changelog

Fast and transparent file system and swap encryption package for linux. No source code changes to li

loop-AES-v1.0c    April 11 2001
    - First release to public.

loop-AES-v1.1b    April 16 2001
    - SHA-256, SHA-384 and SHA-512 hashes added.

loop-AES-v1.2d    May 7 2001
    - Newer AES cipher implementation from Dr Brian Gladman, with
      precomputed lookup tables and little speed improvement.
    - Support for old 2.0 kernels.
    - Makefile now runs "depmod -a" instead of "depmod" after installing
      loop.o driver.

loop-AES-v1.3b    June 27 2001
    - Mount and losetup programs now understand -p option to read password
      from file descriptor instead of terminal.
    - Cipher tests now integrated into Makefile.
    - Optional kernel 2.4 patch version included for those people who prefer
      not to use modules.
    - Data corrupting bug with LVM has been fixed (kernel 2.4 only). Thanks
      to David Dodge for this bugfix.

loop-AES-v1.3c    July 5 2001
    - loop.c-2.4.original updated to Linus' 2.4.6 version, and Makefile
      updated to compile that version on older kernels as well.

loop-AES-v1.3d    August 4 2001
    - loop.c-2.4.original updated to Alan Cox's 2.4.7-ac5 version (ext3
      changes), and Makefile updated to compile that version on older
      kernels as well.

loop-AES-v1.4d    September 3 2001
    - Little speed optimization in aes-glue.c
    - External encryption module locking bug is fixed (kernel 2.4 only).
      This bug did not affect loop-AES operation at all. This fix is from
      Ingo Rohloff.
    - On 2.4 kernels, device backed loop maintains private pre-allocated
      pool of RAM pages that are used when kernel is totally out of free
      RAM. This change also fixes stock loop.c sin of sleeping in
      make_request_fn().

loop-AES-v1.4e    September 29 2001
    - Execute depmod only if target was currently running kernel.
    - loop.c-2.4.original updated to Linus' 2.4.10 + fixes from 2.4.9-ac16,
      with ifdefs so it compiles on older kernels as well.
    - Rest of AES finalist cipher names added to util-linux patch.
    - External encryption module locking bug is fixed (kernel 2.2 only,
      backported kernel 2.4 fix). This bug did not affect loop-AES operation
      at all.
    - Password seeds can be used to slow down dictionary attacks. "-S XXX"
      option added to losetup, and "-o pseed=XXX" option added to mount.
    - For device backed loops, allocate pages only from private pool during
      run time (kernel 2.4 only). This eases stress on the VM as some of
      them can't handle stress too well.

loop-AES-v1.4f    October 27 2001
    - Use newly added KERNELRELEASE in kernel 2.0 modules install path.
    - build-initrd.sh shell script included to build /boot/initrd.gz that
      can be used when root partition is encrypted.
    - Default blocksize computation of file backed loop now shrinks
      blocksize only if necessary. Previous default was hardcoded 1024.
    - Add a workaround for 5 parameter do_generic_file_read()
    - loop.c-2.4.original updated to Alan Cox's 2.4.13-ac2, with ifdefs so
      it compiles on older kernels as well.

loop-AES-v1.4g    November 7 2001
    - Fix ancient loop bug that prevented rw losetuping/mounting device
      backed loop if looped to device node resided on ro mounted filesystem.
    - Remove old wrong loop.o automatically on 2.4 kernels.
    - Makefile now prints currently running kernel version and what kernel
      version module was compiled for.
    - Add a workaround for deactivate_page() that vanished in 2.4.14.
    - loop.c-2.4.original updated with fixes from 2.4.14.

loop-AES-v1.4h    November 24 2001
    - Ugly macros cleaned from kernel-2.4.diff
    - Add conditional reschedule to NONE and XOR transfers.
    - build-initrd.sh modified to work with non-modular kernel.
    - Fixed kernel 2.4 file backed loop page alloc error handling bug.

loop-AES-v1.5b    December 25 2001
    - Added second util-linux patch from Michael K. Johnson that adds -O
      option to mount and umount programs.
    - Added build-initrd.sh enhancements from Hauke Johannknecht.
    - Fixed ancient loop.c off-by-one bug in offset computation (2.2 and 2.0
      kernels only).
    - loop.c-2.4.original updated with fixes from 2.4.17.
    - Added optimized assembler implementation of AES cipher for Pentium or
      better x86 processors.

loop-AES-v1.5c    March 5 2002
    - build-initrd.sh now works with devfs and can setup national keyboard
      layout before asking password.
    - Added losetup -d and losetup -e to "make tests" between writing test
      file and reading test file. This is to prevent kernel from caching
      test data.
    - Added RIPE-MD160 hash, and "-H rmd160", "-I 123" options to losetup,
      and "-o phash=rmd160,loinit=123" options to mount.
    - loop.c-2.4.original updated with fixes from 2.4.19-pre2
    - Added workaround for missing current->nice in recent -ac kernels.

