From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gmazyland@gmail.com>
Received: from mail-ee0-x233.google.com (mail-ee0-x233.google.com
 [IPv6:2a00:1450:4013:c00::233])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (No client certificate requested)
 by mail.saout.de (Postfix) with ESMTPS
 for <dm-crypt@saout.de>; Fri, 14 Mar 2014 17:58:08 +0100 (CET)
Received: by mail-ee0-f51.google.com with SMTP id c13so1604016eek.24
 for <dm-crypt@saout.de>; Fri, 14 Mar 2014 09:58:07 -0700 (PDT)
Message-ID: <5323351A.8080408@gmail.com>
Date: Fri, 14 Mar 2014 17:58:02 +0100
From: Milan Broz <gmazyland@gmail.com>
MIME-Version: 1.0
References: <mailman.0.1394805225.14707.dm-crypt@saout.de>
 <53230C34.1030901@ensslin.cc>
 <CAFnMBaSqvecOu6j-3ONKg2W=Ge+8TfdQwZQwfKtde=a+i-JrUg@mail.gmail.com>
In-Reply-To: <CAFnMBaSqvecOu6j-3ONKg2W=Ge+8TfdQwZQwfKtde=a+i-JrUg@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: Re: [dm-crypt] Loading the LUKS header from an external source?
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt <dm-crypt@saout.de>
Cc: michael@ensslin.cc

On 03/14/2014 03:30 PM, .. ink .. wrote:
> On Fri, Mar 14, 2014 at 10:03 AM, Michael En=DFlin <michael@ensslin.cc <m=
ailto:michael@ensslin.cc>> wrote:
>=20
>     Hi,
>=20
>     is there a way of loading the LUKS header from an external file, so t=
hat
>     the first sector of the hard disk will actually be the first sector of
>     the encrypted partition, and the whole disk will look like pure rando=
m data?
>=20
>=20
>  yes,look at "--header" option in cryptsetup's documentation.
>=20
> From the terminal,type "man cryptsetup" and then look for "--header" entr=
y in the "OPTIONS" section.

Exactly and using external header also allows to set data offset to start o=
f the disk,
exactly what you want.

All is also described in release notes for 1.4 http://code.google.com/p/cry=
ptsetup/wiki/Cryptsetup140

Milan