption», n\u00eb t\u00eb cilin \u00e7do gabim trajtohet si nj\u00eb d\u00ebmtim t\u00eb dh\u00ebnash, p\u00ebrkat\u00ebsisht mund t\u00eb konfigurohet rikonfigurimi ose kalimi n\u00eb gjendjen panic n\u00eb rast gabimesh, duke p\u00ebrdorur opsionet «—restart-on-corruption» dhe «—panic-on-corruption».\n
\u00cbsht\u00eb shtuar mund\u00ebsia opsionale p\u00ebr p\u00ebrdorimin e bibliotek\u00ebs Mbed-TLS si backend kriptografik (aktivohet gjat\u00eb nd\u00ebrtimit me opsionin «—with-crypto_backend=mbedtls»). <\/ul>\n