25 Aug
2021
25 Aug
'21
15:27
On Wed, 2021-08-25 at 14:23 +0200, Ludwig Nussel wrote:
LUKS1 vs LUKS2 is mostly about the header format. You can convert from one to the other. See man cryptsetup, convert subcommand.
Yeah, we'd discussed that above. I guess the "convert" command only changes the header format without touching the actual data, right? In that case it'd be sufficient to backup the header before the operation.
For data partitions you can safely use LUKS2. No extra hacks needed actually, it's supported by cryptsetup since 15.0 already.
Well, I was looking into full-disk encryption. Thanks anyway. Martin