| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| Try-to-avoid-OOM-killer-on-low-memory-systems-without-swa.patch | Try to avoid OOM killer on low-memory systems without swap. Benchmark for memory-hard KDF is tricky, seems that relying on maximum half of physical memory is not enough. Let's allow only free physical available space if there is no swap. This should not cause changes on normal systems, at least. |
Milan Broz <gmazyland@gmail.com> | yes | debian upstream | https://gitlab.com/cryptsetup/cryptsetup/-/commit/899bad8c06957a94a198d1eaa293ed8db205f1de | 2023-02-20 |
| Print-warning-when-keyslot-requires-more-memory-than-avai.patch | Print warning when keyslot requires more memory than available This warning is displayed only if maximum memory was adjusted: no swap, not enough memory, but is not printed if user set keyslot memory cost above default limit intentionally. In the latter case we have to check all available memory and guess if swap is enough - this is not job af cryptsetup and also it should not excessively parse any /sys files during keyslot open. |
Milan Broz <gmazyland@gmail.com> | yes | debian upstream | https://gitlab.com/cryptsetup/cryptsetup/-/commit/27f8e5c08f0e0054225c9a2b1eda5b4200d4565b | 2023-02-28 |
| Check-for-physical-memory-available-also-in-PBKDF-benchma.patch | Check for physical memory available also in PBKDF benchmark. | Milan Broz <gmazyland@gmail.com> | yes | debian upstream | https://gitlab.com/cryptsetup/cryptsetup/-/commit/7893c33d71cde09e240234c484c6c468f22c2fe7 | 2023-04-03 |
| Use-only-half-of-detected-free-memory-on-systems-without-.patch | Use only half of detected free memory on systems without swap. As tests shows, limiting used Argon2 memory to free memory on systems without swap is still not enough. Use just half of it, this should bring needed margin while still use Argon2. Note, for very-low memory constrained systems user should avoid memory-hard PBKDF (IOW manually select PBKDF2), we do not do this automatically. |
Milan Broz <gmazyland@gmail.com> | yes | debian upstream | https://gitlab.com/cryptsetup/cryptsetup/-/commit/6721d3a8b29b13fe88aeeaefe09d457e99d1c6fa | 2023-04-17 |