LUKS

Test LUKS passphrase on specific key slot, this is an update to the how to test LUKS passphrase blog post as I included debug information.

Enroll a recovery key, which is a randomly generated, easy to type, high-entropy passphrase.

Enroll TPM2 token to LUKS2 encrypted volumes through systemd.

Discard unused blocks on an encrypted filesystem.

Add an encrypted hard disk to an existing Ubuntu system.

Perform a dictionary attack on the forgotten LUKS passphrase to access the encrypted device.

Learn how to erase the LUKS header on a specific device.

Discover two distinct and easily scriptable methods and combine features from both of these to locate and identify LUKS devices.

Learn how to test LUKS passphrase on a specific device.

Determine maximum LUKS key file size or maximum interactive passphrase length.

Learn how to create and assign binary key instead of passphrase to LUKS key-slot on a specific device.

Learn how to non-interactively manage LUKS passphrases on a specific device using files or a named pipe.

Learn how to interactively manage LUKS passphrases on a specific device.

Learn how to erase every defined LUKS key slot on a specific device.

Learn how to create LUKS header backup and restore it in case of emergency.

Encrypt portable external hard drive using Linux Unified Key Setup to protect data in transit.

Some time ago, I have recovered an old hard drive only to learn that it contained encrypted LVM logical volume.