Collaborate Disseminate
I wrote two sets of scripts for use on linux in root environment to sanitise storage drives. Would like to seek your advice on the implementations (Is is redundant? Is it an overkill or could the scripts be simplified?)
Script A (Targeting… Continue reading Opinions on Data Sanitisation (SSD/HDD/USB flashdrives) [closed]
I need to share a Virtual Machine Appliance with a third party for a Pen Test.
The physical machine, where the VM is extracted, has an encrypted LUKS block device unlocked by TPM, when tampering with the boot, the machine asks for the encr… Continue reading How to avoid tampering a shared virtual machine
Recently I had been reading up on the wear leveling mechanisms of SSDs and other flash storages.
Given that I purchase and sell a lot of used flash storages no longer needed, I’m wondering if there’s a way to maximise the effect of data sa… Continue reading Would it be viable to sanitize deleted unencrypted data with with encryption afterwards for flash storages? [closed]
I created luks2 device with default options which used aes-xts with 512b key size.I figured out that 256b is somewhat faster than 512b from benchmarks. So, I just want to use 256b but not sure if it’s possible or not using cryptsetup comma… Continue reading is it possible to change luks2 –key-size from 512b to 256b without losing data?
I want to completely encrypt my USB drive with luks. In what order should the partition table and luks container be created? First, should I create the partition table and then the luks container, or should I create a container with the pa… Continue reading What is the order in which to create the partition table and luks container?
My goal is to fully encrypt my USB drive with LUKS.
What’s the correct order of encryption?
Should I create the partition table or the LUKS container first?
Motivation behind would be greatly appreciated.
Continue reading In what order should you create the partition table and a LUKS container?
If somebody gets my LUKS header and the encrypted disk (but not the passphrase).
What can he do? What is the security risk of storing the LUKS header on a public or semi-public share?
Continue reading Can I store the LUKS header on a public share?
Let’s say I have password "password" for my drive using LUKS2. And then I change it to something really unguessable. The slot with password is overwritten. But, on SSD it is not really overwritten but remapped. And trimming on my… Continue reading Changing password on LUKS2 and SSD
I have been using cryptsetup for a while now and just found out about the option ‘luksDump’. I am used to similar tools like veracrypt and truecrypt and I am a bit shocked that all these vulnerable data are so easily accessible. If I remem… Continue reading Just found out about luksDump in LUKS (cryptsetup), Is there a way to hide all these sensitive data like used cipher and hash?
In the Cryptsetup Frequently Asked Questions page it says:
You are asked a passphrase of an existing key-slot first, before you can enter the passphrase for the new key-slot. Otherwise you could break the encryption by just adding a new k… Continue reading Bypass encryption by altering source code