Re: Luks, use the double force! :)

Arno Wagner <[email protected]> Wed, 26 May 2021 19:02:06 +0200
Newsgroups gmane.linux.kernel.device-mapper.dm-crypt
Message-ID <[email protected]>
On Wed, May 26, 2021 at 08:00:32 CEST, Michael Kj=F6rling wrote:
> On 25 May 2021 11:44 +0000, from xxjacs-/[email protected] (JAC):
> > Once the option 2 password is entered, the system will decrypt
> > correctly but "covertly".
> > The partition will be presented containing a series of files and/or
> > directories that the user has previously wanted to incorporate and
> > present to whoever has tried to force him to reveal his data.
> > /.../
> > I suppose that I am not the first person who thinks about this
> > solution, but I leave it there, in case it is possible to implement
> > this second option (or password).
>=20
> No, you're not the first person to think about having something like
> this. In fact, it's covered in the LUKS FAQ, and has been for a while.
> <https://gitlab.com/cryptsetup/cryptsetup/-/wikis/FrequentlyAskedQuestion=
s>
>=20
> See in particular questions 5.2 "Is LUKS insecure? Everybody can see I
> have encrypted data!" and 5.18 "What about Plausible Deniability?".

If you have feedback, comments or questions for these (or other)
FAQ items, please let me know.

Arno

--=20
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: [email protected]
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -- Plato

If it's in the news, don't worry about it.  The very definition of=20
"news" is "something that hardly ever happens." -- Bruce Schneier
_______________________________________________
dm-crypt mailing list -- [email protected]
To unsubscribe send an email to [email protected]