From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <test532@codingninjas.org>
Received: from op7.codingninjas.org (op7.codingninjas.org [209.222.52.116])
	(using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits))
	(No client certificate requested)
	by mail.saout.de (Postfix) with ESMTPS
	for <dm-crypt@saout.de>; Thu, 17 Sep 2009 20:28:25 +0200 (CEST)
Received: from sschai.localnet
	(CPE0080c6e9d913-CM000f9f4fecc0.cpe.net.cable.rogers.com
	[99.249.56.245])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by op7.codingninjas.org (Postfix) with ESMTPSA id EFDE44E2219
	for <dm-crypt@saout.de>; Thu, 17 Sep 2009 14:30:40 -0400 (EDT)
From: test532@codingninjas.org
Date: Thu, 17 Sep 2009 14:26:37 -0400
References: <200909142004.49035.test532@codingninjas.org>
	<slrnhb2faq.dbe.Mario.Holbe@darkside.dyn.samba-tng.org>
	<20090916214137.GC20202@tansi.org>
In-Reply-To: <20090916214137.GC20202@tansi.org>
MIME-Version: 1.0
Content-Type: Text/Plain;
  charset="us-ascii"
Content-Transfer-Encoding: 7bit
Message-Id: <200909171426.38117.test532@codingninjas.org>
Subject: Re: [dm-crypt] cryptsetup, LUKS, plausible deniability
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
	<mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
	<mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

I blank out with random data any hard drive I no longer use (as it is too 
small, too slow, Etc). These are filled with just that, random data; No 
encrypted data left on those drives.

=

plausible deniability


> On Wed, Sep 16, 2009 at 09:32:39PM +0200, Mario 'BitKoenig' Holbe wrote:
> > Sarah Dean <sdean12@sdean12.org> wrote:
> > > On Mon, 14 Sep 2009 20:04:48 -0400, test532@codingninjas.org wrote:
> > >>external luks header feature that Rick mentioned. dm-crypt comes with
> > >>practically every linux. Therefor, having dm-crypt installed on one's
> > >> system means nothing.
> >
> > dm-crypt on a system together with lots of random-like data just means
> > something more.
> 
> Indeed. And the presence of encrypted/random data can be tested for
> with relatively low effort.
> 
> Arno
>