After reading "man cryptsetup" and many StackExchange questions, I'm confused: Does LUKS use the same master key in each slot?
If I execute the commands below, the displayed master key does not change--i.e., additional master keys are not listed.
cryptsetup luksDump /dev/xvdd1
cryptsetup luksAddKey /dev/xvdd1 --key-slot 1
cryptsetup luksAddKey /dev/xvdd1 --key-slot 2
cryptsetup luksDump /dev/xvdd1
Is this a terminology problem? Meaning, you have:
- master key (for encrypting and decrypting the partition)
- password (for encrypting the master key)
- key file (for encrypting the master key)