* [dm-crypt] Loading the LUKS header from an external source?
[not found] <mailman.0.1394805225.14707.dm-crypt@saout.de>
@ 2014-03-14 14:03 ` Michael Enßlin
2014-03-14 14:30 ` .. ink ..
0 siblings, 1 reply; 3+ messages in thread
From: Michael Enßlin @ 2014-03-14 14:03 UTC (permalink / raw)
To: dm-crypt
[-- Attachment #1: Type: text/plain, Size: 411 bytes --]
Hi,
is there a way of loading the LUKS header from an external file, so that
the first sector of the hard disk will actually be the first sector of
the encrypted partition, and the whole disk will look like pure random data?
If those features are currently not available, plain dm-crypt seems
preferrable mainly for plausible deniability reasons. Please consider
this a feature request.
Michael
[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 901 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [dm-crypt] Loading the LUKS header from an external source?
2014-03-14 14:03 ` [dm-crypt] Loading the LUKS header from an external source? Michael Enßlin
@ 2014-03-14 14:30 ` .. ink ..
2014-03-14 16:58 ` Milan Broz
0 siblings, 1 reply; 3+ messages in thread
From: .. ink .. @ 2014-03-14 14:30 UTC (permalink / raw)
To: Michael Enßlin; +Cc: dm-crypt@saout.de
[-- Attachment #1: Type: text/plain, Size: 497 bytes --]
On Fri, Mar 14, 2014 at 10:03 AM, Michael Enßlin <michael@ensslin.cc> wrote:
> Hi,
>
> is there a way of loading the LUKS header from an external file, so that
> the first sector of the hard disk will actually be the first sector of
> the encrypted partition, and the whole disk will look like pure random
> data?
>
>
yes,look at "--header" option in cryptsetup's documentation.
From the terminal,type "man cryptsetup" and then look for "--header" entry
in the "OPTIONS" section.
[-- Attachment #2: Type: text/html, Size: 871 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [dm-crypt] Loading the LUKS header from an external source?
2014-03-14 14:30 ` .. ink ..
@ 2014-03-14 16:58 ` Milan Broz
0 siblings, 0 replies; 3+ messages in thread
From: Milan Broz @ 2014-03-14 16:58 UTC (permalink / raw)
To: dm-crypt; +Cc: michael
On 03/14/2014 03:30 PM, .. ink .. wrote:
> On Fri, Mar 14, 2014 at 10:03 AM, Michael Enßlin <michael@ensslin.cc <mailto:michael@ensslin.cc>> wrote:
>
> Hi,
>
> is there a way of loading the LUKS header from an external file, so that
> the first sector of the hard disk will actually be the first sector of
> the encrypted partition, and the whole disk will look like pure random data?
>
>
> yes,look at "--header" option in cryptsetup's documentation.
>
> From the terminal,type "man cryptsetup" and then look for "--header" entry in the "OPTIONS" section.
Exactly and using external header also allows to set data offset to start of the disk,
exactly what you want.
All is also described in release notes for 1.4 http://code.google.com/p/cryptsetup/wiki/Cryptsetup140
Milan
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2014-03-14 16:58 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <mailman.0.1394805225.14707.dm-crypt@saout.de>
2014-03-14 14:03 ` [dm-crypt] Loading the LUKS header from an external source? Michael Enßlin
2014-03-14 14:30 ` .. ink ..
2014-03-14 16:58 ` Milan Broz
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox