Collaborate Disseminate
How can I list all of the Docker Content Trust root keys on my system?
I am setting up a CI process that will use the debian:stable-latest docker image to build my application’s releases in ephemeral cloud instances. I want to make sure th… Continue reading How to list all of the known root keys in docker (Docker Content Trust)
Is there a source that monitors popular root stores for CAs controlled by government agencies?
There are several "root stores" that maintain a list of trusted root CAs. These root stores are imported and used by thousands (millio… Continue reading Where can I find a list of all government agencies with CAs in PKI root stores?
Does python’s pip package manager cryptographically validate its payload’s authentication and integrity for all packages after downloading them and before installing them?
I see a lot of guides providing installation instructions with step… Continue reading Does python’s pip provide cryptographic authentication and integrity validation?
Is it possible to store the master decryption key for accessing a LUKS encrypted volume inside an SGX enclave so that the master key cannot be accessed by any user on the system, even the root user with privileges to make system calls?
Why is the metadata in my LUKS header listed twice?
I started poking at the bits in a drive that’s encrypted with LUKS, and I found some metadata in a JSON object. What’s odd though is that the same JSON object actually appears twice. Her… Continue reading Why is my LUKS header listed twice?
In analyzing the LUKS header on an encrypted volume, the cipher-name field shows a single-character = ‘@’. What does that mean?
The LUKS On-Disk Format Specification originally published by Clemens Fruhwirth in 2005 clearly defines the en… Continue reading What is a LUKS cipher-name "@"?
How can I determine the exact start byte and exact end byte of a LUKS header on a block storage device?
I use Linux Unified Key Setup (LUKS) for Full Disk Encryption (FDE), so all of the data on my drive is encrypted using a strong master… Continue reading How to determine start and end bytes of LUKS header?
When was Linux Unified Key Setup (LUKS) first released–both as an open standard and later made available as an implementation with cryptsetup?