H5\ ADž = =
L= M H5 L&tH5 L%^ H$ LH. D$ HH$ H5 L H $ H|$0L!ADžd = =8 = t)= 7
H5} H|$0$ADžX
HT$81L2LADž7 us= uj1 H5Lw H|$XL H1 $ H5-~ 1d H|$X H"fH|$X `#t$Ld9 =4 LT$0D$, =4
LT$=/ LT$ =
/ = L
=Q D g HT$@Ht$HAR1SPQH
0 [H ADž =5 =, ~ T$,H= Ht$P
H\$PADž H|$0H`aADž% H|$8 = HcD$,=x HD$4 ! HILLH$ H
3 PLL$(H|$@
AXAYANjO LT$0t E E L:PADž =| LL$@LD$H/ HL$5e HH|$0p ADž 1 H5| 2 1D H1%=' LT$0t8= u/H$ Ht"H5`} LT$I"LT$ @ H $H|$HHB HD$H4 LHD$HHHD$@H. D HM H 9H5x H! =& B =& ` =U E = =S = : HD$`HD$ f 8= 1 H5z 1 H5 r I LH|bD A f D HHAH$ dH+%( H D[]A\A]A^A_ D = =h H H5X H|$0"ADž H5p 11 1H1#LT$0mf D H L L D$ h =
21 H5q L 1H1,# 1LT$0LH|$HwHof. $@ null$D @ H5z Ly H5|z Lb H5oz LK ; H5dz L4 d H5Yz L fo D$ H$ )$ f)$ ! @ L LT$0Xf 11Hy !=` H=W 1VAă =/ m L%& H5y 1 1AHL1y!S @ H5o 11 1AH1D!LT$0!f. 1Lf L1LT$0[ @ t$ HILLk. t$ LH|$@^_A}1 b =/ m L-& 1 H5x 1 HL1 Dg KfAL D LT$01A5f D fo D$ H$ )$ f)$ LFADžD H|$0 0 @ fo@ D$ H$ )$ f)$ H5d 1 1H1| LT$0EPf 1LT$0A0f H
H5cp H=Ƌ QD #f D fo D$@ H$ )$ f)$ LE H5k 1 1H1 s H5k պ H5Xk Ǻ H5k f= HDŽ$ )$ )$ )$ C $ $ $ H$ L$` LT$HLHH$ M@ HLu @ 1L$ HL繀 UI 1Lu ZYLT$Z 11LA HLT$LT$A9LT$}1 HE11H$ 1LA PH?Pj H|$8l H|$8H HA 1)Zx H5pl 1LT$<11H1 LT$H
} t H5m H=zT H
| l H5m H=#i H
| k H5m H=dO H
| s H5m H=]T xH
| r H5km H= f YH
j| H5Lm H= :H
K| H5-m H= 1 H5k 3L 1H1H
{ H5l H=e H
{ H5l H=! H
{ H5l H=Bi H
{ H5l H=S nH
{ H5al H=i OH
`{ H5Bl H=i 0H
A{ H5#l H=W H
"{ H5l H=7X H
{ H5k H=W H
z H5k H=yW H
z H5k H="X H
z H5k H=X vH
z H5ik H=̆ WLT$0AH
Xz H5:k H=eX (H
!z , H5k H= i H
z H5j H=OQ f. 111 =wH H @ 1ff. fAWAVAUATUSH H $ H f dH%( H$ 1H)D$pH$ = D$ HD$ )$ )$ )$ H)$ HD$h D$0 D$8DD$HD$X$ HR H?=n D$4 Ha H2{ HHD= HD$8u H Hf^. V. fH$ dH+%( Hĸ []A\A]A^A_
Ht$LHT$: uQA> tKA} "tDIGif D =wH H
Ht$LmHT$: tH\$HI @ A H|$ IGf
Ht$LHT$: uA> tHH =U HL H= @ HHc> f D =
P w P|H\$H H5 Q I = >H\$H H5w I D H$ dH+%( H|$Hĸ []A\A]A^A_ff D =m F e bz =U L%L H5hW L H5XW L nH5HW LWH\$H H5w I1dHL Hg= H= H\$Hx H5|v I = H= Ht ?-uB ufI
fHt H{I 1Ld$ H5Ct FIٹ LI 1H\$Hj L HHd HHHHHHHc 11r l D HHA~iKA~B@ H HDH
H5>Q H=I ,H\$H H5st IH
T H5P H=7 H\$H_ H5 t IH
H5P H=s H
H5P H=1 H
֚ H5P H=. nH
H5aP H=? OH
H5BP H=h 0H
y H5#P H=; H
Z H5P H=; fAWAVAUATUSH H $ H H $ HX La H|$IIH$@ HI HA dH%( H$P! 1 H@H H@0% A 1V "H^_HH @ HH x.tx.L`uA|$.tA} L$@ HJa HMP LU L1ZY= HL 17ADž\ 1H5;Z 1Aƅ/ H$ H
u$ % = tNDA D HhH$H! dH+%( ~ HX! D[]A\A]A^A_ @ LD$ 1ɺ DLLD$L9DHD$HT$1Lt$HLHHD ?H|$LH_u[LH_ 1e1H5T 1DAąx+Hމu$ % = tcDfD A D E1 K AA܃DDA1ɺ LDE8DHDH~AD L1H'_ 1A xcnff. AVfAUIATUH1SHH@ dH%( H$8 Hdm-uuid-)D$)D$ )D$0)D$@)D$P)D$`)D$pH$HT$HDŽ$ Ƅ$ RfDŽ$ Ƅ$ )$ )$ H: H$ HILE H$ It$%H @ <-tHHH9uꀼ$ H=^ H H
-^ H ILd$HIR LL] P 1Q L- LH 11LH o H$ Hl $ % = ` u~H$ LLH$8 dH+%( umH@ []A\A]A^ H~O H
L] HH H dO H
1HFn 1:땸뎸뇸f AWAVIAUIATIHdH%( HD$Hv! L8LLHLmAą A H5n 1L 1H1= 1 H5n HL H16 1 H5bN H<$1H]6H<$EAHD$dH+%( HDA\A]A^A_f D A11LH7m A} tt=' u1 H57m ML1H11 @ 1H5Om L11H1y @ AKA@ H5[ 1AL 1H1-# ATUH H $ Hhf dH%( H$X 1H= H|$`H$ )D$P)D$)D$ )D$0H)D$@ H HZY HHD= HD$b H HdN HHD=! HD$ H H =L HD$0 H> 1D$H H HD$8j=K =N < c = L
8 0 = D LT$HUH
j 1PRLOH Aąxi= = H5 = HD HHD$PEj j HL$(HT$ UH|$ H AH$X dH+%( L Hh D]A\ H Ld$PHLH0Lgu1^H<$A[H
r I H5 F H=?2 H
S I H5E H=1 H
4 I H5E H=1 H
J H5E H="1 H
D H5E H=4 ~H
א C H5qE H=] _H
B H5RE H=]] @H
A H53E H=\ !H
u Y H5E H=b+ H
V W H5D H=j ff. ATUSH H $ H`1fdH%( H$X 1HL- HD$HD$ HD$ D$(HD$H T$D$8u$= W H H
U HHDHU =n HT$ H` H
J HHDHT$ HHHIH =t HD$( Hf H = HD$0 H HH HD$8H H HH = tL$H=I 1f=Y =\ J = L
