boot cryptsetup passphrase prompt echoes typed characters as stars

[ilf]

Binary package hint: plymouth

So bug 566818 is fixed and plymouth no longer causes the cryptsetup passphrase prompt during boot to repeat the prompt with every character typed.

It still echoes an asterisk for every character typed. I consider this a security issue, since this reveals on the screen how many characters the passphrase consists of.

sudo and cryptsetup (and many others) do not echo anything when typing in passphrases. This is a deliberate security feature. plymouth should respect this and also not echo enything after the prompt.

[Hans Zehntner (j50k)]

Password length gets written and logged to tty7 on Ubuntu Server 11.04.
This is unacceptable, because everyone with physical access is able to read that.

[tekstr1der (tekstr1der)]

Any update on this? I'll be looking at an Ubuntu server setup going into 12.04 LTS and this needs to be resolved.

Other distros handle the cryptsetup passphrase properly.

[ilf (ilf)]

Nope, still the same on a freshly updated 11.10.

[ilf (ilf)]

OMFG. Updated another box.
It still displays a star for every character when unlocking the first (system) disk.
But it displays the plain passphrases for all my other disks after the first one!

[ilf (ilf)]

Can anyone else check this out please?
Then raise the Importance to Critical.

[Cybjit (cybjit)]

The plain echoing is reported as bug 876626

[ilf (ilf)]

What's the holdup here? Do you not think this is a bug?