You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
coreycothrum
changed the title
idea: cryptsetup reencrypt inactive partition
idea: cryptsetup reencrypt for unique LUKS master key
Dec 9, 2020
coreycothrum
changed the title
idea: cryptsetup reencrypt for unique LUKS master key
idea: cryptsetup (online) reencrypt for unique LUKS master key
Aug 10, 2022
Current LUKS keys are defined @ build time. All devices provisioned from that build share the same LUKS master key.
Would it be good to perform a
cryptsetup reencrypt
? Ideally just once. This would give each device unique keys.Probably some sort of systemd service @ boot time.
https://man7.org/linux/man-pages/man8/cryptsetup.8.html
The text was updated successfully, but these errors were encountered: