[Bug 261172] GELI boot failing with aes_xts_reinit: invalid IV length

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 13 Jan 2022 16:38:25 UTC

--- Comment #2 from John Baldwin <jhb@FreeBSD.org> ---
The issue is that the compile fix exposed an assertion that was previously

Hmm, the code in geliboot_crypto.c is a bit incorrect (but probably not
harmfully so).

This (untested) patch will fix the assertion, but it should also use a better
IV size.  The IV size is not the same as the key size (for AES-CBC the IV is a
block, and for AES-XTS the IV is actually smaller than a block)

You are receiving this mail because:
You are the assignee for the bug.