From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gmazyland@gmail.com>
Received: from mail-ee0-x22a.google.com (mail-ee0-x22a.google.com
 [IPv6:2a00:1450:4013:c00::22a])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (No client certificate requested)
 by mail.saout.de (Postfix) with ESMTPS
 for <dm-crypt@saout.de>; Sun, 18 May 2014 23:40:16 +0200 (CEST)
Received: by mail-ee0-f42.google.com with SMTP id d49so3083223eek.29
 for <dm-crypt@saout.de>; Sun, 18 May 2014 14:40:15 -0700 (PDT)
Message-ID: <537928BD.2050205@gmail.com>
Date: Sun, 18 May 2014 23:40:13 +0200
From: Milan Broz <gmazyland@gmail.com>
MIME-Version: 1.0
References: <8972d8ed032baa9dc5592e9166170780.squirrel@bitmailendavkbec.onion>
In-Reply-To: <8972d8ed032baa9dc5592e9166170780.squirrel@bitmailendavkbec.onion>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: Re: [dm-crypt] Hidden operating system
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: BM-2cXweg5fL3NmCN6HDmMuL5VbmDXbeRaSCM@bitmessage.ch, dm-crypt@saout.de

On 05/18/2014 10:22 AM, BM-2cXweg5fL3NmCN6HDmMuL5VbmDXbeRaSCM@bitmessage.ch wrote:
> Hi evereyone,
> Is anything like that
> http://www.truecrypt.org/docs/hidden-operating-system possibile with linux
> and cryptsetup? I would even use TrueCrypt to do such thing, but even with
> it it is only supported on Windows.
> Actually i prefer do to that with passphrases only, since usb with luks
> header, bootloader or keyfile are something that i can lost and also can
> compromise the plausible deniability. I hope everyone understands and
> thanks in advance.

Well, for hidden OS you need to have special bootloader (TrueCrypt bootloader
decides what OS to boot according to provided passphrase).

Also hidden disk/OS is limited to FAT (for outer volume) only, so I think
it is not possible to easily do this for Linux (where you need other
filesystem).


What is probably possible is to use Truecrypt boot loader and install
Linux with some bootloader hacks and boot to "hidden" Linux OS.

But it would be tricky to do that and it would be very fragile.

Milan