F F = D IHt$UH
j 1PRLLH Aąxu= = - H5 H = HD AHHD$Pj j HL$ HT$(WH AH|$H$X dH+%( Y H` D[]A\ÃL$Hf D H H\$PHHH0HAąWuH Hh 1H11/H
" H5A H=Y H5h 1A 1H1+H
ʌ % H5A H=1 H
4 H5A H=, sH
3 H5fA H=- TH
m # H5GA H=RY 5H
N & H5(A H={Y H
* 3 H5A H=7- H
3 H5@ H=, H
E H5@ H=' H
͋ ? H5@ H=f D AVIAUIATA US1 LLH)0Ht:D EuBHxHHuQH~{ID 8
tb[D]A\A]A^f D K8u
tA[]DA\A]A^f. A|
tIH hf D D[]A\A]A^ADE[]A\A]DA^ff. USH=+ uT= - t DH[] @ H5R A@ EuH[]H
T H5,? H=g f. AWAVAUI ATIH=Q USHH8 dH%( H$( 1.U Lt$ ljAL l$ HD$PfoD$ foL$0foT$@H$ D$X)D$`$ d$l)L$p)$ Mt&LA|$ LH?H HT$` Ht\L$ 1 LHHc1ҍ}I LH\$HD$ H1J Ġ LD$| L*L AHEtctXH$( dH+%( uyH8 D[]A\A]A^A_Lt$ 1AL;uD$ 1 |$ H5
Q +L Ai U1Hc H dH%( H$ 1HHT$1HH 1HH H$/1ҿ H 1(H$ dH+%( u HĠ ]8 H ATHI1UHSHHH5P H5A HtH5A Hu+Hcipher_nAD$ull I$1ecb []A\ 1LH5>P Hu?Hcbc-plaiHn fC1[]A\fH5A H!A1Et[]A\f땸 AWAVAUATUSH H $ H H# fdH%( H$ 1H)D$@HH?)$ )$ HD$0 D$D)$ )$ )D$P)D$`)D$pHu*= _ Hv H
GL HHD
f D HLL = HD$H
H H
BA HHDHD$PHHHHH = HD$X
H H = HD$`Q
H H =F HD$hH$ HD$ptD$x = =f d " H$ H=J H$ HHT$HD$ hADž =" W L%9 $ LADžx1 E11E1DHwG^ uFAH$ dH+%( " H D[]A\A]A^A_ AAE9uB3AW9 =( $
= =r u
=1 s H|$1 $Hc$VLHD$HD$8ADž?Lc LHD$HH~ Et$KTm H@HT HH9u=v ) n 1 H5j JL$ Aٹ I 1 L = D LHLH|$l = t)= U $H= Ht$0?: E AE1L,$D$,EH\$A +AŅ HLKLjHL$HHT$@ZYAŅ H5< 1,D 1H1DkDDHAŅc IHL9$$ H; tEDHAP{AŅ( HLKLjHL$HHT$@^_ADž 1 H5; Ey1D H1H|$0 D{} DDHAŅ Dt$,7f L$x=D B HIH H5T; HEHtp1 H5h L%; 11HL1U= = LH H V H5: Ly= H HH$ HHD$ H HH$ HHD$Ƅ$ Ƅ$ D H H|$HD$0HH" LKLHL$8DHAŅF EL,$H|$0HD$E1L%g HXfIHM9 H{fEyx1Hu͋3Ht L11f. ED|$,1L|$L5Df L$ 8f. ALHLL\t HI9 1 LAٹ LI 1 $yD|$,H|$0$yED<$ @ H|$nf 1 H5 - 1H1 EL,$Eo= = F H5 H HcD$,HL$HHHT$HIH@HHHDHRt$ t$8H,H|$PH A H $ =9 SEn1 f D = HI9i H`u = t1:D|$,H/ H$ HHH0yHADžD= uH HX 1H1M1H
_|
H5i1 H=4I W H|$0f D A^A9R H5'c 1AJ 1H1 @ 1E11 @ H|$0$#D<$ H5b 1A 1H1H|$0J= b SH|$0ACL,$HAH
B{
H5L0 H=( :H
#{
H5-0 H=a H
z
H5 0 H=H H
z
H5/ H=U H
z
H5/ H= H H
z
H5/ H=/a H
xz
H5/ H=0C pH
Yz s
H5c/ H=FU QH
:z 6
H5D/ H= 2H
y H5%/ H=x H
y H5/ H=Y AH
y H5. H=/ H
sy H5. H= ff. AUf ATUH dH%( H$ 1Hl$P= HD$ H)D$HD$@ )D$ )D$0H9 } D$Z D$@p = tg= u^=W Ll$ H|$AEX = K H|$HT$H5A( f D =q H L" H= Ll$HIDJ LLH Aą H$ dH+%( 2 H D]A\A]f = = L R =Ķ H9 ] Ll$H5 L? = L% H5 1 1HL1AVH|$ ' H|$11Aą = H= H 1 H5 IOL 1H1f H|$HH#H5+ nH|$HT$ A\.D$ H5\_ u8 H|$H D$d =J
H5_ 1 1H1 H|$H57+ HQ H5s^ 1A> 1H1r LHAH|$H3 D$dtM H5^ 1A 1H1sf D H H8Of = t^ H5^ 1A 1H1 H5l] 1A_ 1H1H|$A H
t
H5) H=' H
lt
H5) H=9E H
Mt
H5) H=O H
.t
H5) H=D H
t
H5y) H=\O g= f=ӽ ]H|$ATH
s
H5.) H=D HH /sys/dev/block/%d:%d/loop/backing_file Cannot open keyfile %s for write. No token could be unlocked with this PIN. Token %i cannot unlock assigned keyslot(s) (wrong keyslot passphrase). Token (type %s) cannot unlock assigned keyslot(s) (wrong keyslot passphrase). Token %i requires additional missing resource. Token (type %s) requires additional missing resource. No usable token (type %s) is available. No key available with this passphrase. No usable keyslot is available. PBKDF benchmark: memory cost = %u, iterations = %u, threads = %u (took %u ms) Finished, time %02llu:%02llu.%03llu, %4llu MiB written, speed %5.1f %sB/s
Progress: %5.1f%%, ETA %02llu:%02llu, %4llu MiB written, speed %5.1f %sB/s%s Failed to initialize device signature probes. Device %s already contains a '%s' partition signature. WARNING: Device %s already contains a '%s' partition signature.
Device %s already contains a '%s' superblock signature. WARNING: Device %s already contains a '%s' superblock signature.
