[Whonix-devel] [dm-crypt] Troubleshooting: Header Conversion to argon2id

Ondrej Kozina okozina at redhat.com
Thu Sep 13 17:00:37 CEST 2018

On 09/13/2018 04:13 PM, procmem wrote:
> Appending break=premount to the line starting with "linux" worked for
> converting the header to v2. However changing it to argon2id still
> failed with a -1 error code.

Well, this sounds like a bug. Could you please provide us with debug 
output for failing command trying to luksConvertKey that particular keyslot?

> So I ended up bypassing this process by creating a new keyslot with the
> same passphrase - which happens to use the best parameters by default
> (argon2id in this case) and then going back and deleting the legacy keyslot:

Actually luksConvertKey command works similar to process you just 
described. With only exception that it replaces the keyslot in-place.


More information about the Whonix-devel mailing list