How to change cipher, key-size, hash, master key of existing LUKS device

Solution Verified - Updated -

Issue

  • How can I change or rotate the master key (also called volume key) on an existing LUKS device?

  • How can I change the encryption cipher on an existing LUKS container?

Environment

  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 6.6+
  • cryptsetup-reencrypt package

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In