Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.
Sign upCryptsetup Nuke Keys Patch #921
Comments
marmarek
added
enhancement
C: other
P: major
labels
Mar 8, 2015
This comment has been minimized.
Show comment
Hide comment
This comment has been minimized.
|
Modified by marmarek on 11 Nov 2014 02:44 UTC |
marmarek
added this to the
Release 3 milestone
Mar 8, 2015
This comment has been minimized.
Show comment
Hide comment
This comment has been minimized.
marmarek
Mar 8, 2015
Member
Comment by John on 2 Dec 2014 05:53 UTC
The pros and cons are described in section 5.21 of the official FAQ of the cryptsetup project:
https://github.com/mbroz/cryptsetup/blob/master/FAQ
In short: it fails to increase security to any significant degree.
|
Comment by John on 2 Dec 2014 05:53 UTC https://github.com/mbroz/cryptsetup/blob/master/FAQ In short: it fails to increase security to any significant degree. |
marmarek
modified the milestones:
Release 3.1,
Release 3.0
May 23, 2015
marmarek
modified the milestones:
Far in the future,
Release 3.1
Oct 3, 2015
andrewdavidwong
added
the
help wanted
label
Jun 12, 2016
This comment has been minimized.
Show comment
Hide comment
This comment has been minimized.
andrewdavidwong
Jun 30, 2016
Member
Recent discussion about the usefulness of this feature:
https://groups.google.com/d/topic/qubes-users/1Qu0v2b7-bg/discussion
andrewdavidwong
commented
Jun 30, 2016
•
edited
Edited 1 time
-
andrewdavidwong
edited Jun 30, 2016 (most recent)
edited
-
Jun 30, 2016 (most recent)
|
Recent discussion about the usefulness of this feature: |
This comment has been minimized.
Show comment
Hide comment
This comment has been minimized.
andrewdavidwong
Jul 1, 2016
Member
Older thread on the same topic:
https://groups.google.com/d/msg/qubes-users/tKOVanAupFE/jkOYaN44zksJ
|
Older thread on the same topic: |
marmarek commentedMar 8, 2015
Reported by anonymous on 9 Nov 2014 21:03 UTC
Feature Request: Cryptsetup Nuke Keys Patch
Upstream Provider: Kali Linux
Kali Linux webpage: kali.org
Nuke Keys Git Repo: https://github.com/offensive-security/cryptsetup-nuke-keys
Arch Linux AUR package: https://aur.archlinux.org/packages/cryptsetup-nuke-keys/
Where: dom0
Purpose: Allows user to erase keyslots using an alternate "nuke" password.
Easier than other erasure methods.
Does not require input of decryption password.
Resistant to user error via overwriting non-keyslot data using alternate erasure methods.
How: User chooses a 'nuke' passphrase.
Upon using nuke passphrase, all keyslots are wiped, rendering drive unusable.
Keyslots can be restored later using keyslot backups.
Note: May require modification from original files to work.
Migrated-From: https://wiki.qubes-os.org/ticket/921