From 01aee89e941e7f297fa8804da049e74b93ec34f4 Mon Sep 17 00:00:00 2001 From: tiyn Date: Thu, 14 Jul 2022 15:10:19 +0200 Subject: [PATCH] dm-crypt: added manual usb key decryption --- wiki/linux/dm-crypt.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/wiki/linux/dm-crypt.md b/wiki/linux/dm-crypt.md index 35452f8..bc9858d 100644 --- a/wiki/linux/dm-crypt.md +++ b/wiki/linux/dm-crypt.md @@ -93,3 +93,14 @@ Finally run: Reboot the system with `reboot`. Make sure the USB key for decryption is plugged in. If so the encrypted partition should be decrypted automatically. + +## Unlock an encrypted device with the USB key created in the previous section + +With the following command an encrypted device can be decrypted with the usb +stick created in the previous section. +Make sure to edit `--key-file`, `--keyfile-offset` and `--keyfile-size` to +match the settings used in the creation of the USB key. + +```sh +cryptsetup luksOpen /dev/sda2 crypt-volume --key-file=/dev/usbkey --keyfile-offset=14848 --keyfile-size=2048 +```