[pkg-cryptsetup-devel] Bug#1113897: Bug Report: cryptsetup - LUKS2 integrity protection fails on Debian 13 (Trixie)

Milan Broz gmazyland at gmail.com
Wed Sep 3 21:46:15 BST 2025


Your script has several mistakes.

The major one is detection of the offset
- there is no "Payload offset" in LUKS2 dump (this string is for LUKS1 dump)
- even if you get data segment offset, it is beginning of dm-integrity device metadata area, the real payload follows the dm-integrity metadata

Thus, you are probably rewriting some dm-integrity metadata area (instead of user data) that is never read, so nothing is detected.

Milan



More information about the pkg-cryptsetup-devel mailing list