Add result of #312 to manpage.
I do not think such information should be in man pages, it is low-level info that should be used only by very experienced users.
But maybe it can be in FAQ, I am adding Arno to cc just for consideration.
I had a feeling that might happen. :-)
FAQ is also fine. I just think that if the man page states that the keyfile is generated using this or that hash function, it is subtly contradicting what you said in #312 (closed): it's using a variant of the hash function, and I feel the user should be able to find that information if she's looking for it.
Anyway. It's a good man page. I can't say for sure if you should listen to me.
Seems this is open for a quite a long time without a response...
Anyway, the advice is valid only for devices where i skey visible in
dmsetup table --showkeys, new cryptsetup (in LUKS2 by default) uses kernel keyring, so key is no longer visible in mapping table from userspace.
So, closing this without merging, sorry.
closedToggle commit list