[Bug 1781912] Comment bridged from LTC Bugzilla

[bugproxy]

------- Comment From heinz-werner_seeck at de.ibm.com 2018-07-18 06:41 EDT-------
Following effort was done by IBM for getting this SRUed in 18.04.
Which is mandatory for Pervasive encryption suppot on an LTS release.

Extracted the cryptsetup-2.0.3 sources and copied the debian/ files from
cryptsetup-2.0.2 to the -2.0.3 tree and successfully built a
cryptsetup-2.0.3 deb without any further modifications (except the
debian/changelog for the new version).

>From my point of view, it would be possible to apply a debdiff or patch
that updates the codebase from 2.0.2 to 2.0.3 but keeping the 2.0.2
package version.  Cherry-picking particular commits would be possible
but might take some time as they are not done by the BB team and always
have the risk that related commits are missed.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to cryptsetup in Ubuntu.
https://bugs.launchpad.net/bugs/1781912

Title:
  [18.10 FEAT] Upgrade cryptsetup >= 2.0.3

Status in Ubuntu on IBM z Systems:
  Triaged
Status in cryptsetup package in Ubuntu:
  New

Bug description:
  Cryptsetup is utility used to conveniently setup disk encryption based
  on DMCrypt kernel module.

  These include plain dm-crypt volumes, LUKS volumes, loop-AES
  and TrueCrypt (including VeraCrypt extension) format.

  Project also includes veritysetup utility used to conveniently setup
  DMVerity block integrity checking kernel module
  and, since version 2.0,  integritysetup to setup
  DMIntegrity block integrity kernel module.

  Version 2.0.3 include all z code for dm-crypt with protected keys

  Without cryptsetup 2.0.3 (the 3 is important) we won't be able to use
  secure key encryption with LUKS2 and the paes cipher. Only plain mode
  will be usable with cryptsetup version 2.0.1.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1781912/+subscriptions