Re: Changing pass-phrase on dm-crypt'ed disks

2012-06-26 Thread Claudius Hubig
Hello Nick, Nick Boyce n...@glimmer.adsl24.co.uk wrote: You can check with # cryptsetup luksDump device Hmm .. well thanks for that command (I'm a novice) ... which confirms what you say - my single encrypted raw disk partition (containing the LVM mapped system volumes) does indeed

Re: Changing pass-phrase on dm-crypt'ed disks

2012-06-26 Thread Nick Boyce
On Tuesday 26 Jun 2012 10:47:50 Claudius Hubig wrote: If you do luksAddKey, you’ll have to enter one of the old passphrases. After that, you can try unlocking the volume with the new passphrase. If that succeeds, you can use luksKillSlot to remove the first slot. luksDelKey or luksKillSlot ?

Re: Changing pass-phrase on dm-crypt'ed disks

2012-06-26 Thread Claudius Hubig
Hello Nick, Nick Boyce n...@glimmer.adsl24.co.uk wrote: On Tuesday 26 Jun 2012 10:47:50 Claudius Hubig wrote: If you do luksAddKey, you’ll have to enter one of the old passphrases. After that, you can try unlocking the volume with the new passphrase. If that succeeds, you can use

Re: Changing pass-phrase on dm-crypt'ed disks

2012-06-26 Thread Celejar
On Mon, 25 Jun 2012 21:54:22 +0100 Nick Boyce n...@glimmer.adsl24.co.uk wrote: On Monday 25 Jun 2012 09:16:23 Claudius Hubig wrote: Nick Boyce n...@glimmer.adsl24.co.uk wrote: The installer uses 'dm-crypt' to encrypt the drive, rather than the full LUKS system - and 'dm-crypt'

Re: Changing pass-phrase on dm-crypt'ed disks

2012-06-25 Thread Claudius Hubig
Hello Nick, Nick Boyce n...@glimmer.adsl24.co.uk wrote: The installer uses 'dm-crypt' to encrypt the drive, rather than the full LUKS system - and 'dm-crypt' generates the encryption key directly from the pass- phrase, rather than storing the encryption key in an on-volume header protected

Re: Changing pass-phrase on dm-crypt'ed disks

2012-06-25 Thread Nick Boyce
On Monday 25 Jun 2012 09:16:23 Claudius Hubig wrote: Nick Boyce n...@glimmer.adsl24.co.uk wrote: The installer uses 'dm-crypt' to encrypt the drive, rather than the full LUKS system - and 'dm-crypt' generates the encryption key directly from the pass- phrase, rather than storing the

Changing pass-phrase on dm-crypt'ed disks

2012-06-24 Thread Nick Boyce
I recently set up a Debian Squeeze system, using the installer's option to encrypt the hard disk. It's working very well :-) Good practice dictates that I should change the pass-phrase for this disk from time to time, but my research ([1],[2]) suggests this is is not straightforward because