Internal tools_detect_signatures() error. Device %s is in use. Cannot proceed with format operation. Failed to open file %s in read/write mode. Existing '%s' partition signature on device %s will be wiped. Existing '%s' superblock signature on device %s will be wiped. Failed to wipe device signature. Failed to probe device %s for a signature. tool_core_args[(OPT_KEYSLOT_KEY_SIZE_ID)].type == CRYPT_ARG_UINT32 tool_core_args[(OPT_KEYSLOT_CIPHER_ID)].type == CRYPT_ARG_STRING Keyslot encryption parameters can be set only for LUKS2 device. Device %s is still active and scheduled for deferred removal.
PBKDF2-%-9s %7u iterations per second for %zu-bit key
tool_core_args[(OPT_ITER_TIME_ID)].type == CRYPT_ARG_UINT32 tool_core_args[(OPT_PBKDF_MEMORY_ID)].type == CRYPT_ARG_UINT32 tool_core_args[(OPT_PBKDF_PARALLEL_ID)].type == CRYPT_ARG_UINT32 0123456789abcdef0123456789abcdef %-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)
Result of benchmark is not reliable. tool_core_args[(OPT_KEY_SIZE_ID)].type == CRYPT_ARG_UINT32 # Tests are approximate using memory only (no storage IO).
tool_core_args[(OPT_HASH_ID)].type == CRYPT_ARG_STRING No known cipher specification pattern detected. #%*s Algorithm | Key | Encryption | Decryption
%*s-%s %9db %10.1f MiB/s %10.1f MiB/s
Cipher %s (with %i bits key) is not available. Required kernel crypto interface not available. Ensure you have algif_skcipher kernel module loaded. # Algorithm | Key | Encryption | Decryption
%15s %9zub %10.1f MiB/s %10.1f MiB/s
tool_core_args[(OPT_PBKDF_FORCE_ITERATIONS_ID)].type == CRYPT_ARG_UINT32 %slocking interruption on signal. %s
Are you sure? (Type 'yes' in capital letters): Error reading response from terminal. %s is not active %s device name. Option --header-backup-file is required. tool_core_args[(OPT_HEADER_BACKUP_FILE_ID)].type == CRYPT_ARG_STRING Invalid LUKS type, only luks1 and luks2 are supported. Device %s is not a valid LUKS device. This operation will convert %s to %s format.
Operation aborted, device was NOT converted.
Option --priority, --label or --subsystem is missing. tool_core_args[(OPT_PRIORITY_ID)].type == CRYPT_ARG_STRING tool_core_args[(OPT_KEY_SLOT_ID)].type == CRYPT_ARG_INT32 tool_core_args[(OPT_SUBSYSTEM_ID)].type == CRYPT_ARG_STRING tool_core_args[(OPT_LABEL_ID)].type == CRYPT_ARG_STRING tool_core_args[(OPT_KEY_DESCRIPTION_ID)].type == CRYPT_ARG_STRING tool_core_args[(OPT_TOKEN_ID_ID)].type == CRYPT_ARG_INT32 Failed to add luks2-keyring token %d. Failed to assign token %d to keyslot %d. tool_core_args[(OPT_JSON_FILE_ID)].type == CRYPT_ARG_STRING STDIN descriptor JSON read requested. File descriptor JSON read requested. Failed to open file %s in read-only mode. Provide valid LUKS2 token JSON:
Failed to import token from file. Failed to get token %d for export. STDOUT descriptor JSON write requested. File descriptor JSON write requested. Failed to open file %s in write mode. Cannot read %d bytes from keyfile %s. Cannot use offset with terminal input. Interactive passphrase entry requested. Out of memory while reading passphrase. Error reading passphrase from terminal. STDIN descriptor passphrase entry requested. File descriptor passphrase entry requested. The header dump with volume key is sensitive information
that allows access to encrypted partition without a passphrase.
This dump should be stored encrypted in a safe place. tool_core_args[(OPT_TIMEOUT_ID)].type == CRYPT_ARG_UINT32 tool_core_args[(OPT_KEY_FILE_ID)].type == CRYPT_ARG_STRING tool_core_args[(OPT_KEYFILE_SIZE_ID)].type == CRYPT_ARG_UINT32 tool_core_args[(OPT_KEYFILE_OFFSET_ID)].type == CRYPT_ARG_UINT64 tool_core_args[(OPT_MASTER_KEY_FILE_ID)].type == CRYPT_ARG_STRING BITLK header information for %s
Only one device argument for isLuks operation is supported. tool_core_args[(OPT_UUID_ID)].type == CRYPT_ARG_STRING LUKS header information for %s
Keyslot %d does not contain unbound key. The header dump with unbound key is sensitive information.
This dump should be stored encrypted in a safe place. This operation will erase all keyslots on device %s.
Device will become unusable after this operation. Operation aborted, keyslots were NOT wiped.
Can't do passphrase verification on non-tty inputs. token_id >= 0 || token_id == CRYPT_ANY_TOKEN tool_core_args[(OPT_TOKEN_TYPE_ID)].type == CRYPT_ARG_STRING tool_core_args[(OPT_DEVICE_SIZE_ID)].type == CRYPT_ARG_UINT64 tool_core_args[(OPT_SIZE_ID)].type == CRYPT_ARG_UINT64 Resize of active device requires volume key in keyring but --disable-keyring option is set. Really try to repair LUKS device header? Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)
and continue (upgrade metadata) only if you acknowledge the operation as genuine. Enter passphrase to protect and uppgrade reencryption metadata: Really proceed with LUKS2 reencryption recovery? Enter passphrase to verify reencryption metadata digest: Enter passphrase for reencryption recovery: No known problems detected for LUKS header. Keyslot %d is selected for deletion. Operation aborted, the keyslot was NOT wiped.
Enter any remaining passphrase: This is the last keyslot. Device will become unusable after purging this key. Failed read from input, ignoring passphrase. Enter passphrase to be deleted: tool_core_args[(OPT_KEY_SLOT_ID)].set == false && tool_core_args[(OPT_KEY_SLOT_ID)].type == CRYPT_ARG_INT32 Failed to set pbkdf parameters. tool_core_args[(OPT_NEW_KEYFILE_SIZE_ID)].type == CRYPT_ARG_UINT32 tool_core_args[(OPT_NEW_KEYFILE_OFFSET_ID)].type == CRYPT_ARG_UINT64 Enter new passphrase for key slot: Cannot determine volume key size for LUKS without keyslots, please use --key-size option. Enter any existing passphrase: Enter passphrase to be changed: Enter passphrase for keyslot to be converted: tool_core_args[(OPT_TRIES_ID)].type == CRYPT_ARG_UINT32 Invalid PIM value: parse error. Invalid PIM value: outside of range. No device header detected with this passphrase. tool_core_args[(OPT_VERACRYPT_PIM_ID)].type == CRYPT_ARG_UINT32 Header dump with volume key is sensitive information
which allows access to encrypted partition without passphrase.
This dump should be always stored encrypted on safe place. TCRYPT header information for %s
%s is not active LUKS device name or header is missing. %s is not cryptsetup managed device. Refresh is not supported for device type %s Reduced data offset is allowed only for detached LUKS header. Device activated but cannot make flags persistent. tool_core_args[(OPT_SKIP_ID)].type == CRYPT_ARG_UINT64 tool_core_args[(OPT_SECTOR_SIZE_ID)].type == CRYPT_ARG_UINT32 WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.
WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.
Detected device signature(s) on %s. Proceeding further may damage existing data. Option --key-file is required. Device %s is not a valid BITLK device. Cannot determine volume key size for BITLK, please use --key-size option. Unrecognized metadata device type %s. Command requires device and mapped name as arguments. Keyslot %d uses cipher_null. Replacing with default encryption in new keyslot. tool_core_args[(OPT_ALIGN_PAYLOAD_ID)].type == CRYPT_ARG_UINT32 Unsupported encryption sector size. Integrity option can be used only for LUKS2 format. Unsupported LUKS2 metadata size options. Inline crypto engine support can only be used with LUKS2. Header file does not exist, do you want to create it? tool_core_args[(OPT_INTEGRITY_ID)].type == CRYPT_ARG_STRING No known integrity specification pattern detected. Cannot use %s as on-disk header. tool_core_args[(OPT_LUKS2_KEYSLOTS_SIZE_ID)].type == CRYPT_ARG_UINT64 tool_core_args[(OPT_LUKS2_METADATA_SIZE_ID)].type == CRYPT_ARG_UINT64 This will overwrite data on %s irrevocably. tool_core_args[(OPT_PROGRESS_FREQUENCY_ID)].type == CRYPT_ARG_UINT32 Wiping device to initialize integrity checksum.
You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).
Cannot deactivate temporary device %s. # %s Cannot write to keyfile %s. Token %i requires PIN. Token (type %s) requires PIN. No usable token is available. Benchmark interrupted. Gi Mi Ki [2K
Wipe interrupted.
Reencryption interrupted. PTTYPE Failed to stat device %s. LUKS2 src/cryptsetup.c and is in use n/a dm-crypt (suspended) readonly read/write no_read_workqueue submit_from_crypt_cpus same_cpu_crypt discards %s/%s is inactive.
%s/%s is active%s.
type: %s
reencryption: in-progress
cipher: %s-%s
keysize: %d bits
key location: %s
integrity: %s
integrity keysize: %d bits
device: %s
loop: %s
sector size: %d
offset: %lu sectors
size: %lu sectors
skipped: %lu sectors
mode: %s%s
flags: %s%s%s%s%s
pbkdf2 0123456789abcdef foobarfo PBKDF2-%-9s N/A
%-10s N/A
cbc %s-%s N/A %15s %9zub %17s %17s
B Unb
WARNING!
========
Query interrupted on signal. YES
UUID= LUKS LUKS1 luks2 luks1 Device is already %s type. normal prefer ignore add Token %d is invalid. Token %d in use. Keyslot %d is not active. remove Token %d is not in use. Token %i removed. import Failed to read JSON file.
Read interrupted. export
Write interrupted. Failed to write JSON file. Token %i created. Cannot read keyfile %s. Enter passphrase: Enter passphrase for %s: Verify passphrase: Passphrases do not match. BITLK Key slot %i unlocked. Cipher name: %s
Cipher mode: %s
UUID: %s
MK bits: %d
Key stored to file %s.
MK dump:
%02hhx %s: %s luks Operation aborted.
Payload offset: %d
UUID: %s
Keyslot: %d
Key bits: %d
Unbound Key: Key slot %i removed. tries >= 1 Enter token PIN: Enter token %d PIN: cipher_null Key slot %i created. Enter new passphrase: Enter VeraCrypt PIM: Invalid PIM value: 0. TCRYPT Cipher chain: %s
plain loopaes ripemd160 aes-cbc-essiv:sha256 /dev/stdin PLAIN LOOPAES tcrypt bitlk aes-xts-plain64 Creating header file. aead poly1305 none hmac-sha1 hmac-sha256 hmac-sha512 cmac-aes Cannot create header file %s. temporary-cryptsetup-%s %s/%s serpent twofish xts whirlpool argon2i argon2id active-name align-payload luksFormat allow-discards open allow-fallback batch-mode cancel-deferred close debug debug-json decrypt disable-external-tokens disable-keyring disable-locks disable-veracrypt dump-json-metadata dump-master-key force-password header header-backup-file hotzone-size reencrypt init-only inline-crypto-engine integrity integrity-legacy-padding integrity-no-journal integrity-no-wipe iter-time iv-large-sectors json-file key-description benchmark luksAddKey key-slot config luksChangeKey luksConvertKey luksDump token keyslot-cipher keyslot-key-size label luks2-keyslots-size luks2-metadata-size master-key-file new-keyfile-offset new-keyfile-size pbkdf-force-iterations pbkdf-memory pbkdf-parallel perf-no_read_workqueue perf-no_write_workqueue perf-same_cpu_crypt perf-submit_from_crypt_cpus persistent priority progress-frequency reduce-device-size refresh resilience resilience-hash resume-only sector-size serialize-memory-hard-pbkdf shared skip subsystem tcrypt-backup tcryptDump tcrypt-hidden tcrypt-system test-args test-passphrase timeout token-id token-only token-type tries unbound use-random use-urandom uuid luksUUID veracrypt-pim veracrypt-query-pim verbose verify-passphrase _token_add _token_remove _token_import _token_export action_token _config_priority _config_labels _get_device_type action_open_luks action_open_plain action_open_loopaes action_open_tcrypt action_open_bitlk action_luksRestore action_luksBackup action_luksResume action_luksSuspend luksDump_with_volume_key luksDump_with_unbound_key action_luksUUID action_luksConvertKey action_luksChangeKey luksAddUnboundKey action_luksAddKey action_luksRemoveKey uuid_or_device_header verify_keyslot action_luksKillSlot _wipe_data_device _luksFormat reencrypt_metadata_repair luks2_reencrypt_repair action_luksRepair set_pbkdf_params action_benchmark action_benchmark_kdf action_status action_resize bitlkDump_with_volume_key action_tcryptDump tcrypt_load _try_token_pin_unlock _set_tries_tty _set_keyslot_encryption_params ? .A A > 0A > @ P? 0C ? C @@ Y@ /dev/disk/by-uuihmac(sha1) hmac(sha256) hmac(sha512) cmac(aes) checksum LUKS2-temp-%s.new datashift cryptsetup 2.4.3
is one of:
%s %s - %s
compiled-in disabled /dev/urandom cryptsetup %s %s
Key slot is invalid. Device size overflow. /sys/dev/block/%u:%u/holders dm Found candidate device %s Found dm device %s CRYPT-%s%s%s%s Device %s is still in use. xts- /dev/tty erase /usr/share/locale Argument missing. create plainOpen luksOpen loopaesOpen tcryptOpen bitlkOpen bitlkDump plainClose luksClose loopaesClose tcryptClose bitlkClose luksErase luksConfig %s: requires %s as arguments luksKillSlot luksRemoveKey str != NULL # %s %s processing " "
Invalid token action. Running command %s. Command successful. out of memory unknown error Unknown action. wrong or missing parameters %31[^-]-%31s %31[^-] SECTORS Do not ask for confirmation Show debug messages msecs Key description Read the key from a file BITS INT Limits the read from keyfile LONG PBKDF memory cost limit kilobytes PBKDF parallel cost threads Create a readonly mapping The size of the device Token number (default: any) UUID for device to use help Show this help message Display brief usage Print package version Help options: open device as close device (remove mapping) resize resize active device show device status [--cipher ] benchmark cipher repair reencrypt LUKS2 device convert [] formats a LUKS device add key to LUKS device [] print UUID of LUKS device isLuks dump BITLK device information luksSuspend luksResume Resume suspended LUKS device luksHeaderBackup luksHeaderRestore Manipulate LUKS2 tokens tool_core_args[(OPT_RESILIENCE_ID)].type == CRYPT_ARG_STRING tool_core_args[(OPT_RESILIENCE_HASH_ID)].type == CRYPT_ARG_STRING tool_core_args[(OPT_HOTZONE_SIZE_ID)].type == CRYPT_ARG_UINT64 Encryption is supported only for LUKS2 format. Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size). Requested data offset must be less than or equal to half of --reduce-device-size parameter. Adjusting --reduce-device-size value to twice the --offset %lu (sectors).
Wrong LUKS UUID format provided. tool_core_args[(OPT_UUID_ID)].set == false && tool_core_args[(OPT_UUID_ID)].type == CRYPT_ARG_STRING Detected LUKS device on %s. Do you want to encrypt that LUKS device again? Temporary header file %s already exists. Aborting. Cannot create temporary header file %s. tool_core_args[(OPT_HEADER_ID)].set == false && tool_core_args[(OPT_HEADER_ID)].type == CRYPT_ARG_STRING tool_core_args[(OPT_OFFSET_ID)].set == false && tool_core_args[(OPT_OFFSET_ID)].type == CRYPT_ARG_UINT64 tool_core_args[(OPT_LUKS2_METADATA_SIZE_ID)].set == false && tool_core_args[(OPT_LUKS2_METADATA_SIZE_ID)].type == CRYPT_ARG_UINT64 tool_core_args[(OPT_LUKS2_KEYSLOTS_SIZE_ID)].set == false && tool_core_args[(OPT_LUKS2_KEYSLOTS_SIZE_ID)].type == CRYPT_ARG_UINT64 LUKS2 metadata size is larger than data shift value. Failed to place new header at head of device %s. %s/%s is now active and ready for online encryption.
You can also use old syntax aliases:
open: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen
close: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose
is the device to create under %s
is the encrypted device
is the LUKS key slot number to modify
optional key file for the new key for luksAddKey action
Default compiled-in metadata format is %s (for luksFormat action).
LUKS2 external token plugin support is %s.
LUKS2 external token plugin path: %s.
Default compiled-in key and passphrase parameters:
Maximum keyfile size: %dkB, Maximum interactive passphrase length %d (characters)
Default PBKDF for LUKS1: %s, iteration time: %d (ms)
Default PBKDF for LUKS2: %s
Iteration time: %d, Memory required: %dkB, Parallel threads: %d
Default compiled-in device cipher parameters:
loop-AES: %s, Key %d bits
plain: %s, Key: %d bits, Password hashing: %s
LUKS: %s, Key: %d bits, LUKS header hashing: %s, RNG: %s
LUKS: Default keysize with XTS mode (two internal keys) will be doubled.
Invalid size specification in parameter --%s. Device size must be multiple of 512 bytes sector. Invalid max reencryption hotzone size specification. Key size must be a multiple of 8 bits tool_core_args[(OPT_REDUCE_DEVICE_SIZE_ID)].type == CRYPT_ARG_UINT64 Maximum device reduce size is 1 GiB. Reduce size must be multiple of 512 bytes sector. Option --priority can be only ignore/normal/prefer. Requested UUID %s has invalid format. Looking for any dm device with prefix: %s Device %s has %d active holders. Auto-detected active dm device '%s' for data device %s.
Device %s is not a block device.
Failed to auto-detect device %s holders. Unable to decide if device %s is activated or not.
Are you sure you want to proceed with reencryption in offline mode?
It may lead to data corruption if the device is actually activated.
To run reencryption in online mode, use --active-name parameter instead.
tool_core_args[(OPT_ACTIVE_NAME_ID)].type == CRYPT_ARG_STRING LUKS2 decryption is supported with detached header device only (with data offset set to 0). Device %s seems unused. Proceeding with offline operation. Installing SIGINT/SIGTERM handler. [OPTION...] tool_core_args[(OPT_TYPE_ID)].type == CRYPT_ARG_STRING Options --refresh and --test-passphrase are mutually exclusive. Options --cancel-deferred and --deferred cannot be used at the same time. Option --shared is allowed only for open of plain device. Option --persistent is not allowed with --test-passphrase. Option --integrity-no-wipe can be used only for format action with integrity extension. Option --test-passphrase is allowed only for open of LUKS, TCRYPT and BITLK devices. Option --key-file takes precedence over specified key file argument. tool_core_args[(OPT_KEY_FILE_ID)].set == false && tool_core_args[(OPT_KEY_FILE_ID)].type == CRYPT_ARG_STRING Only one --key-file argument is allowed. Only one of --use-[u]random options is allowed. Options --align-payload and --offset cannot be combined. Option --skip is supported only for open of plain and loopaes devices. Option --offset with open action is only supported for plain and loopaes devices. Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device. Option --tcrypt-hidden cannot be combined with --allow-discards. Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type. Option --veracrypt-pim is supported only for VeraCrypt compatible devices. Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices. The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive. Keyslot specification is required. tool_core_args[(OPT_PBKDF_ID)].type == CRYPT_ARG_STRING Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id. PBKDF forced iterations cannot be combined with iteration time option. Sector size option with open action is supported only for plain devices. Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes. Key size is required with --unbound option. LUKS2 decryption requires option --header. Options --reduce-device-size and --data-size cannot be combined. Options --device-size and --size cannot be combined. Options --keyslot-cipher and --keyslot-key-size must be used together. No action taken. Invoked with --test-args option.
