Re: Changing pass-phrase on dm-crypt'ed disks

2012-06-26 Thread Celejar
On Mon, 25 Jun 2012 21:54:22 +0100 Nick Boyce wrote: > On Monday 25 Jun 2012 09:16:23 Claudius Hubig wrote: > > > Nick Boyce wrote: > > > > > The installer uses 'dm-crypt' to encrypt the drive, rather than the full > > > LUKS system - and 'dm-crypt' generates the encryption key directly from >

Re: Changing pass-phrase on dm-crypt'ed disks

2012-06-26 Thread Claudius Hubig
Hello Nick, Nick Boyce wrote: > On Tuesday 26 Jun 2012 10:47:50 Claudius Hubig wrote: > > > If you do luksAddKey, you’ll have to enter one of the old > > passphrases. After that, you can try unlocking the volume with the > > new passphrase. If that succeeds, you can use luksKillSlot to remove >

Re: Changing pass-phrase on dm-crypt'ed disks

2012-06-26 Thread Nick Boyce
On Tuesday 26 Jun 2012 10:47:50 Claudius Hubig wrote: > If you do luksAddKey, you’ll have to enter one of the old > passphrases. After that, you can try unlocking the volume with the > new passphrase. If that succeeds, you can use luksKillSlot to remove > the first slot. luksDelKey or luksKillSlo

Re: Changing pass-phrase on dm-crypt'ed disks

2012-06-26 Thread Claudius Hubig
Hello Nick, Nick Boyce wrote: > > You can check with > > # cryptsetup luksDump > > Hmm .. well thanks for that command (I'm a novice) ... which confirms what > you > say - my single encrypted raw disk partition (containing the LVM mapped > system > volumes) does indeed have a LUKS header, w

Re: Changing pass-phrase on dm-crypt'ed disks

2012-06-25 Thread Nick Boyce
On Monday 25 Jun 2012 09:16:23 Claudius Hubig wrote: > Nick Boyce wrote: > > > The installer uses 'dm-crypt' to encrypt the drive, rather than the full > > LUKS system - and 'dm-crypt' generates the encryption key directly from > > the pass- phrase, rather than storing the encryption key in an o

Re: Changing pass-phrase on dm-crypt'ed disks

2012-06-25 Thread Claudius Hubig
Hello Nick, Nick Boyce wrote: > The installer uses 'dm-crypt' to encrypt the drive, rather than the full LUKS > system - and 'dm-crypt' generates the encryption key directly from the pass- > phrase, rather than storing the encryption key in an on-volume "header" > protected by the pass-phrase.