loop-AES-v1.6b    April 14 2002
    - Fixed xgetpass() realloc error case handling bug.
    - Fixed silly bug that enforced minimum password length if "-H rmd160"
      and "-S xxx" options were both used simultaneously.
    - Added -T option to losetup. -T asks password twice.
    - Added NONE, XOR and unhashed AES tests to "make tests" script.
    - Fixed NONE transfer remap optimization bug (2.4 and 2.5 kernels).
    - Changed loop_make_request() so that it may sleep (partially reverts
      loop-AES-v1.4d change to non-sleeping code).
    - Added support for 2.5 kernels. Large part of 2.4 buffer_head to 2.5
      bio porting work was done by Ben Slusky.
    - "swapon -a" and "swapoff -a" now understand loop=/dev/loop? and
      encryption=AES128 options in /etc/fstab for easier encrypted swap
      setup.
    - Make runs depmod with -F and -b options and kernel-version if they are
      needed and depmod understands them.
    - Merged build-initrd.sh additional loop module parameter and chdir("/")
      fixes from Andreas Voegele.
    - Added Dr Brian Gladman's copyright and terms to resulting object code
      so that binary distributions can avoid legal trouble.
    - Makefile updated to be compatible with Keith Owens' new kbuild.

loop-AES-v1.6c    May 9 2002
    - Fixed genuine loop bug that always exports loop sector size as 512
      bytes regardless of sector size of underlying device (2.4, 2.2 and 2.0
      kernels). Thanks to Peter Niemayer for reporting and testing this bug.
    - Merged build-initrd.sh /boot/grub/menu.lst comments and kernel halt
      changes from Jani Averbach.
    - Modified build-initrd.sh to ask password again if mount failed. Also
      added workarounds for misconfigured/buggy bootloaders.
    - Added -a option to losetup that shows status of all configured loop
      devices. Also fixed cosmetic bug that showed xor encryption as
      unknown.
    - Merged reparent_to_init() and set_current_state() fixes from
      2.4.19-pre7-ac3
    - Added workaround for 2.5 kernel block device module locking bug.
    - loop.c-2.5.original updated with fixes from 2.5.14
    - Fixed genuine loop bug that sometimes didn't sync all buffers before
      releasing device (2.2 kernels).

loop-AES-v1.6d    May 30 2002
    - Fixed file backed loop bug that occasionally caused spurious I/O
      errors. Fix is based on Andrew Morton's idea. (2.4 and 2.5 kernels)
    - loop.c-2.5.original updated with fixes from 2.5.19
    - Makefile updated to work with 2.5.19 and later kernels.

loop-AES-v1.6e    June 17 2002
    - Added "-K xxx", "-G yyy" options to losetup and "-o gpgkey=xxx", "-o
      gpghome=yyy" options to mount that can be used to setup and mount loop
      devices with GnuPG encrypted loop key.
    - Removed build-gpgmount.sh because its functionality is now in mount
      and losetup programs.
    - Fixed file backed loop read error handling bug that only occured in
      hurt-me-plenty case where looped to file was truncated while it was
      being used (2.4 and 2.5 kernels).
    - Makefile updated to work with 2.5.22 and later kernels.
    - loop.c-2.5.original updated with fixes from 2.5.22

loop-AES-v1.6f    August 14 2002
    - Makefile updated to use CFLAGS_NOSTDINC with new kbuild.
    - swapon now adds -v1 option to mkswap execv()'s on 2.5 kernels.
    - Cosmetic fixups to some error case printk's in the loop driver.
    - Added /dev/hd[efgh] and /dev/sd[efgh] support to build-initrd.sh
    - Made build-initrd.sh work with GnuPG-key encrypted root partition.
    - "swapoff -a" of encrypted partitions now writes some collected random
      entropy to the partitions to be used on next "swapon -a"
    - loop.c-2.5.original updated with fixes from 2.5.30
    - Removed workaround for 2.5 kernel block device module locking bug.
    - Fixed loop.o to work correctly with CONFIG_SOFTWARE_SUSPEND (2.4
      kernels).
    - loop.c-2.4.original updated with fixes from 2.4.20-pre2

