#1028907 cryptsetup: initramfs hook can't handle xchacha20,aes-adantium-plain64

Package:
cryptsetup
Source:
cryptsetup
Description:
disk encryption support - startup scripts
Submitter:
Łukasz Stelmach
Date:
2023-01-14 18:45:04 UTC
Severity:
normal
#1028907#5
Date:
2023-01-14 18:41:46 UTC
From:
To:
Dear Maintainer,

The populate_CRYPTO_MODULES() function in
/usr/share/initramfs-tools/hooks/cryptroot can't properly derive
required module names (MODULES=dep in initramfs.conf) from dmsetup
ouptput when using adantium[1] encryption. In such cases the cipher string
is:

    xchacha20,aes-adantium-plain64

(or xchacha12 on even less performant platforms).

Workaround: manually add the following modules to
/etc/initramfs-tools/modules:

    aes_generic
    chacha_generic
    nhpoly1350
    xts

[1] https://lwn.net/Articles/776721/