LUKS encryption with external header file
#3
I made test. I created a header exactly like I did it 2 years ago. My header was created like this:

# truncate -s 2M xheader.img
# cryptsetup luksFormat /dev/sda --hash=sha512 --key-size=512 --align-payload 4096 --header xheader.img

.... password is: test

# ls -l xheader.img
-rw-r--r-- 1 root root 2097152 Feb 15 20:59 xheader.img

Then I padded the file to 2097664 bytes:

# truncate -s 2097664 xheader
# ls -ltr xheader
-rw-rw-r-- 1 root root 2097664 Feb 15 21:08 xheader

Then hashcat:

# hashcat -a 3 -m 14600 xheader.img test -o out
hashcat (v6.1.1) starting...

* Device #1: WARNING! Kernel exec timeout is not disabled.
            This may cause "CL_OUT_OF_RESOURCES" or related errors.
            To disable the timeout, see: https://hashcat.net/q/timeoutpatch
CUDA API (CUDA 10.2)
====================
* Device #1: NVIDIA Tegra X1, 1850/3964 MB, 1MCU

Minimum password length supported by kernel: 0
Maximum password length supported by kernel: 256

Hashes: 1 digests; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates

Applicable optimizers applied:
* Zero-Byte
* Single-Hash
* Single-Salt
* Brute-Force
* Slow-Hash-SIMD-LOOP

Watchdog: Hardware monitoring interface not found on your system.
Watchdog: Temperature abort trigger disabled.

Host memory required for this attack: 81 MB

The wordlist or mask that you are using is too small.
This means that hashcat cannot use the full parallel power of your device(s).
Unless you supply more work, your cracking speed will drop.
For tips on supplying more work, see: https://hashcat.net/faq/morework

Approaching final keyspace - workload adjusted.

Session..........: hashcat
Status...........: Exhausted
Hash.Name........: LUKS
Hash.Target......: xheader.img
Time.Started.....: Mon Feb 15 20:51:52 2021 (1 min, 13 secs)
Time.Estimated...: Mon Feb 15 20:53:05 2021 (0 secs)
Guess.Mask.......: test [4]
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:        0 H/s (1.65ms) @ Accel:16 Loops:64 Thr:64 Vec:1
Recovered........: 0/1 (0.00%) Digests
Progress.........: 1/1 (100.00%)
Rejected.........: 0/1 (0.00%)
Restore.Point....: 1/1 (100.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:2726976-2727028
Candidates.#1....: test -> test

Started: Mon Feb 15 20:51:47 2021
Stopped: Mon Feb 15 20:53:06 2021




I am asking myself if I did something wrong. Any help is appreciated.

Thank you,
Volker
Reply


Messages In This Thread
RE: LUKS encryption with external header file - by d7volker - 02-15-2021, 10:21 PM