packages/utils/cryptsetup/patches/010-configure-detect-openssl-without-argon2.patch, branch masterMirror of packages feedhttps://git.openwrt.org/feed/packages/atom?h=master2026-09-11T00:46:29Zcryptsetup: fix Argon2 with OpenSSL built without it2026-09-11T00:46:29ZDaniel Golle2026-09-10T14:33:44Zurn:sha1:5b684a6713c98507edadb70869cb1653044497fa
OpenWrt builds OpenSSL with no-blake2, which OpenSSL's Configure turns
into no-argon2 because Argon2 is built on BLAKE2b. The cryptsetup
configure script only looks for the OSSL_KDF_PARAM_ARGON2_VERSION macro,
which such a build still installs, so it drops the bundled Argon2 and
EVP_KDF_fetch() fails at runtime. Every LUKS2 keyslot using Argon2 then
fails instantly with "Keyslot open failed", and cryptsetup benchmark
reports argon2id as N/A. Add a patch that also checks OPENSSL_NO_ARGON2
so the bundled implementation is used again.
Fixes: fbac2e7861fb ("cryptsetup: update to 2.8.7")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>