From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from v6.tansi.org (ns.km31936-01.keymachine.de [87.118.116.4]) by mail.server123.net (Postfix) with ESMTP for ; Fri, 30 Oct 2015 00:32:44 +0100 (CET) Received: from gatewagner.dyndns.org (77-57-54-224.dclient.hispeed.ch [77.57.54.224]) by v6.tansi.org (Postfix) with ESMTPA id 3D82320DC13E for ; Fri, 30 Oct 2015 00:32:44 +0100 (CET) Date: Fri, 30 Oct 2015 00:32:43 +0100 From: Arno Wagner Message-ID: <20151029233243.GA17172@tansi.org> References: <56329DAA.7020403@fosiao.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <56329DAA.7020403@fosiao.com> Subject: Re: [dm-crypt] cryptsetup from aes-cbc to aes-xts List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de You do not need to format the disk, you just need to luksFormat the LUKS container (i.e. full disk, partition or loop-file). Your LUKS container here is /dev/sda1 and you are luks(re)Formatting it with the lines you give. Regards, Arno On Thu, Oct 29, 2015 at 23:28:58 CET, xxiao8 wrote: > I had a one liner change in my cryptsetup script (see below), as > long as the key-file is the same, I can keep using the content on > the hard-drive, which is a surprise to me. Doesn't > switch-to-aes-xts-plain64 mandate a reformat of the hard drive? am I > missing something? > > > Changing from > cryptsetup -v -c "aes-cbc-essiv:sha256" --key-size 256 --key-file > /etc/keys/sda1.key luksFormat --use-random /dev/sda1 > > to > cryptsetup -v -c "aes-xts-plain64" --hash sha256 --key-size 512 > --key-file /etc/keys/sda1.key luksFormat --use-random /dev/sda1 > > Thanks for your help, > > xxiao > > _______________________________________________ > dm-crypt mailing list > dm-crypt@saout.de > http://www.saout.de/mailman/listinfo/dm-crypt -- Arno Wagner, Dr. sc. techn., Dipl. Inform., Email: arno@wagner.name GnuPG: ID: CB5D9718 FP: 12D6 C03B 1B30 33BB 13CF B774 E35C 5FA1 CB5D 9718 ---- A good decision is based on knowledge and not on numbers. -- Plato If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier