Merge branch 'vendor/MDOCML'
[dragonfly.git] / contrib / cryptsetup / ChangeLog
CommitLineData
bf114f1d
AH
12010-05-30 Milan Broz <mbroz@redhat.com>
2 * Version 1.1.2.
3
42010-05-27 Milan Broz <mbroz@redhat.com>
5 * Fix luksFormat/luksOpen reading passphrase from stdin and "-" keyfile.
6 * Support --key-file/-d option for luksFormat.
7 * Fix description of --key-file and add --verbose and --debug options to man page.
8 * Add verbose log level and move unlocking message there.
9 * Remove device even if underlying device disappeared.
10 * Fix (deprecated) reload device command to accept new device argument.
11
122010-05-23 Milan Broz <mbroz@redhat.com>
13 * Fix luksClose operation for stacked DM devices.
14 * Version 1.1.1.
15
162010-05-03 Milan Broz <mbroz@redhat.com>
17 * Fix automatic dm-crypt module loading.
18 * Escape hyphens in man page.
19 * Version 1.1.1-rc2.
20
212010-04-30 Milan Broz <mbroz@redhat.com>
22 * Try to use pkgconfig for device mapper library.
23 * Detect old dm-crypt module and disable LUKS suspend/resume.
24 * Fix apitest to work on older systems.
25 * Allow no hash specification in plain device constructor.
26 * Fix luksOpen reading of passphrase on stdin (if "-" keyfile specified).
27 * Fix isLuks to initialise crypto backend (blkid instead is suggested anyway).
28 * Version 1.1.1-rc1.
29
302010-04-12 Milan Broz <mbroz@redhat.com>
31 * Fix package config to use proper package version.
32 * Avoid class C++ keyword in library header.
33 * Detect and use devmapper udev support if available (disable by --disable-udev).
34
352010-04-06 Milan Broz <mbroz@redhat.com>
36 * Prefer some device paths in status display.
37 * Support device topology detectionfor data alignment.
38
392010-02-25 Milan Broz <mbroz@redhat.com>
40 * Do not verify unlocking passphrase in luksAddKey command.
41 * Properly initialise crypto backend in header backup/restore commands.
42
432010-01-17 Milan Broz <mbroz@redhat.com>
44 * If gcrypt compiled with capabilities, document workaround for cryptsetup (see lib/gcrypt.c).
45 * Version 1.1.0.
46
472010-01-10 Milan Broz <mbroz@redhat.com>
48 * Fix initialisation of gcrypt duting luksFormat.
49 * Convert hash name to lower case in header (fix sha1 backward comatible header)
50 * Check for minimum required gcrypt version.
51
522009-12-30 Milan Broz <mbroz@redhat.com>
53 * Fix key slot iteration count calculation (small -i value was the same as default).
54 * The slot and key digest iteration minimun is now 1000.
55 * The key digest iteration # is calculated from iteration time (approx 1/8 of that).
56 * Version 1.1.0-rc4.
57
582009-12-11 Milan Broz <mbroz@redhat.com>
59 * Fix error handling during reading passhrase.
60
612009-12-01 Milan Broz <mbroz@redhat.com>
62 * Allow changes of default compiled-in cipher parameters through configure.
63 * Switch default key size for LUKS to 256bits.
64 * Switch default plain mode to aes-cbc-essiv:sha256 (default is backward incompatible!).
65
662009-11-14 Milan Broz <mbroz@redhat.com>
67 * Add CRYPT_ prefix to enum defined in libcryptsetup.h.
68 * Fix status call to fail when running as non-root user.
69 * Check in configure if selinux libraries are required in static version.
70 * Add temporary debug code to find processes locking internal device.
71 * Simplify build system, use autopoint and clean gettext processing.
72 * Use proper NLS macros and detection (so the message translation works again).
73 * Version 1.1.0-rc3.
74
752009-09-30 Milan Broz <mbroz@redhat.com>
76 * Fix exported symbols and versions in libcryptsetup.
77 * Do not use internal lib functions in cryptsetup.
78 * Add crypt_log to library.
79 * Fix crypt_remove_device (remove, luksClose) implementation.
