Collaborate Disseminate
Does python’s pip package manager cryptographically validate its payload’s authentication and integrity for all packages after downloading them and before installing them?
I see a lot of guides providing installation instructions with step… Continue reading Does python’s pip provide cryptographic authentication and integrity validation?
Is it possible to store the master decryption key for accessing a LUKS encrypted volume inside an SGX enclave so that the master key cannot be accessed by any user on the system, even the root user with privileges to make system calls?
Why is the metadata in my LUKS header listed twice?
I started poking at the bits in a drive that’s encrypted with LUKS, and I found some metadata in a JSON object. What’s odd though is that the same JSON object actually appears twice. Her… Continue reading Why is my LUKS header listed twice?
In analyzing the LUKS header on an encrypted volume, the cipher-name field shows a single-character = ‘@’. What does that mean?
The LUKS On-Disk Format Specification originally published by Clemens Fruhwirth in 2005 clearly defines the en… Continue reading What is a LUKS cipher-name "@"?
How can I determine the exact start byte and exact end byte of a LUKS header on a block storage device?
I use Linux Unified Key Setup (LUKS) for Full Disk Encryption (FDE), so all of the data on my drive is encrypted using a strong master… Continue reading How to determine start and end bytes of LUKS header?
When was Linux Unified Key Setup (LUKS) first released–both as an open standard and later made available as an implementation with cryptsetup?