[dm-crypt] migrate luks key-slots to another luks container

Milan Broz gmazyland at gmail.com
Wed Jan 16 21:05:45 CET 2013


On 01/16/2013 08:57 PM, Alexander 'Leo' Bergolth wrote:
> Am 16.01.2013 19:50, schrieb .. ink ..:
>>     Is it possible to move the passphrases from one luks container to a new
>>     one with different cipher, size and payload offset? (There is currently
>>     no data on the new container, I just want to keep the old passphrases.)
>>
>> any reason why you dont want to just add those old passphrases to the
>> new container using "luksAddKey"?
> 
> I'd like to transfer the key-slots so that the same passphrases can be 
> used to unlock them.
> I don't know the passphrases. (Just one of them.)

Then it is impossible (if you want to change encryption parameters
and master key).

New master key must be encrypted with the new algorithm and you cannot
do this for keyslots without passphrase knowledge for these keyslots.

Milan


More information about the dm-crypt mailing list