[dm-crypt] Extract master key from running system

Arno Wagner arno at wagner.name
Sat Jul 30 20:42:57 CEST 2011

I just added a link to the script by Milan and
an explanation on how to do this manually to the


On Thu, Jul 28, 2011 at 09:14:01AM +0200, Milan Broz wrote:
> On 07/28/2011 07:04 AM, Arno Wagner wrote:
> > I have to admit that there is no info in the FAQ because when I wrote 
> > that I did not have time to find out. In the mean time I have had
> > an opportunity to do so, so I should probably update the FAQ. First, 
> > I think trying to dump will not create additional damage. Here is what 
> > works on my machine:
> > 
> >  cryptsetup luksDump --dump-master-key 
> For luksDump you need valid LUKS header.
> btw I added script which tries to extract master key automatically
> fro active device and prepares cryptsetup parameters.
> http://code.google.com/p/cryptsetup/source/browse/trunk/misc/luks-header-from-active
> The steps there are quite straightforward.
> Milan
> _______________________________________________
> dm-crypt mailing list
> dm-crypt at saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt

Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno at wagner.name 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier 

More information about the dm-crypt mailing list