The Red Hat version has been written by Miloslav Trmac <mitr@redhat.com>.
-->
-<refentry id="crypttab">
+<refentry id="crypttab" conditional='HAVE_LIBCRYPTSETUP'>
<refentryinfo>
<title>crypttab</title>
comma-delimited list of options. The following
options are recognized:</para>
- <variablelist>
+ <variablelist class='crypttab-options'>
<varlistentry>
<term><varname>cipher=</varname></term>
</varlistentry>
+ <varlistentry>
+ <term><varname>keyfile-size=</varname></term>
+
+ <listitem><para>Specifies the maximum number
+ of bytes to read from the keyfile; see
+ <citerefentry><refentrytitle>cryptsetup</refentrytitle><manvolnum>8</manvolnum></citerefentry>
+ for possible values and the default
+ value of this option. This option is ignored
+ in plain encryption mode, as the keyfile-size is then given by the key size.</para></listitem>
+ </varlistentry>
+
+
+ <varlistentry>
+ <term><varname>keyfile-offset=</varname></term>
+
+ <listitem><para>Specifies the number
+ of bytes to skip at the start of
+ the keyfile; see
+ <citerefentry><refentrytitle>cryptsetup</refentrytitle><manvolnum>8</manvolnum></citerefentry>
+ for possible values and the default
+ value of this option.</para></listitem>
+ </varlistentry>
+
+
<varlistentry>
<term><varname>hash=</varname></term>
<varlistentry>
<term><varname>verify</varname></term>
- <listitem><para> If the the encryption
+ <listitem><para> If the encryption
password is read from console, it has
to be entered twice (to prevent
typos). </para></listitem>
</varlistentry>
<varlistentry>
- <term><varname>read-only</varname></term>
+ <term><varname>read-only</varname></term><term><varname>readonly</varname></term>
<listitem><para>Set up the encrypted
block device in read-only
<term><varname>timeout=</varname></term>
<listitem><para>Specify the timeout
- for querying for a password. If not
- unit is specified in
- seconds. Supported units are s, ms,
- us, min, h, d.</para></listitem>
+ for querying for a password. If no
+ unit is specified seconds is used.
+ Supported units are s, ms, us, min, h,
+ d. A timeout of 0 waits indefinitely
+ (which is the
+ default).</para></listitem>
</varlistentry>
<varlistentry>