Re: last mount time
Arno Wagner <[email protected]> Wed, 26 May 2021 00:44:56 +0200
| Newsgroups | gmane.linux.kernel.device-mapper.dm-crypt |
|---|---|
| Message-ID | <[email protected]> |
No. At least not the LUKS layer. LUKS does not write anything to its metadata on mount. For the FS within the LUKS container, the usual things apply. Regards, Arno On Mon, May 24, 2021 at 20:45:55 CEST, u961866-q7wo9g+UVklWk0Htik3J/[email protected] wrote: > Can a forensic investigation of a Tails SSD with encrypted LUKS > persistent storage reveal any information about the last time the > persistent storage was mounted? > > -- > > Sent with Tutanota, the secure & ad-free mailbox: > > https://tutanota.com > _______________________________________________ > dm-crypt mailing list -- [email protected] > To unsubscribe send an email to [email protected] -- Arno Wagner, Dr. sc. techn., Dipl. Inform., Email: [email protected] GnuPG: ID: CB5D9718 FP: 12D6 C03B 1B30 33BB 13CF B774 E35C 5FA1 CB5D 9718 ---- A good decision is based on knowledge and not on numbers. -- Plato If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier _______________________________________________ dm-crypt mailing list -- [email protected] To unsubscribe send an email to [email protected]