Collaborate Disseminate
From the manual of cryptsetup:
Passphrase processing: Whenever a passphrase is added to a LUKS header
(luksAddKey, luksFormat), the user may specify how much the time the
passphrase processing should consume. The time is used to determ… Continue reading LUKS: longer passphrase iteration count
I would like to keep some secret executable binaries inside a LUKS partition.
This partition is not mounted automatically at boot, but only manually in some moments
I would like to automatically add a directory /media/user/luksdisk/bin con… Continue reading Add directory of Luks partition to system PATH
I have encrypted a disk on my Ubuntu machine using
sudo cryptsetup luksOpen /dev/sdb1 sdb1
I’m wondering how difficult is it to decrypt this disk using bruteforce password guessing?
What does the success rate depend on?
Continue reading How difficult is it to decrypt a disk encrypted with luksOpen?
When one installs Debian 11 with secure-boot enabled, is computer protected against evil maid attacks trying to capture encryption keys using software keylogger?
Disk is formatted using defaults which means boot partition is not encrypted…. Continue reading Does secure boot prevent evil maid attacks when using LUKS?
I’m looking for a way to warehouse an encrypted file container on a USB FAT32 drive that can be accessed by both Windows and Linux with the password data feed via STDIN. Here’s what I found so far, but nothing seems to have all these feat… Continue reading Encrypted file container software for both Windows and Linux that accept password data from STDIN [closed]
I wrote two sets of scripts for use on linux in root environment to sanitise storage drives. Would like to seek your advice on the implementations (Is is redundant? Is it an overkill or could the scripts be simplified?)
Script A (Targeting… Continue reading Opinions on Data Sanitisation (SSD/HDD/USB flashdrives) [closed]
I need to share a Virtual Machine Appliance with a third party for a Pen Test.
The physical machine, where the VM is extracted, has an encrypted LUKS block device unlocked by TPM, when tampering with the boot, the machine asks for the encr… Continue reading How to avoid tampering a shared virtual machine
Recently I had been reading up on the wear leveling mechanisms of SSDs and other flash storages.
Given that I purchase and sell a lot of used flash storages no longer needed, I’m wondering if there’s a way to maximise the effect of data sa… Continue reading Would it be viable to sanitize deleted unencrypted data with with encryption afterwards for flash storages? [closed]
I created luks2 device with default options which used aes-xts with 512b key size.I figured out that 256b is somewhat faster than 512b from benchmarks. So, I just want to use 256b but not sure if it’s possible or not using cryptsetup comma… Continue reading is it possible to change luks2 –key-size from 512b to 256b without losing data?
I want to completely encrypt my USB drive with luks. In what order should the partition table and luks container be created? First, should I create the partition table and then the luks container, or should I create a container with the pa… Continue reading What is the order in which to create the partition table and luks container?