Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

luks password prompt shows asterisks

If none of the specific sub-forums seem right for your thread, ask here.
Post Reply
Message
Author
paulclou
Posts: 18
Joined: 2011-10-17 08:08

luks password prompt shows asterisks

#1 Post by paulclou »

Hi all,

A few months ago, one of my computers running Debian stable began to echo one asterisk per character at the prompt to unlock a luks encrypted disk. I resorted to wiping the drive and reinstalling Debian stable today, and it displayed the same problem. Do you have any suggestions on mitigating this problem?

The system is running i5-8400, Asus B360-H.

https://i.imgur.com/L5kyPsc.jpg
Image

Thank you.

User avatar
Hallvor
Global Moderator
Global Moderator
Posts: 2041
Joined: 2009-04-16 18:35
Location: Kristiansand, Norway
Has thanked: 149 times
Been thanked: 212 times

Re: luks password prompt shows asterisks

#2 Post by Hallvor »

I think it's a "feature"...
[HowTo] Install and configure Debian bookworm
Debian 12 | KDE Plasma | ThinkPad T440s | 4 × Intel® Core™ i7-4600U CPU @ 2.10GHz | 12 GiB RAM | Mesa Intel® HD Graphics 4400 | 1 TB SSD

p.H
Global Moderator
Global Moderator
Posts: 3049
Joined: 2017-09-17 07:12
Has thanked: 5 times
Been thanked: 132 times

Re: luks password prompt shows asterisks

#3 Post by p.H »

My latest buster installation on LUKS does not display asterisks when I type the passphrase.
Could it be because you have plymouth installed ?

paulclou
Posts: 18
Joined: 2011-10-17 08:08

Re: luks password prompt shows asterisks

#4 Post by paulclou »

p.H wrote:My latest buster installation on LUKS does not display asterisks when I type the passphrase.
Could it be because you have plymouth installed ?
Nope. And it occurred right after the reboot of Debian 10 installation barebone (with iwlwifi nonfree firmware).

CwF
Global Moderator
Global Moderator
Posts: 2679
Joined: 2018-06-20 15:16
Location: Colorado
Has thanked: 41 times
Been thanked: 196 times

Re: luks password prompt shows asterisks

#5 Post by CwF »

My upgraded to buster does echo, and backspaces the echo..but it also changed to high res. I think my stretch doesn't echo. I find no setting to change it, interesting.
Try turning off the echo when you enter password by pressing TAB or BACKSPACE first, then passphrase.

paulclou
Posts: 18
Joined: 2011-10-17 08:08

Re: luks password prompt shows asterisks

#6 Post by paulclou »

CwF wrote:My upgraded to buster does echo, and backspaces the echo..but it also changed to high res. I think my stretch doesn't echo. I find no setting to change it, interesting.
Try turning off the echo when you enter password by pressing TAB or BACKSPACE first, then passphrase.
The closest thing I can find is for systemd-ask-password https://github.com/systemd/systemd/issues/8495. I don't understand what systemd-ask-password has to do with luks during boot up. I believe echoing password length strongly weakens the encryption, and should not be enabled as default. Also, I cannot untoggle the asterisks by pressing TAB or BACKSPACE first, but I will test that again. Out of my six Debian machines from stable to testing, only one echos the asterisks. Should I contact the mailing list?

CwF
Global Moderator
Global Moderator
Posts: 2679
Joined: 2018-06-20 15:16
Location: Colorado
Has thanked: 41 times
Been thanked: 196 times

Re: luks password prompt shows asterisks

#7 Post by CwF »

paulclou wrote:Should I contact the mailing list?
could, but it seems the argument is well under way. I think the insecurity idea is flawed, do you type it with your hands covered? I think I'd rather have the feedback on a boot prompt, but generally agree the standard is no echo for passwords.

User avatar
esp7
Posts: 177
Joined: 2013-06-23 20:31
Has thanked: 2 times
Been thanked: 4 times

Re: luks password prompt shows asterisks

#8 Post by esp7 »

Hallvor wrote:I think it's a "feature"...
:lol:
ThinkPad X220: i5-2520M CPU 2.5GHz - 8GB RAM 1333 MHz - SSD 860 EVO 250GB - Debian - ME_cleaned
ThinkPad X230: i5-3320M CPU 3.3GHz - 8GB RAM 1600 MHz - SSD 860 EVO 500GB - Debian - ME_cleaned

StangATX
Posts: 2
Joined: 2019-10-23 14:00

Re: luks password prompt shows asterisks

#9 Post by StangATX »

Did y'all ever find a fix for it? I noticed that on Stretch it never did that until I upgraded to Buster. I tried a clean install as well and I'm still having that issue. I don't why Debian decided out of nowhere to modify this great "Feature". :twisted:

StangATX
Posts: 2
Joined: 2019-10-23 14:00

Re: luks password prompt shows asterisks

#10 Post by StangATX »

bump?

User avatar
esp7
Posts: 177
Joined: 2013-06-23 20:31
Has thanked: 2 times
Been thanked: 4 times

Re: luks password prompt shows asterisks

#11 Post by esp7 »

Seriously, it is feature... just move on!
ThinkPad X220: i5-2520M CPU 2.5GHz - 8GB RAM 1333 MHz - SSD 860 EVO 250GB - Debian - ME_cleaned
ThinkPad X230: i5-3320M CPU 3.3GHz - 8GB RAM 1600 MHz - SSD 860 EVO 500GB - Debian - ME_cleaned

user-2020-10-5
Posts: 1
Joined: 2020-10-08 00:11

Re: luks password prompt shows asterisks

#12 Post by user-2020-10-5 »

Found it. Asterisks appear in when plymouth is installed, remove the package and asterisks disappear

Code: Select all

apt remove plymouth plymouth-label libplymouth4

CwF
Global Moderator
Global Moderator
Posts: 2679
Joined: 2018-06-20 15:16
Location: Colorado
Has thanked: 41 times
Been thanked: 196 times

Re: luks password prompt shows asterisks

#13 Post by CwF »

user-2020-10-5 wrote: Found it.
Very good.
There is a etc/plymouth/plymouthd.conf maybe a magic setting can be set there...

Why was this forced upon Buster?

p.H
Global Moderator
Global Moderator
Posts: 3049
Joined: 2017-09-17 07:12
Has thanked: 5 times
Been thanked: 132 times

Re: luks password prompt shows asterisks

#14 Post by p.H »

user-2020-10-5 wrote:Found it. Asterisks appear in when plymouth is installed
I wrote it one year ago.
user-2020-10-5 wrote:remove the package and asterisks disappear
Or add "nosplash" to the kernel command line to disable plymouth.

Post Reply