80 * Move dm backend initialisation to library calls.
81 * Move duplicate Command failed message to verbose level (error is printed always).
82 * Add some password and used algorithms notes to man page.
83 * Version 1.1.0-rc2.
84
852009-09-28 Milan Broz <mbroz@redhat.com>
86 * Add luksHeaderBackup and luksHeaderRestore commands.
87 * Fail passphrase read if piped input no longer exists.
88 * Version 1.1.0-rc1.
89
902009-09-15 Milan Broz <mbroz@redhat.com>
91 * Initialize crypto library before LUKS header load.
92 * Fix manpage to not require --size which expands to device size by default.
93
942009-09-10 Milan Broz <mbroz@redhat.com>
95 * Clean up Makefiles and configure script.
96 * Version 1.1.0-test0.
97
982009-09-08 Milan Broz <mbroz@redhat.com>
99 * Use dm-uuid for all crypt devices, contains device type and name now.
100 * Try to read first sector from device to properly check that device is ready.
101
1022009-09-02 Milan Broz <mbroz@redhat.com>
103 * Add luksSuspend (freeze device and wipe key) and luksResume (with provided passphrase).
104
1052009-08-30 Milan Broz <mbroz@redhat.com>
106 * Require device device-mapper to build and do not use backend wrapper for dm calls.
107 * Move memory locking and dm initialization to command layer.
108 * Increase priority of process if memory is locked.
109 * Add log macros and make logging modre consitent.
110 * Move command successful messages to verbose level.
111 * Introduce --debug parameter.
112 * Move device utils code and provide context parameter (for log).
113 * Keyfile now must be provided by path, only stdin file descriptor is used (api only).
114 * Do not call isatty() on closed keyfile descriptor.
115 * Run performance check for PBKDF2 from LUKS code, do not mix hash algoritms results.
116 * Add ability to provide pre-generated master key and UUID in LUKS header format.
117 * Add LUKS function to verify master key digest.
118 * Move key slot manuipulation function into LUKS specific code.
119 * Replace global options struct with separate parameters in helper functions.
120 * Add new libcryptsetup API (documented in libcryptsetup.h).
121 * Implement old API calls using new functions.
122 * Remove old API code helper functions.
123 * Add --master-key-file option for luksFormat and luksAddKey.
124
1252009-08-17 Milan Broz <mbroz@redhat.com>
126 * Fix PBKDF2 speed calculation for large passhrases.
127 * Allow using passphrase provided in options struct for LuksOpen.
128 * Allow restrict keys size in LuksOpen.
129
1302009-07-30 Milan Broz <mbroz@redhat.com>
131 * Fix errors when compiled with LUKS_DEBUG.
132 * Print error when getline fails.
133 * Remove po/cryptsetup-luks.pot, it's autogenerated.
134 * Return ENOENT for empty keyslots, EINVAL will be used later for other type of error.
135 * Switch PBKDF2 from internal SHA1 to libgcrypt, make hash algorithm not hardcoded to SHA1 here.
136 * Add required parameters for changing hash used in LUKS key setup scheme.
137 * Do not export simple XOR helper now used only inside AF functions.
138 * Completely remove internal SHA1 implementanion code, not needed anymore.
139 * Enable hash algorithm selection for LUKS through -h luksFormat option.
140
1412009-07-28 Milan Broz <mbroz@redhat.com>
142 * Pad luks header to 512 sector size.
143 * Rework read/write blockwise to not split operation to many pieces.
144 * Use posix_memalign if available.
145
1462009-07-22 Milan Broz <mbroz@redhat.com>
147 * Fix segfault if provided slot in luksKillslot is invalid.
148 * Remove unneeded timeout when remove of temporary device succeeded.
149
1502009-07-22 Milan Broz <mbroz@redhat.com>
151 * version 1.0.7
152
1532009-07-16 Milan Broz <mbroz@redhat.com>
154 * Allow removal of last slot in luksRemoveKey and luksKillSlot.
155
1562009-07-11 Milan Broz <mbroz@redhat.com>
157
158 * Add --disable-selinux option and fix static build if selinux is required.
