[ Milan Broz ] * new upstream version. (closes: #704827, 707997) - default LUKS encryption mode is XTS (aes-xts-plain64) (closes: #714331) - adds native support for Truecrypt and compatible on-disk format - adds benchmark command - adds cryptsetup-reencrypt, a tool to offline reencrypt LUKS device - adds veritysetup, a tool for dm-verity block device verification module * install docs/examples into docs at cryptsetup-dev package. * fix compilation warnings in askpass.c.
[ Steve Langasek ] * fix upstart jobs to not cause boot hangs when actually used in conjunction with startpar. (closes: #694499, #677712). * in connection with the above, make the cryptdisks-early job explicitly wait for 'umountfs' on shutdown just like cryptdisks does; otherwise, the teardown of the cryptdisks upstart job may cause the cryptdisks-early init script run before we're done unmounting filesystems.
[ Jonas Meurer ] * minor wording fixes to README.initramfs, suggested by intrigeri and Adam D. Barrett. * add bash-completion script for cryptdisks_{start,stop}. Thanks to Claudius Hubig for providing a patch. (closes: #700777) * support specifying key-slot in crypttab. Thanks to Kevin Locke for the patch. (closes: #704470) * remove evms support code from cryptroot initramfs script. (closes: #713918) * fix location of keyscripts in initramfs documentation. (closes: #697446) * fix a typo in decrypt_ssl script that prevented stdout from beeing redirected to /dev/null. (closes: #700285) * give full path to blkid in crytproot initramfs script. (closes: #697155) * export number of previous tries from cryptroot and cryptdisks to keyscript. Thanks to Laurens Blankers for the idea. Opens the possibility to fallback after a given number of tries for keyscripts. (closes: #438481, #471729, #697455) * improve check for cpu hardware encryption support in initramfs cryptroot hook. (closes: #714326)