I tried changing my LUKS password.
Source I used: https://www.linuxexperten.com/content/how-do-i-change-my-luks-encryption-password-and-more
I have separate partition’s for Boot, Root, Swap & Home. To make sure which partitions had Luks:
blkid -t TYPE=crypto_LUKS -o device
/dev/sda5
/dev/sda6
/dev/sda7
Then checked how many slots were occupied for sda5.
$ sudo cryptsetup luksDump /dev/sda5 |grep Key.Slot
Key Slot 0: ENABLED
Key Slot 1: DISABLED
Key Slot 2: DISABLED
Key Slot 3: DISABLED
Key Slot 4: DISABLED
Key Slot 5: DISABLED
Key Slot 6: DISABLED
Key Slot 7: DISABLED
Apparently root can use the master key to add a new key:
$ sudo dmsetup ls --target crypt
swapfs (254, 2)
rootfs (254, 0)
homefs (254, 1)
But then I said let me check the other partitions sda6 & 7 to see how many slots were occupied. There were two already occupied before changing the password.
$ sudo cryptsetup luksDump /dev/sda6 |grep Key.Slot
Key Slot 0: ENABLED
Key Slot 1: ENABLED
Key Slot 2: DISABLED
Key Slot 3: DISABLED
Key Slot 4: DISABLED
Key Slot 5: DISABLED
Key Slot 6: DISABLED
Key Slot 7: DISABLED
$ sudo cryptsetup luksDump /dev/sda7 |grep Key.Slot
Key Slot 0: ENABLED
Key Slot 1: ENABLED
Key Slot 2: DISABLED
Key Slot 3: DISABLED
Key Slot 4: DISABLED
Key Slot 5: DISABLED
Key Slot 6: DISABLED
Key Slot 7: DISABLED
I know all three partitions had the same password. I did not have any other password for LUKS. Does this mean that “SOMEONE ELSE HAD ACCESS” to these other two partitions?