[dm-crypt] Last key removed

[dm-crypt] Last key removed

[Sebastián Treu]

[-- Attachment #1: Type: text/plain, Size: 538 bytes --]

Hi all,

After reading the message "This is the last keyslot. Device will become
unusable after purging this key." I was aware of what I was doing thinking
that I could add a new key later.

I really don't know what my brain was thinking or how my logic was applying
to. I think I though: "ok, with no key it will be unusable until I add a
new one..."

Now I realized that was a stupid thing of mine thinking that way. To keep
short: Is my data lost, right?

-- 
If you want freedom, compile the source.

Sebastián Treu

[-- Attachment #2: Type: text/html, Size: 725 bytes --]

Re: [dm-crypt] Last key removed

[Ralf Ramsauer]

On 12/08/2014 11:29 PM, Sebastián Treu wrote:
> Now I realized that was a stupid thing of mine thinking that way. To
> keep short: Is my data lost, right?
To make it short:

Unless you don't have a backup of your header - Yes.

cheers
  Ralf

Re: [dm-crypt] Last key removed

[Hannes Erven]

Hi,


 > Now I realized that was a stupid thing of mine thinking that way. To
> keep short: Is my data lost, right?

is the device still luksOpen?

If yes, you could try to grab the master encryption key from the running 
system. I think

# dmsetup table --showkeys DEVICENAME

should do the trick. You still won't be able to use LUKS to open that 
device, but at least you can use dmsetup directly to decrypt and access 
your device.


Good luck!

	-hannes

Re: [dm-crypt] Last key removed

[Arno Wagner]

Actually, with the master key, you can set a new
passphrase. See FAQ Item 6.10.

Arno

On Tue, Dec 09, 2014 at 09:36:40 CET, Hannes Erven wrote:
> Hi,
> 
> 
> > Now I realized that was a stupid thing of mine thinking that way. To
> >keep short: Is my data lost, right?
> 
> is the device still luksOpen?
> 
> If yes, you could try to grab the master encryption key from the
> running system. I think
> 
> # dmsetup table --showkeys DEVICENAME
> 
> should do the trick. You still won't be able to use LUKS to open
> that device, but at least you can use dmsetup directly to decrypt
> and access your device.
> 
> 
> Good luck!
> 
> 	-hannes
> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt

-- 
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: arno@wagner.name
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -- Plato

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier