0

Some say that my LUKS parition may have been damaged due to some mistakes, but I'm not very sure.

hexdump -C /dev/sda7 | grep LUKS

1cca2cc80  7f 66 4c 55 4b 53 bd 14  ff c3 3e 2c 52 f0 7c 3a  |.fLUKS....>,R.|:|
29c2d5c30  4c 55 4b 53 07 09 22 84  5c e0 bb 5f 24 5e bd 84  |LUKS..".\.._$^..|
2e8c668d0  df 94 04 fd 6c 8a 4c 55  4b 53 e3 0d 3e 47 d2 8d  |....l.LUKS..>G..|
45e948cb0  30 34 d7 20 29 91 bf b4  4c 55 4b 53 25 46 28 92  |04. )...LUKS%F(.|
4f29e2ff0  49 ab d2 e2 c7 3f 20 2f  12 74 4c 55 4b 53 28 42  |I....? /.tLUKS(B|
52a7b4d30  d1 80 0c 0b 92 8c 54 0c  4c 55 4b 53 d8 8f a1 82  |......T.LUKS....|
7408251c0  bd e8 7e 46 cd 86 ab f4  a6 a9 ac 4c 55 4b 53 e0  |..~F.......LUKS.|
9c7b7c800  ff 60 a4 4c 55 4b 53 29  b3 1d cd ac 36 c9 40 4c  |.`.LUKS)....6.@L|
a4df0db10  b8 1d 94 6b 59 bf cf 3b  37 4c 55 4b 53 94 fd a1  |...kY..;7LUKS...|
ac3772760  14 47 4c 55 4b 53 b9 7f  97 5b f8 47 84 c7 8d 9c  |.GLUKS...[.G....|
b8d00a560  28 28 fa 6a 6e 83 4c 55  4b 53 15 75 64 2a 86 5f  |((.jn.LUKS.ud*._|
b9107c3c0  37 7a cf 69 0e c2 27 bb  81 4c 55 4b 53 83 85 e8  |7z.i..'..LUKS...|
c937e4de0  48 9d e8 e3 34 b6 f2 c4  53 da 0e 4c 55 4b 53 f1  |H...4...S..LUKS.|
f6a4a2d00  48 58 92 82 25 4c 55 4b  53 fd 91 f7 01 12 80 37  |HX..%LUKS......7|

Sda7 is my LUKS was, what does it mean of the above output? And how to sure my all my LUKS partitions are recoverble or not in whole disk space (allocated space or unallocated)?

  • 1
    You should use cryptsetup luksDump /dev/sda7 instead (and report result via edit) – A.B Mar 29 at 7:26
  • anyway trying myself, I don't see anything similar. Normally the first 4 bytes should already be LUKS, so chances are my suggestion is not very useful except confirm there's no luks header here. Perhaps you kept a header backup? – A.B Mar 29 at 7:40
  • If you see the pattern "66 4c 55 4b 53 ba be", then that's a LUKS header. – Emmanuel Rosa Mar 29 at 10:12
  • Whatever you do, don't do it on the partition. Do it on a copy. Or use losetup with option --read-only to map the partition with the translated start. Likewise to prevent any alteration, you should force the partition's block to be seen read-only (blockdev --setro /dev/sda7 ) – A.B Mar 29 at 10:15
  • @Emmanuel. Some said LUKS header should start with LUKS followed by the cipher names in hexdump output, but mine is not in the format, is something mistake? – Maggicmuojet Mar 31 at 9:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.