Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

"Nuke" password developed for full disk encryption in Kali Linux

  • 29-05-2014 3:44pm
    #1
    Recondite49
    Closed Accounts Posts: 1,004 ✭✭✭


    Linux Today points out that rightly that this is simply implementing an existing patch and provides instructions on how to apply this to any Debian based distro like Ubuntu or Linux Mint. I will post link on here when able.

    On the face of it, this seems very impressive. You have another password which can be inputted to your computer in the case of duress or seizure which will erase the Master Keys and leave your volume still encrypted.

    Even better when you enter the special "nuke" password, it simply registers as an invalid password so there's no way for an adversary to tell what you've done unless you tell them.

    My only concerns about this are :

    1. It would be a very stupid Police Officer indeed who allowed you to enter the password on the original device without first backing up the HDD.

    2. Wouldn't it be fairly trivial from examining the boot loader to see that this patch had been applied?

    3. If you tried to use this to escape compulsory key disclosure laws (e.g RIPA in the UK), this wouldn't register as a valid password, and therefore you'd be in a position where you'd be unable to supply the correct key. As such you could risk prosecution if you erase the Master Key but on the plus side, in practical terms it would be near impossible to get at your files.

    Any thoughts on this?


Advertisement