pull down to refresh
lsblk
/dev/sda2
/dev/nvme0n1p2
sudo cryptsetup luksDump /dev/whatever
/dev/whatever
Version: 1
PBKDF:
pbkdf2
argon2i
argon2id
How to know if you need to upgrade
Step 1: Find your encrypted device
/dev/sda2
or/dev/nvme0n1p2
).Step 2: Check your LUKS version and KDF
/dev/whatever
with your actual device name)What to look for:
Version: 1
, you're using LUKS1 and definitely need to upgradePBKDF:
line in each keyslot section. You need to upgrade if you see:pbkdf2
- old and vulnerable to GPU attacksargon2i
- better but not GPU-resistantargon2id
- this is the current recommended KDF that's resistant to GPU attacksQuick summary: