mirror of
https://gitlab.com/cryptsetup/cryptsetup.git
synced 2025-12-05 16:00:05 +01:00
360f85dde7
This is based mainly on Grammarly. It unifies man pages to at least some level of grammar, so later we can focus on adding more readable content.
33 lines
1.5 KiB
Plaintext
33 lines
1.5 KiB
Plaintext
= cryptsetup-luksConvertKey(8)
|
|
:doctype: manpage
|
|
:manmanual: Maintenance Commands
|
|
:mansource: cryptsetup {release-version}
|
|
:man-linkstyle: pass:[blue R < >]
|
|
:COMMON_OPTIONS:
|
|
:ACTION_LUKSCONVERTKEY:
|
|
|
|
== Name
|
|
|
|
cryptsetup-luksConvertKey - converts an existing LUKS2 keyslot to new PBKDF parameters
|
|
|
|
== SYNOPSIS
|
|
|
|
*cryptsetup _luksConvertKey_ [<options>] <device>*
|
|
|
|
== DESCRIPTION
|
|
|
|
Converts an existing LUKS2 keyslot to new PBKDF parameters.
|
|
The passphrase for the keyslot to be converted must be supplied interactively or via --key-file.
|
|
If no --pbkdf parameters are specified LUKS2 default PBKDF values will apply.
|
|
|
|
If a keyslot is specified (via --key-slot), the passphrase for that keyslot must be given.
|
|
If no keyslot is specified and there is still a free keyslot, the new parameters will be put into a free keyslot before the keyslot containing the old parameters is purged.
|
|
If there is no free keyslot, the keyslot with the old parameters is directly overwritten.
|
|
|
|
*WARNING:* If a keyslot is overwritten, a media failure during this operation can cause the overwrite to fail after the old parameters have been wiped, making the LUKS container inaccessible.
|
|
|
|
*<options>* can be [--key-file, --keyfile-offset, --keyfile-size, --key-slot, --hash, --header, --disable-locks, --iter-time, --pbkdf, --pbkdf-force-iterations, --pbkdf-memory, --pbkdf-parallel, --keyslot-cipher, --keyslot-key-size, --timeout, --verify-passphrase].
|
|
|
|
include::man/common_options.adoc[]
|
|
include::man/common_footer.adoc[]
|