eessppeelllloo/cryptsetup
1
0
Fork 0
mirror of https://gitlab.com/cryptsetup/cryptsetup.git synced 2025-12-13 11:50:10 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add note to man page for LUKS convert requirements.

Browse Source
This commit is contained in:
Milan Broz
2025-05-15 14:40:45 +02:00
parent 11dd8d318c
commit 50b762ab94
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
man/cryptsetup-convert.8.adoc
View File

@@ -20,6 +20,12 @@ Converts the device between LUKS1 and LUKS2 format (if possible). The
conversion will not be performed if there is an additional LUKS2 feature conversion will not be performed if there is an additional LUKS2 feature
or LUKS1 has unsupported header size. or LUKS1 has unsupported header size.
For conversion from LUKS2 to LUKS1, all active keyslots must use the PBKDF2
key-derivation function. The PBKDF2 and anti-forensic filter (AF) hash must
be the same as the hash used in the digest.
All keyslot numbers must be lower than 8 (LUKS1 maximum slot number).
There must be at least one active keyslot and no unbound or reencryption keyslots.
Conversion (both directions) must be performed on inactive device. There Conversion (both directions) must be performed on inactive device. There
must not be active dm-crypt mapping established for LUKS header must not be active dm-crypt mapping established for LUKS header
requested for conversion. requested for conversion.