Closed GIJack closed 3 years ago
Working on this but some information in luksDump wont be available because zuluCrypt uses cryptsetup through its library and the information is not exposed through the library API.
The CLI will produce an output like below and GUI will use the same info:
For LUKS2
[ink@localhost ~]$ zuluCrypt-cli -b -b -d luks2.img
Slot Number: 0
Type: luks2
PBKDF type: argon2i
Cipher: aes-xts-plain64
Cipher key: 512 bits
Priority: Normal
Time cost: 0
Memory: 645039
Threads: 4
Slot Number: 1
Type: luks2
PBKDF type: argon2i
Cipher: aes-xts-plain64
Cipher key: 512 bits
Priority: Normal
Time cost: 0
Memory: 650852
Threads: 4
[ink@localhost ~]$
For LUKS1
[ink@localhost ~]$ zuluCrypt-cli -b -b -d luks1.img
Slot Number: 0
Type: luks1
PBKDF type: pbkdf2
PBKDF hash: sha256
PBKDF iterations: 876734
Slot Number: 1
Type: luks1
PBKDF type: pbkdf2
PBKDF hash: sha256
PBKDF iterations: 879676
[ink@localhost ~]$
The git version now has this feature
This does in fact work. However, I do suggest being add button directly from the list dialog. Same dialog as now, just add a button from the list.
Try again. There is now a check box that makes it possible to show/hide inactive key slots and clicking inactive key slot will show a menu that can be used to add a key to that specific key slot.
Clicking active key slot will show a menu that given an option to delete a key in that specific key slot.
OOh, interesting. I am looking at this now. UI looks great. thanks.
However there appears to be a slight bug. For some reason I am only able to delete a keyslot with the key in that slot. With my usage model, if I needed to delete a key it
to do this with cryptsetup, you need to use luksKillSlot, instead of luksRemoveKey
I did not know the behavior of luksKillSlot.
Try now.
The new behavior is as follows:-
Works. Brilliant. Thanks again for adding this.
I have a feature request. Under the Volumes sub menu for a Key Management window.
What I request:
I have a key management scheme that uses numbered unique keys, that I will not have access to the key if it is lost or stolen, however, I will know which number key is lost, and will be able to remove it from the keyring, right now all on the command line.
It would make the management task a lot easier if this was easily done in the GUI.