Set a verification pattern of the secure LUKS2 volume key
Use the setvp command to set a verification pattern of the secure LUKS2 volume key of a volume encrypted with LUKS2 and the PAES cipher.
The verification pattern identifies the effective key used to encrypt the volume's data. The
verification pattern is stored in a token named paes-verification-pattern in the
LUKS2 header.
Note: Set the verification pattern right after formatting the volume using cryptsetup
luksFormat.
For information about zkey-cryptsetup, and how to avoid the need to enter a passphrase when opening a key slot contained in the LUKS2 header of a volume, read zkey-cryptsetup - Managing LUKS2 volume keys.
Example: To set the verification pattern of the secure key of the encrypted volume /dev/mapper/disk1:
# zkey-cryptsetup setvp /dev/mapper/disk1