luks2john Python Implementation Does Not Support xts-plain64
Open
Nobody has claimed this yet.
enhancement
- Dominant language
- C
- Stars
- 13.6k
- Forks
- 2.6k
- PR merge metrics
- No merged PRs in 30d
Description
The luks2john.py implementation does not seem to work on LUKS headers that aren't cbc-essiv:sha256 , such as xts-plain64:sha1. xts-plain64 is the default used by the more recent cryptsetup versions starting at 1.6.0 (https://security.stackexchange.com/questions/39306/how-secure-is-ubuntus-default-full-disk-encryption).
This would appear to be a regression from the functionality in the C code implementation since running the luks2john exe from 1.8.0-Jumbo-1 , I was able to produce a hash file from an xts-plain64:sha1 encrypted header.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.