On my #Librem14 notebook made by #Purism I use #pureboot which includes #heads and #coreboot. I had to replace the ssd.

I also

• upgraded from luks1 to luks2 replacing the key derivation function
• started with a new luks encryption key
• and a new gpg encrypted passphrase
• changed my fs from ext4 to #btrfs

To check for the new key/passphrase whether they work I used this command: /usr/lib/cryptsetup/scripts/decrypt_gnupg-sc /etc/cryptsetup-initramfs/cryptkey.gpg | sudo cryptsetup luksOpen --test-passphrase /dev/nvme0n1p3 && echo yippie-yeah