https://muisti.atk-neuvos.fi/tags/luks/Recent content in Luks on TerminalHugoenMon, 24 Mar 2025 00:00:00 +0000https://muisti.atk-neuvos.fi/posts/luks/Mon, 24 Mar 2025 00:00:00 +0000https://muisti.atk-neuvos.fi/posts/luks/<h1 id="prepare-storage-device-from-zero">Prepare storage device from zero</h1> <pre tabindex="0"><code>cryptsetup luksFormat /dev/sdx cryptsetup luksOpen /dev/sdx cryptoblob mkfs.ext4 /dev/mapper/cryptoblob </code></pre><h1 id="test-slotpassphrase">Test slot/passphrase</h1> <pre tabindex="0"><code>cryptsetup --verbose open --test-passphrase /dev/sdx </code></pre><h1 id="change-volume-password">Change volume password</h1> <pre tabindex="0"><code>cryptsetup luksChangeKey -S 0 /dev/sdx </code></pre><h1 id="update-old-luks-kdf-for-safer-one">Update old LUKS KDF for safer one</h1> <p>Older LUKS volumes can have unsafe/poor key derivation function in use.</p> <pre tabindex="0"><code>cryptsetup luksHeaderBackup /dev/sdx --header-backup-file /tmp/luksheader cryptsetup luksDump /dev/sdx # If type 1 (old): cryptsetup convert /dev/sdx --type luks2 cryptsetup luksConvertKey /dev/sdx --pbkdf argon2id # If goofen uppen, restore old header: cryptsetup luksHeaderRestore /dev/sdx --header-backup-file /tmp/luksheader </code></pre>