159 * Reject unsupported --offset and --skip options for luksFormat and update man page.
160
1612009-06-22 Milan Broz <mbroz@redhat.com>
162
163 * Summary of changes in subversion for 1.0.7-rc1:
164 * Various man page fixes.
165 * Set UUID in device-mapper for LUKS devices.
166 * Retain readahead of underlying device.
167 * Display device name when asking for password.
168 * Check device size when loading LUKS header. Remove misleading error message later.
169 * Add error hint if dm-crypt mapping failed.
170 * Use better error messages if device doesn't exist or is already used by other mapping.
171 * Fix make distcheck.
172 * Check if all slots are full during luksAddKey.
173 * Fix segfault in set_error.
174 * Code cleanups, remove precompiled pot files, remove unnecessary files from po directory
175 * Fix uninitialized return value variable in setup.c.
176 * Code cleanups. (thanks to Ivan Stankovic)
177 * Fix wrong output for remaining key at key deletion.
178 * Allow deletion of key slot while other keys have the same key information.
179 * Add missing AM_PROG_CC_C_O to configure.in
180 * Remove duplicate sentence in man page.
181 * Wipe start of device (possible fs signature) before LUKS-formatting.
182 * Do not process configure.in in hidden directories.
183 * Return more descriptive error in case of IO or header format error.
184 * Use remapping to error target instead of calling udevsettle for temporary crypt device.
185 * Check device mapper communication and warn user if device-mapper support missing in kernel.
186 * Fix signal handler to properly close device.
187 * write_lseek_blockwise: declare innerCount outside the if block.
188 * add -Wall to the default CFLAGS. fix some signedness issues.
189 * Error handling improvement.
190 * Add non-exclusive override to interface definition.
191 * Refactor key slot selection into keyslot_from_option.
192
1932007-05-01 Clemens Fruhwirth <clemens@endorphin.org>
194
195 * lib/backends.c, man/cryptsetup.8: Apply patch from Ludwig Nussel
196 <ludwig.nussel@suse.de>, for old SuSE compat hashing.
197
1982007-04-16 Clemens Fruhwirth <clemens@endorphin.org>
199
200 * Summary of changes in subversion:
201 Fix segfault for key size > 32 bytes.
202 Kick ancient header version conversion.
203 Fix http://bugs.debian.org/403075
204 No passwort retrying for I/O errors.
205 Fix hang on "-i 0".
206 Fix parenthesization error that prevented --tries from working
207 correctly.
208
2092006-11-28 gettextize <bug-gnu-gettext@gnu.org>
210
211 * m4/gettext.m4: Upgrade to gettext-0.15.
212 * m4/glibc2.m4: New file, from gettext-0.15.
213 * m4/intmax.m4: New file, from gettext-0.15.
214 * m4/inttypes-h.m4: New file, from gettext-0.15.
215 * m4/inttypes-pri.m4: Upgrade to gettext-0.15.
216 * m4/lib-link.m4: Upgrade to gettext-0.15.
217 * m4/lib-prefix.m4: Upgrade to gettext-0.15.
218 * m4/lock.m4: New file, from gettext-0.15.
219 * m4/longdouble.m4: New file, from gettext-0.15.
220 * m4/longlong.m4: New file, from gettext-0.15.
221 * m4/nls.m4: Upgrade to gettext-0.15.
222 * m4/po.m4: Upgrade to gettext-0.15.
223 * m4/printf-posix.m4: New file, from gettext-0.15.
224 * m4/signed.m4: New file, from gettext-0.15.
225 * m4/size_max.m4: New file, from gettext-0.15.
226 * m4/visibility.m4: New file, from gettext-0.15.
227 * m4/wchar_t.m4: New file, from gettext-0.15.
228 * m4/wint_t.m4: New file, from gettext-0.15.
229 * m4/xsize.m4: New file, from gettext-0.15.
230 * m4/Makefile.am: New file.
231 * configure.in (AC_OUTPUT): Add m4/Makefile.
232 (AM_GNU_GETTEXT_VERSION): Bump to 0.15.
233
234