How to resume decryption on LUKS1 in-place

xndr <[email protected]> Wed, 21 Feb 2024 17:22:18 +0000
Newsgroups dev.linux.lists.cryptsetup
Message-ID <[email protected]>
Hello 1&All,

Please help us complete an in-place decryption of a LUKS1 device:-

We followed the steps here on the Arch Linux wiki by converting from
LUKS2 to LUKS1:-

https://wiki.archlinux.org/title/Removing_system_encryption#Decrypting_LUKS2_devices_in-place

Unfortunately the device suffered an IO error at about 85% after issuing
the final command:-

cryptsetup-reencrypt --decrypt /dev/sda3

 From the man pages it might seem that the process can be resumed by
using the command:-

cryptsetup reencrypt --resume-only --header
luks2-hdr-file /dev/encrypted_device

However it seems qualified by being a LUKS2 only facility. Should this
command still work on LUKS1 or is the process (if there's one at all)
different.

Available are copies of the headers (LUKS 1 & 2) in text and binary form
and what appears to be a log generated during decryption.

Any counsel greatly appreciated - thank you.