diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-17 08:06:26 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-17 08:06:26 +0000 |
commit | 1660d4b7a65d9ad2ce0deaa19d35579ca4084ac5 (patch) | |
tree | 6cf8220b628ebd2ccfc1375dd6516c6996e9abcc /man/cryptsetup-luksConvertKey.8.adoc | |
parent | Initial commit. (diff) | |
download | cryptsetup-upstream.tar.xz cryptsetup-upstream.zip |
Adding upstream version 2:2.6.1.upstream/2%2.6.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'man/cryptsetup-luksConvertKey.8.adoc')
-rw-r--r-- | man/cryptsetup-luksConvertKey.8.adoc | 41 |
1 files changed, 41 insertions, 0 deletions
diff --git a/man/cryptsetup-luksConvertKey.8.adoc b/man/cryptsetup-luksConvertKey.8.adoc new file mode 100644 index 0000000..c626542 --- /dev/null +++ b/man/cryptsetup-luksConvertKey.8.adoc @@ -0,0 +1,41 @@ += cryptsetup-luksConvertKey(8) +:doctype: manpage +:manmanual: Maintenance Commands +:mansource: cryptsetup {release-version} +:man-linkstyle: pass:[blue R < >] +:COMMON_OPTIONS: +:ACTION_LUKSCONVERTKEY: + +== Name + +cryptsetup-luksConvertKey - converts an existing LUKS2 keyslot to new PBKDF parameters + +== SYNOPSIS + +*cryptsetup _luksConvertKey_ [<options>] <device>* + +== DESCRIPTION + +Converts an existing LUKS2 keyslot to new PBKDF parameters. The +passphrase for keyslot to be converted must be supplied interactively or +via --key-file. If no --pbkdf parameters are specified LUKS2 default +PBKDF values will apply. + +If a keyslot is specified (via --key-slot), the passphrase for that +keyslot must be given. If no keyslot is specified and there is still a +free keyslot, then the new parameters will be put into a free keyslot +before the keyslot containing the old parameters is purged. If there is +no free keyslot, then the keyslot with the old parameters is overwritten +directly. + +*WARNING:* If a keyslot is overwritten, a media failure during this +operation can cause the overwrite to fail after the old parameters have +been wiped and make the LUKS container inaccessible. + +*<options>* can be [--key-file, --keyfile-offset, --keyfile-size, +--key-slot, --hash, --header, --disable-locks, --iter-time, --pbkdf, +--pbkdf-force-iterations, --pbkdf-memory, --pbkdf-parallel, +--keyslot-cipher, --keyslot-key-size, --timeout, --verify-passphrase]. + +include::man/common_options.adoc[] +include::man/common_footer.adoc[] |