1#@!#!123s

22527 1#@!#!123s
: / usr / share / doc / cryptsetup /
Filename : v1.1.2-ReleaseNotes
back
== Cryptsetup 1.1.2 Release Notes ==

This release fixes a regression (introduced in 1.1.1 version) in handling
key files containing new line characters (affects only files read from
standard input).

Cryptsetup can accept passphrase on stdin (standard input).

Handling of new line (\n) character is defined by input specification:

 * if keyfile is specified as "-" (using --key-file=- of by "-" positional argument
   in luksFormat and luksAddKey, like cat file | cryptsetup --key-file=- <action>),
   input is processed as normal binary file and no new line is interpreted.

 * if there is no key file specification (with default input from stdin pipe
   like echo passphrase | cryptsetup <action>) input is processed as input from terminal,
   reading will stop after new line is detected.

Moreover, luksFormat now understands --key-file (in addition to positional key
file argument).

N.B. Using of standard input and pipes for passphrases should be avoided if possible,
cryptsetup have no control of used pipe buffers between commands in scripts and cannot
guarantee that all passphrase/key-file buffers are properly wiped after use.

=== changes since version 1.1.1 ===

 * Fix luksFormat/luksOpen reading passphrase from stdin and "-" keyfile.
 * Support --key-file/-d option for luksFormat.
 * Fix description of --key-file and add --verbose and --debug options to man page.
 * Add verbose log level and move unlocking message there.
 * Remove device even if underlying device disappeared (remove, luksClose).
 * Fix (deprecated) reload device command to accept new device argument.