Fedora 34 cryptsetup fails to mount veracrypt volume with kernel 5.11.3, worked in 5.11.2

[Ian Laurie]

Fedora 34 with latest updates (kernel-5.11.3-300.fc34.x86_64) won't 
mount Veracrypt volumes.  I can boot with the previous kernel 5.11.2 and 
it works fine.

kernel-5.11.3-300.fc34.x86_64
cryptsetup-2.3.4-2.fc34.x86_64

Commands I'm using are:

sudo cryptsetup open /dev/sdb1 vcvolume --type tcrypt --veracrypt 
--tcrypt-hidden
sudo mount /dev/mapper/vcvolume $HOME/secure

If I install and use Veracrypt I can mount the volume on 5.11.3 
(presumably because it's not using the kernel mechanisms to do it).

--
Ian

[Milan Broz]

On 09/03/2021 10:42, Ian Laurie wrote:
>  Fedora 34 with latest updates (kernel-5.11.3-300.fc34.x86_64)
> won't 
>  mount Veracrypt volumes.  I can boot with the previous kernel 5.11.2 and 
>  it works fine.
>  
>  kernel-5.11.3-300.fc34.x86_64
>  cryptsetup-2.3.4-2.fc34.x86_64
>  
>  Commands I'm using are:
>  
>  sudo cryptsetup open /dev/sdb1 vcvolume --type tcrypt --veracrypt 
>  --tcrypt-hidden
>  sudo mount /dev/mapper/vcvolume $HOME/secure
>  
>  If I install and use Veracrypt I can mount the volume on 5.11.3 
>  (presumably because it's not using the kernel mechanisms to do it). 
If your passphrase is longer than 63 characters, please read
https://gitlab.com/cryptsetup/cryptsetup/-/issues/627
(And try 5.11.4 kernel.)

If not, please report this upstream (or to bugzilla) with more info.

Milan

[Ian Laurie]

Thanks Milan, turns out our generated passphrase is exactly 64 bytes long.

>  If your passphrase is longer than 63 characters, please read
>  https://gitlab.com/cryptsetup/cryptsetup/-/issues/627
>  (And try 5.11.4 kernel.)
>  
>  If not, please report this upstream (or to bugzilla) with more info.
>  
>  Milan 
-- 
Ian Laurie
ilaurie(a)bigpond.net.au

[Ian Laurie]

Just FYI kernel 5.11.5 still doesn't work for me, 5.11.2 does work. 
Didn't check 5.11.4 however.

On 3/10/21 7:50 AM, Ian Laurie wrote:
>  Thanks Milan, turns out our generated passphrase is exactly 64 bytes
> long.
>  
> > If your passphrase is longer than 63 characters, please read
> > https://gitlab.com/cryptsetup/cryptsetup/-/issues/627
> > (And try 5.11.4 kernel.)
> >
> > If not, please report this upstream (or to bugzilla) with more info.
> >
> > Milan
>   
-- 
Ian Laurie
ilaurie(a)bigpond.net.au