Re: Bypass kdf step with LUKS2

Michael Kjörling <[email protected]> Fri, 23 Jun 2023 14:12:19 +0000
Newsgroups dev.linux.lists.cryptsetup
Message-ID <[email protected]>
On 23 Jun 2023 10:01 -0400, from [email protected] (Rishi Dhupar):
> I am using a high entropy 256-bit key as my
> keyfile [...]
> thousands of devices and want to
> rotate the passphrases on them

This sounds contradictory, and quite frankly smells of a XY problem.

If you are already using a high-entropy key file (that is,
effectively, passphrase), then _why do you need to rotate passphrases
en masse?_ What are you looking to solve by rotating passphrases?

-- 
Michael Kjörling                     🔗 https://michael.kjorling.se
“Remember when, on the Internet, nobody cared that you were a dog?”