loop-AES-v1.6g    September 28 2002
    - Removed unnecessary memcpy from file backed unencrypted loops (2.4 and
      2.5 kernels).
    - Dropped loop thread O(1) scheduler nice from -20 to -9 (2.4 and 2.5
      kernels). No change for kernels using old scheduler.
    - Fixed genuine loop bug that always exported loop sector size as 512
      bytes regardless of sector size of underlying device (bug affected
      only 2.5 kernels because other kernel versions were fixed earlier).
      Fix was copied from Adam J. Richter's loop fixes.
    - Fixed one file-backed-loop-on-tmpfs bug (2.5 kernels only). Fix from
      Adam J. Richter's loop fixes.
    - Fixed default soft block size computation with non-zero loop offset
      (2.4 and 2.5 kernels).
    - Merged two driver init time out-of-mem-handling bugfixes from
      2.4.20-pre7-ac1 (2.4 and 2.5 kernels)
    - loop.c-2.2.original updated with fixes from 2.2.22
    - Added support for CONFIG_LBD (2.5 kernels)
    - loop.c-2.5.original updated with fixes from 2.5.39

loop-AES-v1.6h    October 3 2002
    - Fixed file backed loop bug where loop thread incorrectly inherited
      maximum file size resource limit from mount process. This bug can
      cause data loss if user mounting file backed loop has maximum file
      size limit (ulimit -f) set smaller than size of loop file (2.4 and 2.5
      kernels).
    - loop.c-2.5.original updated with fixes from 2.5.40
    - Added workaround for loop.h breakage in 2.5.40

loop-AES-v1.6i    December 1 2002
    - Removed support for Keith Owens' unmaintained kbuild-2.5
    - Added loop device number to some error case printk's in the loop
      driver (2.4 and 2.5 kernels).
    - Makefile no longer attempts to use i586 assembler code on x86-64
    - Makefile now uses pre-patched loop code on 2.4 and later kernels.
    - loop.c-2.5.patched updated with fixes from 2.5.50
    - Makefile updated to work with 2.5.50
    - Added -F command line option to losetup. -F reads and uses loop
      related mount options from /etc/fstab
    - Module locking rewritten to support 2.5.48 and later kernels.
    - Second util-linux patch dropped because mainline mount/umount now
      understand -O option.
    - Fixed bug where running 'swapoff -a' twice returned error status. Bug
      fix from [e-mail]

loop-AES-v1.7a    December 26 2002
    - Fixed bug where running 'swapon -a' in some encrypted swap error cases
      didn't correctly return error status.
    - Added "-C nnn" option to losetup and "-o itercountk=nnn" option to
      mount that iterate encryption key nnn thousand times through AES-256.
      Based on code from Sami Farin.
    - build-initrd.sh updated to understand losetup "-C nnn" option.
    - loop.c-2.5.patched updated with fixes from 2.5.53
    - Added workaround for signal locking changes in RedHat 8.1 beta kernel.

loop-AES-v1.7b    January 30 2003
    - Removed struct loop_device delayed allocation optimization from
      loop.c-2.5.patched because 2.5.58 needs a queue at add_disk() time.
    - Modified Makefile to link with init/vermagic.o on 2.5 kernels.
    - Added twofish160 encryption identifier to util-linux patch.
    - Fixed bug that caused processes to be stuck in 'D' state in some rare
      circumstances (2.4 and 2.5 kernels). This bug is present in loop-AES
      versions v1.6b to v1.7a. Special thanks to Zygo Blaxell for bug
      hunting and testing.

loop-AES-v1.7c    March 25 2003
    - Modified Makefile to link with new style version magic on 2.5 kernels.
    - Added workaround for signal locking changes in RedHat 9.0 beta kernel.
    - Updated GFP_* mask setting to modify inode->i_mapping->gfp_mask only
      for file backed loops (2.4 and 2.5 kernels).
    - loop.c-2.5.patched updated with fixes from 2.5.66

loop-AES-v1.7d    June 13 2003
    - Added kernel side support for struct loop_info64 (2.5 kernels).
    - loop.c-2.5.patched updated with fixes from 2.5.70-bk
    - Modified Makefile to use /sbin/ absolute path for depmod and losetup.
    - build-initrd.sh now supports /dev/md* and /dev/fd[01] devices
    - build-initrd.sh now supports GnuPG files on removable device
    - Added warning about unsupported devices to build-initrd.sh
    - Dropped loop thread O(1) scheduler nice from -9 to -1 (2.4 and 2.5
      kernels). No change for kernels using old scheduler.
    - Added lo_nice= module parameter for easier scheduler nice tuning (2.4
      and 2.5 kernels).
    - Added 'AES-unhashed' encryption type which can be used to access
      ancient loop-AES-v1.0c disk images. Unhashed encryption type 'AES'
      (without numbers) may eventually vanish because it conflicts with
      kerneli.org syntax.
    - Removed unused code from 'losetup -C' processing so that losetup and
      mount programs are now little bit smaller.