Collaborate Disseminate
Ubuntu offers full disk encryption relying on luks. An often recurring area of criticism is the fact that Ubuntu disables hibernation by default while suspend-to-ram stores the private keys in the ram memory. However I wonder… Continue reading Is suspend-to-ram really a meaningful risk for Full Disk Encryption?
I looked at https://crypto.stackexchange.com/a/24024 and it seems to me cryptsetup(8) luksRemoveKey is weak.
The situation:
I create new LUKS volume, copy stuff into it.
I add a new pass phrase, and give (a copy of) the en… Continue reading security of cryptsetup(8) luksRemoveKey, feasibility of extracting MasterSecretKey and using it later
My goal is to be able easily destroy medium with key file in emergency situation and make system unbootable, even is potential advisor knows right password for the system. I’d store this key file in secure place and restore i… Continue reading Is it possible to LUKS require both password and key file?
I’ve setup arch using dm-crypt / luks, with a passphrase and a key, lost one of them will fail to login.
But I feel I need more secure of passphrase, how to setup dm-crypt / luks that has one-time passphrase mechanism?
With KVM guest systems so prevalent now, I was wondering if there is any merit in using LUKS encrypted storage, as the guest will usually be always on, so the information is always accessible unencrypted to the guest, and thu… Continue reading Can information somehow be secured from the host on a KVM guest?
I have an opensource airgapped raspberry pi project seen at the following link: www.privatekeyvault.com
I have provided a method for installing LUKS full disk encryption seen at the following: https://github.com/johnshearing/PrivateKeyVau… Continue reading Using command (dd if=/dev/mmcblk0p1 | sha1sum) while running from initramfs
I am looking for a security-centered Linux OS that allows you to take the /boot partition on a thumb-drive to alleviate concerns of an Evil Maid Attacks! What OS is it easy to remove the /boot partition and carry on a thumb-d… Continue reading Security/Privacy OS With Boot On Thumbdrive
Situation as follows:
Let’s assume two (or more) containers, encrypted using the same passphrase.
They will contain the same files. So their content is identical.
However, the containers themselves aren’t identical files – … Continue reading Are multiple encrypted containers with the same passphase containing the same files a cryptographic risk?
Suppose the firmware of an SSD or HDD has been compromised by rogue actors either through “interdiction” (interception) or via the internet. They are able to exfiltrate data and conduct surveillance at will without my knowled… Continue reading Does full disk encryption offer mitigation in the case of the firmware of an SSD being compromised?
When installing Debian, I chose an option to create Encrypted LVM (Logical Volume Management). So now, when I turn on my PC, it asks me for an encryption password.
It looks ok, but how does it work? What does GRUB initializ… Continue reading How does default Debian boot drive encryption works?