<html>
<head>
<base href="https://bugs.freedesktop.org/" />
</head>
<body><span class="vcard"><a class="email" href="mailto:zbyszek@in.waw.pl" title="Zbigniew Jedrzejewski-Szmek <zbyszek@in.waw.pl>"> <span class="fn">Zbigniew Jedrzejewski-Szmek</span></a>
</span> changed
<a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED NOTABUG - systemd-cryptsetup handles keyfile differently from cryptsetup on plain mode"
href="https://bugs.freedesktop.org/show_bug.cgi?id=52630">bug 52630</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">Status</td>
<td>REOPENED
</td>
<td>RESOLVED
</td>
</tr>
<tr>
<td style="text-align:right;">Resolution</td>
<td>---
</td>
<td>NOTABUG
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED NOTABUG - systemd-cryptsetup handles keyfile differently from cryptsetup on plain mode"
href="https://bugs.freedesktop.org/show_bug.cgi?id=52630#c10">Comment # 10</a>
on <a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED NOTABUG - systemd-cryptsetup handles keyfile differently from cryptsetup on plain mode"
href="https://bugs.freedesktop.org/show_bug.cgi?id=52630">bug 52630</a>
from <span class="vcard"><a class="email" href="mailto:zbyszek@in.waw.pl" title="Zbigniew Jedrzejewski-Szmek <zbyszek@in.waw.pl>"> <span class="fn">Zbigniew Jedrzejewski-Szmek</span></a>
</span></b>
<pre>(In reply to Quentin Lefebvre from <a href="show_bug.cgi?id=52630#c9">comment #9</a>)
<span class="quote">> Hi,
>
> I reopened (again) this bug report. Please read the following before getting
> angry...</span >
Hi,
sorry for my ternseness. I'm not angry, I'm trying to solve the problem in the
best way, same as you. But I think we reached a point where the situation is
clear, everything has been articulated clearly, and the differences stem only
from different priorities, not misunderstanding. I understand that for you
keeping current cryptsetup-compatible setups functional is more important, but
for me sensible and consistent systemd behaviour is more important. More words
will not help the issue.
<span class="quote">> Actually, cryptsetup(8) makes it quite clear that hash processing is only
> used on *passphrases*. See the "NOTES ON PASSPHRASE PROCESSING FOR
> PLAIN MODE" section. So, IMHO that's not a bug in cryptsetup, but
> rather the intended and documented way it works.</span >
I read the man page (on Fedora, I'm not sure if it is the same) and while it's
true that it talks about "passphrase processing", it also does not explictly
say that hash will be ignored for a file. That section even talks about hashing
input read from stdin, and also about reading stuff from a file. So even if
cryptsetup ignores --hash when reading from a key file, it seems to be more by
mistake then by design, at least when judging by the man page.
As discussed on the ml, we'll keep current behaviour.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the QA Contact for the bug.</li>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>