- limitations imposed by the LUKS security model BEFORE you face such
- a disaster!
-
- PASSPHRASES: Some people have had difficulties when upgrading
- distributions. It is highly advisable to only use the 94 printable
- characters from the first 128 characters of the ASCII table, as
- they will always have the same binary representation. Other
- characters may have different encoding depending on system
- configuration and your passphrase will not work with a different
- encoding. A table of the standardized first 128 ASCII caracters
- can, e.g. be found on http://en.wikipedia.org/wiki/ASCII
-
-
- * System Specific warnings
+ limitations imposed by the LUKS security model BEFORE you face
+ such a disaster! In particular, make sure you have a current header
+ backup before doing any potentially dangerous operations.
+
+ BACKUP: Yes, encrypted disks die, just as normal ones do. A full
+ backup is mandatory, see Section "6. Backup and Data Recovery" on
+ options for doing encrypted backup.
+
+ CLONING/IMAGING: If you clone or image a LUKS container, you make a
+ copy of the LUKS header and the master key will stay the same!
+ That means that if you distribute an image to several machines, the
+ same master key will be used on all of them, regardless of whether
+ you change the passphrases. Do NOT do this! If you do, a root-user
+ on any of the machines with a mapped (decrypted) container or a
+ passphrase on that machine can decrypt all other copies, breaking
+ security. See also Item 6.15.
+
+ DISTRIBUTION INSTALLERS: Some distribution installers offer to
+ create LUKS containers in a way that can be mistaken as activation
+ of an existing container. Creating a new LUKS container on top of
+ an existing one leads to permanent, complete and irreversible data
+ loss. It is strongly recommended to only use distribution
+ installers after a complete backup of all LUKS containers has been
+ made.
+
+ NO WARNING ON NON-INERACTIVE FORMAT: If you feed cryptsetup from
+ STDIN (e.g. via GnuPG) on LUKS format, it does not give you the
+ warning that you are about to format (and e.g. will lose any
+ pre-existing LUKS container on the target), as it assumes it is
+ used from a script. In this scenario, the responsibility for
+ warning the user and possibly checking for an existing LUKS header
+ is shifted to the script. This is a more general form of the
+ previous item.
+
+ LUKS PASSPHRASE IS NOT THE MASTER KEY: The LUKS passphrase is not
+ used in deriving the master key. It is used in decrypting a master
+ key that is randomly selected on header creation. This means that
+ if you create a new LUKS header on top of an old one with
+ exactly the same parameters and exactly the same passphrase as the
+ old one, it will still have a different master key and your data
+ will be permanently lost.
+
+ PASSPHRASE CHARACTER SET: Some people have had difficulties with
+ this when upgrading distributions. It is highly advisable to only
+ use the 94 printable characters from the first 128 characters of
+ the ASCII table, as they will always have the same binary
+ representation. Other characters may have different encoding
+ depending on system configuration and your passphrase will not
+ work with a different encoding. A table of the standardized first
+ 128 ASCII caracters can, e.g. be found on
+ http://en.wikipedia.org/wiki/ASCII
+
+
+ * 1.3 System Specific warnings