LUKS - lost token?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi guys.

I know this is most likely not best suited question for this list, but I'm hoping some experts might be able to help.

I have a LUKS device which had keyslot with pass-phrase removed and token for TPM keyslot removed too - I think this is the case, for none of my passphrase works and device is as below:

I hope there is a way to save & bring it back to live - device is open right now and I've access to filesystem, obviously goal would be to avoid re-format/crypt.

Would it be needed to create a new token for that TPM keyslot - if it's tpm - with _systemd-cryptenroll_  or any other way?

-> $ cryptsetup luksDump /dev/nvme0n1p3
LUKS header information
Version:           2
Epoch:             83
Metadata area:     16384 [bytes]
Keyslots area:     16744448 [bytes]
UUID:              3a879268-84fd-4b48-a5d4-960cccb0caa9
Label:             (no label)
Subsystem:         (no subsystem)
Flags:           (no flags)

Data segments:
  0: crypt
    offset: 16777216 [bytes]
    length: (whole device)
    cipher: aes-xts-plain64
    sector: 512 [bytes]

Keyslots:
  1: luks2
    Key:        512 bits
    Priority:   normal
    Cipher:     aes-xts-plain64
    Cipher key: 512 bits
    PBKDF:      pbkdf2
    Hash:       sha512
    Iterations: 1000
    Salt:       a4 5b 6b cc a8 f1 6b e8 b7 3b e2 3d ca 8d 43 fb
                10 52 62 b9 99 45 70 16 bd e1 0f 7a 6c 7f 3d 11
    AF stripes: 4000
    AF hash:    sha512
    Area offset:290816 [bytes]
    Area length:258048 [bytes]
    Digest ID:  0
Tokens:
Digests:
  0: pbkdf2
    Hash:       sha256
    Iterations: 183317
    Salt:       ef 56 aa 59 c2 64 66 c7 49 57 31 4b a7 7d 00 3c
                fe 00 89 2e b9 e9 da bc 69 1d 19 59 96 a9 27 aa
    Digest:     79 aa 0c 8a 29 64 9c 83 bb 5a f8 5c b5 c6 b0 9c
                5e 54 80 49 bd 21 f6 b4 5b 49 65 39 bd 6f 5f 20


[Index of Archives]     [LARTC]     [Bugtraq]     [Yosemite Forum]     [Photo]

  Powered by Linux