libcryptsetup-rs 0.15.1

High level Rust bindings for libcryptsetup
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105

// This Source Code Form is subject to the terms of the Mozilla Public
// License, v. 2.0. If a copy of the MPL was not distributed with this
// file, You can obtain one at http://mozilla.org/MPL/2.0/.

use crate::{
    consts::{
        flags::{CryptActivate, CryptDeactivate, CryptReencrypt, CryptVolumeKey},
        vals::{CryptReencryptDirectionInfo, CryptReencryptModeInfo, EncryptionFormat},
    },
    device::CryptInit,
    get_sector_size,
    tests::loopback,
    CryptParamsLuks2, CryptParamsReencrypt, Either,
};

pub fn test_reencrypt_by_password() {
    loopback::use_loopback(
        50 * 1024 * 1024,
        super::format_with_zeros(),
        super::do_cleanup(),
        |dev_path, _file_path| {
            let mut dev = CryptInit::init(dev_path).unwrap();
            dev.context_handle()
                .format::<()>(
                    EncryptionFormat::Luks2,
                    ("aes", "xts-plain"),
                    None,
                    Either::Right(512 / 8),
                    None,
                )
                .unwrap();

            dev.keyslot_handle()
                .add_by_key(
                    None,
                    None,
                    "thisisatest".as_bytes(),
                    CryptVolumeKey::empty(),
                )
                .unwrap();

            let new_keyslot = dev
                .keyslot_handle()
                .add_by_key(
                    None,
                    Some(Either::Right(512 / 8)),
                    "thisisatest".as_bytes(),
                    CryptVolumeKey::NO_SEGMENT,
                )
                .unwrap();

            dev.activate_handle()
                .activate_by_passphrase(
                    Some("test-device"),
                    None,
                    "thisisatest".as_bytes(),
                    CryptActivate::empty(),
                )
                .unwrap();

            let size = match get_sector_size(Some(&mut dev)) {
                i if i < 0 => panic!("Received error: {i:?}"),
                i => i as u32,
            };
            let cipher = dev.status_handle().get_cipher().unwrap();
            let cipher_mode = dev.status_handle().get_cipher_mode().unwrap();

            dev.reencrypt_handle()
                .reencrypt_init_by_passphrase(
                    Some("test-device"),
                    "thisisatest".as_bytes(),
                    None,
                    Some(new_keyslot),
                    Some((&cipher, &cipher_mode)),
                    CryptParamsReencrypt {
                        mode: CryptReencryptModeInfo::Reencrypt,
                        direction: CryptReencryptDirectionInfo::Forward,
                        resilience: "checksum".to_string(),
                        hash: "sha256".to_string(),
                        data_shift: 0,
                        max_hotzone_size: 0,
                        device_size: 0,
                        luks2: Some(CryptParamsLuks2 {
                            data_alignment: 0,
                            data_device: None,
                            integrity: None,
                            integrity_params: None,
                            pbkdf: None,
                            label: None,
                            sector_size: size,
                            subsystem: None,
                        }),
                        flags: CryptReencrypt::empty(),
                    },
                )
                .unwrap();

            dev.reencrypt_handle().reencrypt2::<()>(None, None).unwrap();

            dev.activate_handle()
                .deactivate("test-device", CryptDeactivate::empty())
                .unwrap();
        },
    )
}