]> git.99rst.org Git - openwrt-packages.git/commit
cryptsetup: fix Argon2 with OpenSSL built without it
authorDaniel Golle <redacted>
Thu, 10 Sep 2026 14:33:44 +0000 (15:33 +0100)
committerDaniel Golle <redacted>
Fri, 11 Sep 2026 00:46:29 +0000 (01:46 +0100)
commit5b684a6713c98507edadb70869cb1653044497fa
tree34e7adb3afb49cbc41cf948fbe0ec80773804f7f
parentc65b4d5ab81fd9d7b9015087ca6b800762962e0b
cryptsetup: fix Argon2 with OpenSSL built without it

OpenWrt builds OpenSSL with no-blake2, which OpenSSL's Configure turns
into no-argon2 because Argon2 is built on BLAKE2b. The cryptsetup
configure script only looks for the OSSL_KDF_PARAM_ARGON2_VERSION macro,
which such a build still installs, so it drops the bundled Argon2 and
EVP_KDF_fetch() fails at runtime. Every LUKS2 keyslot using Argon2 then
fails instantly with "Keyslot open failed", and cryptsetup benchmark
reports argon2id as N/A. Add a patch that also checks OPENSSL_NO_ARGON2
so the bundled implementation is used again.

Fixes: fbac2e7861fb ("cryptsetup: update to 2.8.7")
Signed-off-by: Daniel Golle <redacted>
utils/cryptsetup/Makefile
utils/cryptsetup/patches/010-configure-detect-openssl-without-argon2.patch [new file with mode: 0644]
git clone https://git.99rst.org/PROJECT