[dm-crypt] Extract master key from running system

Milan Broz mbroz at redhat.com
Thu Jul 28 09:14:01 CEST 2011


On 07/28/2011 07:04 AM, Arno Wagner wrote:
> I have to admit that there is no info in the FAQ because when I wrote 
> that I did not have time to find out. In the mean time I have had
> an opportunity to do so, so I should probably update the FAQ. First, 
> I think trying to dump will not create additional damage. Here is what 
> works on my machine:
> 
>  cryptsetup luksDump --dump-master-key 

For luksDump you need valid LUKS header.

btw I added script which tries to extract master key automatically
fro active device and prepares cryptsetup parameters.

http://code.google.com/p/cryptsetup/source/browse/trunk/misc/luks-header-from-active

The steps there are quite straightforward.

Milan



More information about the dm-crypt mailing list