From 5552975717aded5fd539a566a9b19aa99f4b90f0 Mon Sep 17 00:00:00 2001 From: mh Date: Mon, 15 Aug 2022 14:35:51 +0200 Subject: [PATCH] remove custom cipher & key-size since modern kernel & cryptsetup implementations do have better defaults --- lib/arver/luks_wrapper.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/arver/luks_wrapper.rb b/lib/arver/luks_wrapper.rb index 7114e05..d1be216 100644 --- a/lib/arver/luks_wrapper.rb +++ b/lib/arver/luks_wrapper.rb @@ -13,7 +13,7 @@ module Arver Arver::SSHCommandWrapper.create( "cryptsetup", [ "luksDump", partition.device_path ], partition.parent, true ) end def self.create( key_slot, partition ) - Arver::SSHCommandWrapper.create( "cryptsetup", [ "--batch-mode", "--key-slot=#{key_slot}", "--cipher=aes-cbc-essiv:sha256", "--key-size=256", "luksFormat", partition.device_path ], partition.parent, true ) + Arver::SSHCommandWrapper.create( "cryptsetup", [ "--batch-mode", "--key-slot=#{key_slot}", "luksFormat", partition.device_path ], partition.parent, true ) end def self.killSlot( key_slot, partition ) Arver::SSHCommandWrapper.create( "cryptsetup", [ "--batch-mode", "luksKillSlot", partition.device_path, key_slot ], partition.parent, true ) -- GitLab