Arch Linux

pntruongan

Member

Registered: 2011-01-31

Posts: 63

Can't access encrypted partition.

For a few days now, I cannot access my encrypted partition:

# cryptsetup open -v --key-file=/keyfile /dev/sdb3   /dev/mapper/hdd                      :(
Device /dev/sdb3 is too small.
Command failed with code -1 (wrong or missing parameters).

I can't understand the error message "device is too small". The full debug message from cryptsetup is not much clearer either:

# cryptsetup open -v --debug --key-file=/keyfile /dev/sdb3   /dev/mapper/hdd
# cryptsetup 2.3.5 processing "cryptsetup open -v --debug --key-file=/keyfile /dev/sdb3 /dev/mapper/hdd"
# Running command open.
# Locking memory.
# Installing SIGINT/SIGTERM handler.
# Unblocking interruption on signal.
# Allocating context for crypt device /dev/sdb3.
# Trying to open and read device /dev/sdb3 with direct-io.
# Initialising device-mapper backend library.
# Trying to load any crypt type from device /dev/sdb3.
# Crypto backend (OpenSSL 1.1.1k  25 Mar 2021) initialized in cryptsetup library version 2.3.5.
# Detected kernel Linux 5.11.11-arch1-1 x86_64.
# PBKDF pbkdf2-sha256, time_ms 2000 (iterations 0).
# Reading LUKS header of size 1024 from device /dev/sdb3
# Key length 64, device size 1951987087 sectors, header size 4036 sectors.
# Activating volume /dev/mapper/hdd using token -1.
# File descriptor passphrase entry requested.
# Activating volume /dev/mapper/hdd [keyslot -1] using passphrase.
# Trying to open key slot 0 [ACTIVE].
# Reading key slot 0 area.
# Using userspace crypto wrapper to access keyslot area.
# Reusing open ro fd on device /dev/sdb3
Device /dev/sdb3 is too small.
# Releasing crypt device /dev/sdb3 context.
# Releasing device-mapper backend.
# Closing read only fd for /dev/sdb3.
# Unlocking memory.
Command failed with code -1 (wrong or missing parameters).

I had also tried the passphrase to open that partition, to no avail.
Any hint would be much appreciated. The luksDumps is:

 # cryptsetup luksDump /dev/sdb3
LUKS header information for /dev/sdb3

Version:       	1
Cipher name:   	serpent
Cipher mode:   	xts-plain
Hash spec:     	sha1
Payload offset:	4096
MK bits:       	512
MK digest:     	22 71 71 ed fe 61 45 07 a8 5a 67 75 1f 7a e0 9f 55 a9 bd 03 
MK salt:       	e1 35 5c 07 78 47 da bf a1 a2 be 70 fc 32 0e f6 
               	8c f6 40 f3 ef 7a 49 f7 ea 8c ed ed 3e 1f 51 2e 
MK iterations: 	172875
UUID:          	34df336c-62d7-49f6-a8cf-7bf1c7a61a49

Key Slot 0: ENABLED
	Iterations:         	1716162
	Salt:               	0d 0b 52 5a 27 a8 61 e6 70 23 a2 4c 7d bb d7 94 
	                      	70 a2 6a b4 56 a7 ed 4a 7b 43 b2 95 f1 cd f3 00 
	Key material offset:	8
	AF stripes:            	4000
Key Slot 1: ENABLED
	Iterations:         	1378195
	Salt:               	87 bc e6 23 a4 70 f6 38 f3 2a 6e e7 3e ef 9c 42 
	                      	e0 af 9e 2b 30 bf ef e2 2f c0 0e 4b d1 df ac 56 
	Key material offset:	512
	AF stripes:            	4000
Key Slot 2: DISABLED
Key Slot 3: DISABLED
Key Slot 4: DISABLED
Key Slot 5: DISABLED
Key Slot 6: DISABLED
Key Slot 7: DISABLED