Re: Problem after converting to LUKS2

Anton Avramov <[email protected]> Thu, 16 Nov 2023 08:22:51 -0500
Newsgroups dev.linux.lists.cryptsetup
Message-ID <[email protected]> 
On 2023-11-16 02:56, Milan Broz wrote:
> On 11/15/23 16:34, Anton Avramov wrote:
> ...
>>> Please post log from failing command (luksOpen?) with --debug option,
>>> so we can see what
>>> is failing and what exact version (toolss, kernel) you are using.
>> Ubuntu 22.04.3 LTS
>>
>> Linux  5.15.0-88-generic #98-Ubuntu SMP Mon Oct 2 15:18:56 UTC 2023
>> x86_64 x86_64 x86_64 GNU/Linux
>>
>> # cryptsetup 2.4.3 processing "cryptsetup luksOpen --key-file
>> /root/.luks/.p2pool.keyfile /dev/sda1 CryptP2Pool --debug"
>
> ...
>
> That log looks like a correct processing in open (with an incorrect 
> keyfile).
> (Or the convert process really corrupted something in keyslot...)
That key was used for years and I've checked several times in 
/etc/crypttab that this is the correct one.
>
> Could you please send luksDump (ans ideally also luksDump 
> --dump-json-metadata)
> output to check how it is exactly configured?
I'm attaching both.
>
> (You can send it in private mail if you do not want to share it in list.)
It's OK. I'll be retiring this disk even If I manage to salvage the 
data. It we find and actual problem it would be better to have the 
information publicly available .
>
> Thanks.
> Milan

Thank you again for all your time and effort.
Anton
sda1.luksDump.json (application/json, 1.5 KB) - not displayed
sda1.luksDump.txt (text/plain, 1.4 KB) 
LUKS header information
Version:       	2
Epoch:         	2
Metadata area: 	16384 [bytes]
Keyslots area: 	2064384 [bytes]
UUID:          	e6959d8c-f806-42d0-9195-2a12cfd65682
Label:         	(no label)
Subsystem:     	(no subsystem)
Flags:       	(no flags)

Data segments:
  0: crypt
	offset: 2097152 [bytes]
	length: (whole device)
	cipher: aes-xts-plain64
	sector: 512 [bytes]

Keyslots:
  0: luks2
	Key:        256 bits
	Priority:   normal
	Cipher:     aes-xts-plain64
	Cipher key: 256 bits
	PBKDF:      pbkdf2
	Hash:       sha256
	Iterations: 3148876
	Salt:       64 84 a6 4e 92 65 2c 03 02 a2 65 b6 b2 27 75 cc 
	            86 ca af c4 56 c4 a9 9f 7c 40 5f b8 52 2e 88 6f 
	AF stripes: 4000
	AF hash:    sha256
	Area offset:32768 [bytes]
	Area length:131072 [bytes]
	Digest ID:  0
  1: luks2
	Key:        256 bits
	Priority:   normal
	Cipher:     aes-xts-plain64
	Cipher key: 256 bits
	PBKDF:      pbkdf2
	Hash:       sha256
	Iterations: 3088588
	Salt:       00 ab 80 a3 4a bd 39 df 4d ff a4 3b a6 ac e4 0b 
	            7e 97 81 2b 29 c5 c3 25 35 3a 52 26 e9 de e8 6d 
	AF stripes: 4000
	AF hash:    sha256
	Area offset:163840 [bytes]
	Area length:131072 [bytes]
	Digest ID:  0
Tokens:
Digests:
  0: pbkdf2
	Hash:       sha256
	Iterations: 196804
	Salt:       69 fc 82 c6 3e 65 ec f6 e2 ce aa 8b 74 03 70 07 
	            da b8 5d a3 85 6e b8 5b af b3 08 d9 2a 31 86 cb 
	Digest:     64 bf 0f 87 2a d1 d4 4e 05 32 4d 68 cf 10 36 b2 
	            a8 b2 b0 5c