dissect.fve.luks
¶
Submodules¶
Package Contents¶
Classes¶
LUKS disk encryption. |
|
Transparently decrypting stream. |
Functions¶
Return whether the file-like object is a LUKS volume. |
- class dissect.fve.luks.LUKS(fh: BinaryIO)¶
LUKS disk encryption.
- fh¶
- header = None¶
- header1 = None¶
- header2 = None¶
- cipher_name = None¶
- cipher_mode = None¶
- hash_spec = None¶
- label = None¶
- checksum_algorithm = None¶
- uuid¶
- property unlocked: bool¶
- property keyslots: dict[int, dissect.fve.luks.metadata.Keyslot]¶
- unlock_with_key_file(path: pathlib.Path, offset: int = 0, size: int = -1, keyslot: int | None = None) None ¶
- unlock_with_key_fh(fh: BinaryIO, offset: int = 0, size: int = -1, keyslot: int | None = None) None ¶
- unlock_with_passphrase(passphrase: str, keyslot: int | None = None) None ¶
Unlock this volume with a passphrase and optional keyslot hint.
- find_digest(keyslot: int) dissect.fve.luks.metadata.Digest ¶
Find digest metadata corresponding to the given keyslot.
- find_segment(keyslot: int) dissect.fve.luks.metadata.Segment ¶
Find segment metadata corresponding to the given keyslot.
- open() CryptStream ¶
Open this volume and return a readable (decrypted) stream.
- class dissect.fve.luks.CryptStream(fh: BinaryIO, cipher: str, key: bytes, key_size: int | None = None, offset: int = 0, size: int | str | None = None, iv_tweak: int = 0, sector_size: int = 512)¶
Bases:
dissect.util.stream.AlignedStream
Transparently decrypting stream.
Technically this is dm-crypt territory, but it’s more practical to place it in the LUKS namespace.
- Parameters:
fh – The original file-like object, usually the encrypted disk.
cipher – The cipher name/specification.
key – The encryption key.
key_size – Optional key size hint.
offset – Optional base offset to the encrypted region. Segment offset in LUKS.
size – Optional size hint. If
None
or"dynamic"
, determine the size by seeking to the end offh
.iv_tweak – Optional IV tweak, or offset.
sector_size – Optional sector size. Defaults to 512.
- fh¶
- cipher¶
- offset = 0¶
- iv_tweak = 0¶
- sector_size = 512¶
- dissect.fve.luks.is_luks_volume(fh: BinaryIO) bool ¶
Return whether the file-like object is a LUKS volume.