CRYPTSETUP-LUKSCONVERTKEY(8) (NAME) cryptsetup-luksConvertKey - LUKS2 PBKDF (SYNOPSIS) cryptsetup luksConvertKey [<>] <> (DESCRIPTION) (keyslot) LUKS2 PBKDF . --key-file . --pbkdf PBKDF LUKS2 . ( --key-slot) . . . : LUKS . <> : [--key-file, --keyfile-offset, --keyfile-size, --key-slot, --hash, --header, --disable-locks, --iter-time, --pbkdf, --pbkdf-force-iterations, --pbkdf-memory, --pbkdf-parallel, --keyslot-cipher, --keyslot-key-size, --timeout, --verify-passphrase]. (OPTIONS) --batch-mode, -q . ! --verify-passphrase . --debug --debug-json . # . --debug-json LUKS2 JSON . --disable-locks . LUKS2 . : cryptsetup ( /run ). --force-password LUKS. cryptsetup . pwquality.conf(5) passwdqc.conf(5) . --hash, -h <-> PBKDF2 AF . --header < LUKS> () LUKS . LUKS . LUKS ( luksAddKey) LUKS LUKS . --help, -? . --iter-time, -i < > PBKDF . . --key-file, -d . "-" (stdin) . . NOTES ON PASSPHRASE PROCESSING cryptsetup(8) . --keyfile-offset . --keyfile-size, -l . --help . . . --keyfile-offset . --key-slot, -S <0-N> LUKS . LUKS . LUKS1 . LUKS2 LUKS2 . --keyslot-cipher <-> LUKS2 . --keyslot-key-size <> LUKS2 . --new-keyfile-offset . --new-keyfile-size . --help . . --new-keyfile-offset . --pbkdf < PBKDF> (PBKDF) LUKS. PBKDF : pbkdf2 ( PBKDF2 RFC2898) argon2i Argon2i argon2id Argon2id ( Argon2 ). LUKS1 PBKDF2 ( ). PBKDF LUKS2 cryptsetup --help . PBKDF (dictionary) (brute-force) . . PBKDF2 ( ) . Argon2i/id ( ) ( ) . ( ) . (--iter-time) --pbkdf-memory . . --pbkdf-parallel (CPU) . PBKDF LUKS2 cryptsetup-luksDump(8) . --pbkdf-force-iterations --pbkdf-memory --pbkdf-parallel . . (out-of-memory) . (embedded) . PBKDF: PBKDF2 ( ). PBKDF2 . Argon2i Argon2id ( CPU) ( ). (KiB) (GiB) . ( ) (MiB) (GiB) . ( ) --pbkdf-memory . ( ). : PBKDF . (brute-force) . . PBKDF . LUKS . cryptsetup ( ) ( ) () . PBKDF RAM RAM . (swap) . (overcommit) . PBKDF cryptsetup . --pbkdf-force-iterations PBKDF (). LUKS/LUKS2 . --pbkdf . --pbkdf-memory PBKDF ( Argon2i/id ). PBKDF . PBKDF2 . --pbkdf-parallel PBKDF ( ). () . PBKDF2 . --timeout, -t () . . --key-file . . . --usage . --verify-passphrase, -y . (stdin) . --version, -V . (REPORTING BUGS) cryptsetup . --debug . (SEE ALSO) Cryptsetup (FAQ) cryptsetup(8), integritysetup(8) veritysetup(8) (CRYPTSETUP) cryptsetup . cryptsetup 2.8.7 2026-07-21 CRYPTSETUP-LUKSCONVERTKEY(8)