After reading the luks2 FAQ, spec and archives I don't understand what an unbound key is used for. Assuming the unbound key is created from encrypting the given file with the other file specified by --master-key-file: how would I use it? Can it be extracted so that I can decrypt it later? Do I need to write C code to extract the data as-is it or will cryptsetup already do it? If not and I'm going to write C then should it be integrated as a new command in cryptsetup? Since the unbound feature does the encryption: is it compatible with a smart card (PGP/GPG)? sudo cryptsetup luksAddKey --unbound --master-key-file ../lukstest/publickey.pem /dev/sdb --key-size 512 ../lukstest/privatekey JT _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx https://www.saout.de/mailman/listinfo/dm-crypt