smallsolar/u-boot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

bootctl: Allow unlocking LUKS2 partitions

Browse Source 
Switch away from a pre-derived key so that LUKS2 partitions can be
unlocked. Update the ulock message to be more generic.

Signed-off-by: Simon Glass <simon.glass@canonical.com>
This commit is contained in:
Simon Glass
2025-11-27 07:18:09 -07:00
parent 67ed14f985
commit cf8ce64138
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
boot/bootctl/logic.c
View File

@@ -334,9 +334,9 @@ static int perform_tkey_unlock(struct udevice *dev, struct osinfo *os, int seq,
* processed by PBKDF2/Argon2 just like a text passphrase would be.
* This matches how cryptsetup --key-file works.
*/
log_info("Using LUKS1 unlock with binary passphrase\n");
log_info("Using LUKS unlock with binary passphrase\n");
ret = luks_unlock(os->bflow.blk, &pinfo, priv->tkey_disk_key,
TKEY_DISK_KEY_SIZE, true, master_key, key_sizep);
TKEY_DISK_KEY_SIZE, false, master_key, key_sizep);
if (ret)
return log_msg_ret("htu", ret);