[pkg-cryptsetup-devel] Bug#529359: cryptsetup: using an invalid passphrase or image "luksOpen" fails but "create" succeeds (incoherent behaviour)

Nahuel Greco ngreco at gmail.com
Mon May 18 20:22:09 UTC 2009


Package: cryptsetup
Version: 2:1.0.6-7
Severity: minor

When you try to create a mapping using an invalid passphrase or a non-LUKS source image, "create" 
succeeds without giving any warning/error and the mapping is created. This behaviour is 
incoherent with the "luksOpen" one, because "luksOpen" gives an error when the entered passphrase
is wrong and no mapping is created. I think is necessary to fix or document this discrepancy to
avoid confusions. Example using an invalid image:

serge:/tmp# dd if=/dev/zero of=/tmp/test.img bs=1024k seek=1 count=0
0+0 records in
0+0 records out
0 bytes (0 B) copied, 1.76e-05 s, 0.0 kB/s
serge:/tmp# losetup /dev/loop2 test.img
serge:/tmp# losetup -a
/dev/loop2: [fe03]:2703637 (test.img)
serge:/tmp# ls /dev/mapper/
control
serge:/tmp# cryptsetup luksOpen /dev/loop2 testmap
Enter LUKS passphrase: <HERE I ENTER ANYTHING>
Command failed: No key available with this passphrase.

serge:/tmp# ls /dev/mapper/
control
serge:/tmp# cryptsetup create testmap /dev/loop2
Enter passphrase: <HERE I ENTER ANYTHING>
sh: /sbin/udevsettle: No such file or directory
serge:/tmp# ls /dev/mapper/
control  testmap
serge:/tmp#

(note, there is also another problem related with /sbin/udevsettle, 
but here I'm not reporting it)


-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash

Versions of packages cryptsetup depends on:
ii  dmsetup                      2:1.02.30-3 The Linux Kernel Device Mapper use
ii  libc6                        2.9-4       GNU C Library: Shared libraries
ii  libdevmapper1.02.1           2:1.02.30-3 The Linux Kernel Device Mapper use
ii  libpopt0                     1.14-4      lib for parsing cmdline parameters
ii  libuuid1                     1.41.3-1    universally unique id library

cryptsetup recommends no packages.

Versions of packages cryptsetup suggests:
ii  dosfstools                    3.0.2-1    utilities for making and checking 
ii  initramfs-tools [linux-initra 0.93.2     tools for generating an initramfs
ii  udev                          0.141-1    /dev/ and hotplug management daemo

-- no debconf information





More information about the pkg-cryptsetup-devel mailing list