[Whonix-devel] [dm-crypt] Troubleshooting: Header Conversion to argon2id

[Milan Broz]

On 12/09/18 06:16, procmem wrote:
> Ondrej Kozina:
>> On 09/11/2018 07:09 PM, procmem wrote:
>>> Hi, I went ahead and tested the commands recommended by Milan for
>>> converting headers to use the better pbkdf algo. Unfortunately I'm
>>> running into an obscure error and wanted your advice on how to solve it.
>>>
>>> Please see the output of the command with --debug
>>>
>> Hi,
>>
>> luksConvertKey command works only on LUKS2 keyslots. Looking at debug
>> output it seems your device is not LUKS2 type.
>>
>> Regards
>> Ondrej
> 
> Now that I think about it this can't be the reason because the header is
> LUKS2 when using cryptsetup 2.0 and above - which is the version
> included in Debian Testing/Buster.

No, header is not always LUKS2 by default, cryptsetup 2.0.x luksFormat still uses LUKS1
format by default. Do not mix version of utility and version of LUKS metadata format.

Anyway, it seems that there is no LUKS header on the device at all, or it is somehow
corrupted, all commands then must fail of course.

Can you please paste output of "blkid -p <device>" and "cryptsetup luksDump --debug <device>" ?

m.


> 
> Also running 'cryptsetup convert' with --debug gives the same error.
> _______________________________________________
> dm-crypt mailing list
> dm-crypt at saout.de
> https://www.saout.de/mailman/listinfo/dm-crypt
>