--key-description parameter is mandatory for token add action. Action requires specific token. Use --token-id parameter. Cannot disable metadata locking. no permission or bad passphrase wrong device or file specified device already exists or device is busy Option --%s is not allowed with %s action. Command failed with code %i (%s). tool_core_args[(OPT_CIPHER_ID)].set == false && tool_core_args[(OPT_CIPHER_ID)].type == CRYPT_ARG_STRING Not enough free keyslots for reencryption. Key file can be used only with --key-slot or with exactly one key slot active. Enter passphrase for key slot %d: Enter passphrase for key slot %u: Failed to remove keyslot %d with unbound key. Switching data encryption cipher to %s.
Command requires device as argument. Only LUKS2 format is currently supported. Please use cryptsetup-reencrypt tool for LUKS1. Legacy offline reencryption already in-progress. Use cryptsetup-reencrypt utility. Reencryption of device with integrity profile is not supported. LUKS2 reencryption already initialized. Aborting operation. LUKS2 device is not in reencryption. Override device autodetection of dm device to be reencrypted Align payload at sector boundaries - for luksFormat Allow discards (aka TRIM) requests for device Allow fallback to the kernel crypto API when opening a device using the dm-blk-crypto target Cancel a previously set deferred device removal The cipher used to encrypt the disk (see /proc/crypto) Show debug messages including JSON metadata Device removal is deferred until the last user closes it Use only specified device size (ignore rest of device). DANGEROUS! Decrypt LUKS2 device (remove encryption). Disable loading of external LUKS2 token plugins Disable loading volume keys via kernel keyring Disable locking of on-disk metadata Do not scan for VeraCrypt compatible device Dump info in JSON format (LUKS2 only) Dump volume (master) key instead of keyslots info Encrypt LUKS2 device (in-place encryption). Disable password quality check (if enabled) The hash used to create the encryption key from the passphrase Device or file with separated LUKS header File with LUKS header and keyslots backup Maximal reencryption hotzone size. Initialize LUKS2 reencryption in metadata only. Use an inline crypto engine via the kernel's dm-blk-crypto target Data integrity algorithm (LUKS2 only) Use inefficient legacy padding (old kernels) Disable journal for integrity device Do not wipe device after format PBKDF iteration time for LUKS (in ms) Use IV counted in sector size (not in 512 bytes) Read or write the json from or to a file The size of the encryption key Slot number for new key (default is first free) Number of bytes to skip in keyfile LUKS2 keyslot: The cipher used for keyslot encryption LUKS2 keyslot: The size of the encryption key Set label for the LUKS2 device LUKS2 header keyslots area size LUKS2 header metadata area size Read the volume (master) key from file. Number of bytes to skip in newly added keyfile Limits the read from newly added keyfile The start offset in the backend device PBKDF algorithm (for LUKS2): argon2i, argon2id, pbkdf2 PBKDF iterations cost (forced, disables benchmark) Bypass dm-crypt workqueue and process read requests synchronously Bypass dm-crypt workqueue and process write requests synchronously Use dm-crypt same_cpu_crypt performance compatibility option Use dm-crypt submit_from_crypt_cpus performance compatibility option Set activation flags persistent for device Keyslot priority: ignore, normal, prefer Progress line update (in seconds) Reduce data device size (move data offset). DANGEROUS! Refresh (reactivate) device with new parameters Reencryption hotzone resilience type (checksum,journal,none) Reencryption hotzone checksums hash Resume initialized LUKS2 reencryption only. Encryption sector size (default: 512 bytes) Use global lock to serialize memory hard PBKDF (OOM workaround) Share device with another non-overlapping crypt segment How many sectors of the encrypted data to skip at the beginning Set subsystem label for the LUKS2 device Use backup (secondary) TCRYPT header Use hidden header (hidden TCRYPT device) Device is system TCRYPT drive (with bootloader) Do not run action, just validate all command line parameters Do not activate device, just check passphrase Timeout for interactive passphrase prompt (in seconds) Do not ask for passphrase if