The grub legacy (grub 0.97) supported LBA access, but since it was processing in 32-bit, it could only access up to 2 TiB.
By applying patches of the reference site below, it became accessible with 48-bit LBA and supported disks over 2 TiB. However, it didn't support the 64bit feature of ext4, so it couldn't access the recently created ext4 filesystem.
exFAT supported mainline kernel from linux-5.4. Regarding distribution support, it was supported by Ubuntu focal and it is supported by Debian bullseye. Until now, I used exfat-fuse. But with fuse, it's just a step away from usability. Native kernel support is easier to use.
Native support even before buster and bionic I wanted the same usability as the above,
so I searched for the exfat dkms module.
The exfat-dkms package was found in Ubuntu PPA below.
The CVE-2020-12762 vulnerability was announced and then fixed. But there are still many weaknesses. In Debian buster or later, and Ubuntu bionic or later, json-c is used in cryptsetup that is used for encryption of storage device, so it is necessary to improve the quality. So then I made patches for debian/ubuntu.
For private use with TLS 1.3, it's assigned the following definitions of ciphersuites for Camellia-GCM.
CAMELLIA-128-GCM: 0xff, 0xca
CAMELLIA-256-GCM: 0xff, 0xcb
And re-add TLS 1.2 Camellia-GCM to priorities ciphersuites.
For applications that can not use openssl-1.1, it supports DJB's cryptographic functions for openssl-1.0.2. And supports Camellia-GCM (RFC 6367).
packaging-dev, lzip / Preparation: sudo apt-get build-dep openssl or openssl1.0
| /* Copyright (c) 2014, 2015, Google Inc. | |
| * | |
| * Permission to use, copy, modify, and/or distribute this software for any | |
| * purpose with or without fee is hereby granted, provided that the above | |
| * copyright notice and this permission notice appear in all copies. | |
| * | |
| * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES | |
| * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF | |
| * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY | |
| * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES |
Although SSH has sufficient security, handring keys is confusing. I wanted easy encrypted communication tool in my home LAN. I found that the source code of rsh-redone is simpler than that of netkit-rsh. So I decided to add encrypt function to rsh-redone.
You need to build and install patched OpenSSL or LibreSSL or BoringSSL:
its library libcrypto.so supports X25519 API and EVP_AEAD API.
| /* | |
| * Copyright 2014 Emilio López <[email protected]> | |
| * Copyright 2014 Jon Smirl <[email protected]> | |
| * Copyright 2015 Maxime Ripard <[email protected]> | |
| * Copyright 2015 Adam Sampson <[email protected]> | |
| * | |
| * Based on the Allwinner SDK driver, released under the GPL. | |
| * | |
| * This program is free software; you can redistribute it and/or modify | |
| * it under the terms of the GNU General Public License as published by |
| ; mmc: Display media block count | |
| ; | |
| # linux 4.10 | |
| --- linux.orig/drivers/mmc/core/block.c | |
| +++ linux.new/drivers/mmc/core/block.c | |
| @@ -2170,6 +2170,7 @@ | |
| static int mmc_blk_probe(struct mmc_card *card) | |
| { | |
| struct mmc_blk_data *md, *part_md; | |
| + sector_t capacity; |
References: [ladar/1.0.2_curve25519_ed25519.patch] (https://gist.github.com/ladar/e45e893901f30f480dd49265ba3c42c0) , BoringSSL