[dm-crypt] does luksDump guarantee header integrity?

hank hank at ml1.net
Sat Mar 23 16:27:58 CET 2013


Interesting, thanks. I had a naive view of the keys being stored in the
slot 'descriptors'. Seems there is more science to that. -- Hank

On Sun, Mar 24, 2013, at 01:48 AM, Arno Wagner wrote:
> Unfortunately, that is accuirate. Just to be sure, you can run the
> LUKS keyslot cheker included in the newer sources and found unter 
> /cryptsetup-1.6.0/misc/keyslot_checker/. It has to be built separately
> (just call "make" in its directory) after installing cryptsetuo
> from the same package (or one that has the features the keyslot
> checker needs). It will check each in-use keyslot for overwritten
> areas. If there are any, that keyslot becomes unusable and 
> unrecoverable.


More information about the dm-crypt mailing list