From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <wagner@tansi.org>
Received: from tansi.org (ns.km10532-04.keymachine.de [87.118.102.195])
	by mail.saout.de (Postfix) with ESMTP
	for <dm-crypt@saout.de>; Tue,  3 Aug 2010 13:18:40 +0200 (CEST)
Received: from gatewagner.dyndns.org (84-74-164-239.dclient.hispeed.ch
	[84.74.164.239]) by tansi.org (Postfix) with ESMTPA id 4A9382128007
	for <dm-crypt@saout.de>; Tue,  3 Aug 2010 13:18:40 +0200 (CEST)
Date: Tue, 3 Aug 2010 13:18:39 +0200
From: Arno Wagner <arno@wagner.name>
Message-ID: <20100803111839.GA9916@tansi.org>
References: <AANLkTi=6RytcDRKMUtvajjjT3z9TB_u6QTSS1Xo7dV0U@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <AANLkTi=6RytcDRKMUtvajjjT3z9TB_u6QTSS1Xo7dV0U@mail.gmail.com>
Subject: Re: [dm-crypt] LUKS header size
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
	<mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
	<mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

Look into the FAQ under "What does the on-disk structure of LUKS look 
like?"

Arno

On Tue, Aug 03, 2010 at 04:41:33PM +0600, Alexander Konovalenko wrote:
> On Mon, Aug 2, 2010 at 05:01, Arno Wagner <arno@wagner.name> wrote:
> >
> > sorry, but you will have wiped the salt in the header, which
> > makes recovery impossible. You will also have wiped all keys
> > (they take about the first 8.5MB), which again does make recovery
> > impossible. In fact, any recovery from this would mean that
> > LUKS is badly broken security-wise.
> 
> 8.5 MB? I thought a LUKS header usually takes only 2056 512-byte
> sectors, which is slightly more than 1 MiB. I wonder where does that
> belief come from. Almost all LUKS partitions I've been dealing with
> have been created by Ubuntu's debian-installer. So debian-installer's
> default must be the culprit.
> 
> What's the recommended LUKS header size?
> 
>  -- Alexander
> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt
> 

-- 
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@wagner.name 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier