The translation is temporarily closed for contributions due to maintenance, please come back later.
The translation was automatically locked due to following alerts: Could not update the repository.
Exit Zen
1
English type: Plain text
[[!tag security/fixed]]
24/10000 · 24
2
English type: Bullet: ' 1. '
To verify whether your encrypted volume uses PBKDF2 or Argon2id, execute the following command.
95/10000 · 95
3
English type: Plain text
Replace <span class="command-placeholder">[partition]</span> with the
partition name found in step 1.6.
116/10000 · 116
4
English type: Plain text
<p class="pre command-template">cryptsetup luksDump /dev/<span class="command-placeholder">[partition]</span></p>
120/10000 · 120
4
English type: Plain text
<p class="pre command">cryptsetup luksDump /dev/<span class="command-placeholder">[partition]</span></p>
111/10000 · 111
5
English type: Plain text
In the output:
21/10000 · 21
6
English type: Bullet: ' - '
`Version` indicates the version of LUKS, either `1` or `2`.
59/10000 · 59
6
English type: Bullet: ' - '
<span class="command">Version</span> indicates the version of LUKS, either <span class="command">1</span> or <span class="command">2</span>.
140/10000 · 140
7
English type: Bullet: ' - '
`PBKDF` indicates the key derivation function, either `pbkdf2` or `argon2id`.
77/10000 · 77
7
English type: Bullet: ' - '
<span class="command">PBKDF</span> indicates the key derivation function, either <span class="command">pbkdf2</span> or <span class="command">argon2id</span>.
158/10000 · 158
8
English type: Plain text
If your encrypted volume already uses LUKS2 and Argon2id, you can stop
here.
89/10000 · 89
9
English type: Bullet: ' 1. '
Execute the following command to do a backup of your LUKS1 header.
66/10000 · 66
10
English type: Plain text
<p class="pre command-template">cryptsetup luksHeaderBackup /dev/<span class="command-placeholder">[partition]</span> --header-backup-file /home/amnesia/luks1header</p>
175/10000 · 175
10
English type: Plain text
<p class="pre command">cryptsetup luksHeaderBackup /dev/<span class="command-placeholder">[partition]</span> --header-backup-file /home/amnesia/luks1header</p>
166/10000 · 166
11
English type: Plain text
If something goes wrong, you will be able to restore your LUKS1 header
from this backup with:
106/10000 · 106
12
English type: Plain text
<p class="pre command-template">cryptsetup luksHeaderRestore /dev/<span class="command-placeholder">[partition]</span> --header-backup-file /home/amnesia/luks1header</p>
176/10000 · 176
12
English type: Plain text
<p class="pre command">cryptsetup luksHeaderRestore /dev/<span class="command-placeholder">[partition]</span> --header-backup-file /home/amnesia/luks1header</p>
167/10000 · 167
13
English type: Bullet: ' 1. '
To update your LUKS header to LUKS2, execute the following command.
67/10000 · 67
14
English type: Plain text
Replace <span class="command-placeholder">[partition]</span> with the
device name found in step 1.6.
113/10000 · 113
15
English type: Plain text
<p class="pre command-template">cryptsetup convert /dev/<span class="command-placeholder">[partition]</span> --type luks2</p>
132/10000 · 132