activation by token fails Restrict allowed token types used to retrieve LUKS2 key How often the input of the passphrase can be retried Type of device metadata: luks, luks1, luks2, plain, loopaes, tcrypt, bitlk Create or dump unbound (no assigned data segment) LUKS2 keyslot Use /dev/random for generating volume key Use /dev/urandom for generating volume key Scan also for VeraCrypt compatible device Personal Iteration Multiplier for VeraCrypt compatible device Query Personal Iteration Multiplier for VeraCrypt compatible device Shows more detailed error messages Verifies the passphrase by asking for it twice [--type ] [] try to repair on-disk metadata erase all keyslots (remove encryption key) convert LUKS from/to LUKS2 format set permanent configuration options for LUKS2 removes supplied key or key file from LUKS device changes supplied key or key file of LUKS device converts a key to new pbkdf parameters wipes key with number from LUKS device tests for LUKS partition header dump LUKS partition information dump TCRYPT device information Suspend LUKS device and wipe key (all IOs are frozen) Backup LUKS device header and keyslots Restore LUKS device header and keyslots ab`0baa(a(a8ad8a8a8a8a8a8a8a8a8a8a8a8ad8a8a8a8a8a8a8a8a8a8aXdb c8a8a8aXc8a8a8a8a8a8a8a8a8a8a8a8a8a8a8a8ac8a8aPb8a8a8a8ab8a8a8a8a8a8a8a8a8a8a8a8a8a8a8a8a8a8a8a8a8a8a8a/a[eddd+ed`edddddTe edddddddddddddddddd[eddd+ed`edddddTe e get_adjusted_key_size main basic_options_cb check_key_slot_value action_reencrypt _check_luks2_keyslots fill_keyslot_passwords action_reencrypt_luks2 init_passphrase action_decrypt_luks2 action_encrypt_luks2 action_reencrypt_load ; V M X X0 c c( z zH {\ 8| X} }0 h~D ~X h ( 0 ( $ ht H H h , Xh h| x
D
h
x
x$ H ` x X x
X
Hd 8P x 8 H` h
x 8 ( h6 7 I I I HV| hX X( \ \ d< g Hj 8lL o s t| xu w (x y h zR x (w& D $ 4 J FJ w ?:*3$" \ xU t pU
w H w BAA G L!H!{!^!A!S
AABA 8 x BBD A(G}
(D ABBJ H ( ly} BEE E(A0D8G@D
8D0A(B BBBB t y z! 8 8z BBA A(G0u
(D ABBE L za BEG
JIH a
JIL R
LDN R
BBJ ( {H DZ
B ^ ( H |p FPM UDB
B o \ t `|d BBB D(F0GpxC[xApg
0A(A BBBF yxRoxAp p EZ
A M
C ܀ EZ
A M
C H H BBE J(D0A8G
8D0A(B BBBI L h M BBB B(D0A8Gl
8D0A(B BBBC ( AX
G C
E j
A ( FBD0g
EBF D tX FKA G
DABK hJ]A X BBE E(H0D8GgAAI|TDBIX
8D0A(B BBBE ~~AAIh ď BEE E(D0D8IPOXK`NXAPI
8A0A(B BBBB x8F0A(B BBB | L FBB B(A0A8G
8D0A(B BBBC IaA{HVA{GjB ( X AKDP
AAF H , FEE E(A0D8F@M
8D0A(B BBBF ( D EAI
AAJ 8 p T FEG D(DPW
(D BBBE t ONB E(A0A8D@M
8D0A(B BBBD 8H0A(B BBBJC@ ( 8 | FBD0n
EBG d `' FD
EE lO FD
ED 0 FIA D@
DBBG 8 tZ FBB A(D@v
(D BBBA H
FBB B(A0A8D`g
8D0A(B BBBJ d h L NEH D(A0R
(A BBBG F
(A BBBC pF0 p FBB B(A0A8G I l H W A t
8D0A(B BBBE Q Q A \ D @| FBB B(A0A8DpV
8D0A(B BBBK xIDAIp ( ` EAR |
AAJ $ ` FED D(I0 | LYKHC
x FD
EK @
t FD
EE p d
FBB B(A0A8Dpq
8D0A(B BBBH xIDAIpxIDAIp 8
| FBA A(DP
(D ABBE | MX
K Kp 4 ` BBB B(A0A8DEIGIvB\A
8D0A(B BBBJ H L FBDp
EBG xJUxApxDAAPp FBB B(A0A8Gy
8D0A(B BBBE HBBI\REBSEAAPREBZ` 7 FBB B(A0A8Dq
8D0A(B BBBH EDGS X FBB B(A0A8D`
8D0A(B BBBE hBpKxEI` T
H FBB B(A0A8G
8D0A(B BBBD hEAELDBEL~AHEViKNABEGVbLUA FBB B(A0A8F
8D0A(B BBBB EBEL EAELpGPAh FBB B(A0A8D`
8D0A(B BBBE MhBpKxEI`ehKpWhA` $ 0 Hc
E d
A t D BBB I(D0A8G{PHGI
8D0A(B BBBF BNDI L FFB B(A0A8D
8D0A(B BBBI @ h FAA D@
DABE HKPAXA`L@ P @ FBB A(A0GOOAKAAL
0D(A BBBF KLBECAP*INAYCKAOPBKAAL 0 0 t"T FED D`
ABBH d # FBB B(A0A8G?CAAPYQBS
8D0A(B BBBF TNA$I\AEYHBS 4 , 4# | @ 4X BBB B(A0A8G L"
8D0A(B BBBF "^"H"A"I""J"N"E"I" \ @ BBB E(D0D8DpqxENBIp
8D0A(B BBBK H Bx BBF E(G0C
(C ABBG D(F ABB \ l B FBB B(D0A8DP<XJ`GhBpBxAIPoXO`LhApHxGKP( xEr BAD W
ABA d E FBE B(D0A8G
8A0A(B BBBH
8A0A(B BBBK ` tL t TMR BBB B(A0A8G L@LCcCHCSCACWCDCaCAC
8D0A(B BBBE X R 5 h 0 6 H 7 \ 8 8 x 9 : ; P r < Z = 8 > @ ? p @ A B C 8 D x b E t p F G H 8 I H F J x T K ^ L n t M v N O P P T Q M R S H T U V W X Y X v Z y [ p{ ? V ` | ; а ! ( F ! M n б ! b u k p @ p 1 b 0l 8 % F * 0
& X : T U - 4 ; [ y 7 8 @ ` ^ /usr/lib/debug/.dwz/x86_64-linux-gnu/cryptsetup-bin.debug 9jxL'V@}] d8a26873ed369fc537354ef7f811110ed16816.debug zq .shstrtab .interp .note.gnu.property .note.gnu.build-id .note.ABI-tag .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.got .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .data.rel.ro .dynamic .data .bss .gnu_debugaltlink .gnu_debuglink 8 8 0 & h h $ 9 G o $ Q @ Y J
a o b" b" p n o # # P } (% (% `0 B U U h p p p p { { 0{ 0{
'
r " " H% H% 0V 0F 8V 8F @V @F X H 0 0Z 0J ` P 8N @ 8 8 N 4 /