mirror of
https://gitlab.com/cryptsetup/cryptsetup.git
synced 2025-12-05 16:00:05 +01:00
360f85dde7
This is based mainly on Grammarly. It unifies man pages to at least some level of grammar, so later we can focus on adding more readable content.
39 lines
1.4 KiB
Plaintext
39 lines
1.4 KiB
Plaintext
= cryptsetup-convert(8)
|
|
:doctype: manpage
|
|
:manmanual: Maintenance Commands
|
|
:mansource: cryptsetup {release-version}
|
|
:man-linkstyle: pass:[blue R < >]
|
|
:COMMON_OPTIONS:
|
|
:ACTION_CONVERT:
|
|
|
|
== Name
|
|
|
|
cryptsetup-convert - converts the device between LUKS1 and LUKS2 format
|
|
|
|
== SYNOPSIS
|
|
|
|
*cryptsetup _convert_ --type <format> [<options>] <device>*
|
|
|
|
== DESCRIPTION
|
|
|
|
Converts the device between LUKS1 and LUKS2 format (if possible).
|
|
The conversion will not be performed if there is an additional LUKS2 feature or LUKS1 has an unsupported header size.
|
|
|
|
For conversion from LUKS2 to LUKS1, all active keyslots must use the PBKDF2 key-derivation function.
|
|
The PBKDF2 and anti-forensic filter (AF) hash must be the same as the hash used in the digest.
|
|
All keyslot numbers must be lower than 8 (LUKS1 maximum slot number).
|
|
There must be at least one active keyslot and no unbound or reencryption keyslots.
|
|
|
|
Conversion (both directions) must be performed on an inactive device.
|
|
There must not be an active dm-crypt mapping established for the LUKS header requested for conversion.
|
|
|
|
The *--type* option is mandatory with the following accepted values: _luks1_ or _luks2_.
|
|
|
|
*WARNING:* The _convert_ action can destroy the LUKS header in the case of a crash during conversion or if a media error occurs.
|
|
Always create a header backup before performing this operation!
|
|
|
|
*<options>* can be [--header, --type, --disable-locks].
|
|
|
|
include::man/common_options.adoc[]
|
|
include::man/common_footer.adoc[]
|