From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <guilhem@fripost.org>
Received: from outgoing.fripost.org (giraff.fripost.org [193.234.15.44])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by mail.server123.net (Postfix) with ESMTPS
 for <dm-crypt@saout.de>; Fri,  7 Jun 2019 12:52:23 +0200 (CEST)
Date: Fri, 7 Jun 2019 12:52:09 +0200
From: Guilhem Moulin <guilhem@fripost.org>
Message-ID: <20190607105209.GA5716@fripost.org>
References: <CAF9Mo3JjqorX2q+-FneK9CKdYkaSHUSuiNwG=ywZnCXK8fX9SA@mail.gmail.com>
 <20190522124652.GA1205@tansi.org>
 <CAF9Mo3JhQ1AQ5-0a4o_EYou5mOGzW1VZEOC7mYqmVVUMGBiqcQ@mail.gmail.com>
 <20190522171614.GA23632@fripost.org>
 <CAF9Mo3L81nw5dSiwyKHrkDOdC8ONmh6VsphEFJTXdZazsM0LvA@mail.gmail.com>
 <ff5dbe73-fe02-fb17-ef7a-9ab74441f2f0@redhat.com>
 <CAF9Mo3KUNhvamN3111iJy+JoY9vWVz8c66TrohwR6S8YuOM31g@mail.gmail.com>
 <20190529134345.GA3251@fripost.org>
 <CAF9Mo3+KwchO_e0YF9zr+v9=Gq1J_73ya0anvDYWVRxxDNuh8A@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature"; boundary="FL5UXtIhxfXey3p5"
Content-Disposition: inline
In-Reply-To: <CAF9Mo3+KwchO_e0YF9zr+v9=Gq1J_73ya0anvDYWVRxxDNuh8A@mail.gmail.com>
Subject: Re: [dm-crypt] LUKS + dm-crypt Debian/Ubuntu expanding encrypted
 root LV onto 2nd disk
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <https://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <https://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <https://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: Dominic Raferd <dominic@timedicer.co.uk>
Cc: dm-crypt@saout.de


--FL5UXtIhxfXey3p5
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

On Fri, 07 Jun 2019 at 09:56:52 +0100, Dominic Raferd wrote:
> On Wed, 29 May 2019 at 14:44, Guilhem Moulin <guilhem@fripost.org> wrote:
>> I guess that if you want to stick to decrypt_derived your options are
>> to use `luksFormat --type luks1` (or `convert --type luks1`);
>=20
> unfortunately this doesn't work. I try it (booting from SystemRescueCD):
>=20
> # cryptsetup convert /dev/sda5 --type luks1
> [=E2=80=A6]=20
> Cannot convert to LUKS1 format - keyslot 0 is not LUKS1 compatible.

For LUKS1, the only supported PBKDF algorithm is PBKDF2 (while for LUKS2
it defaults to argon2i), you therefore need to remove existing
non-PBKDF2 keyslots with `cryptsetup luksKillSlot`, or convert them with
`cryptsetup luksConvertKey --pbkdf pbkdf2`.

Cheers,
--=20
Guilhem.

--FL5UXtIhxfXey3p5
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=nih/
-----END PGP SIGNATURE-----

--FL5UXtIhxfXey3p5--