From: Milan Broz <gmazyland@gmail.com>
To: Peter Grandi <pg@dmcrypt.list.sabi.co.UK>,
list Linux dm-crypt <dm-crypt@saout.de>
Subject: [dm-crypt] Re: secure use of cryptsetup by non-root
Date: Sun, 8 Aug 2021 21:48:03 +0200 [thread overview]
Message-ID: <c04c0190-3daa-2fa6-12e4-aeb0d3b712cc@gmail.com> (raw)
In-Reply-To: <24848.9698.412863.219395@cyme.ty.sabi.co.uk>
On 08/08/2021 20:43, Peter Grandi wrote:
...
>> (It is tricky with only cryptsetup, but it is possible through
>> using null cipher with block device.)
>
> That could be disabled by recompiling the kernel, not that it is
> essential given the above.
Then just setup an encrypted device with a known key and use
userspace app to reverse it by running encrypt/decrypt operation.
There are more tricks, it is not secure.
Milan
_______________________________________________
dm-crypt mailing list -- dm-crypt@saout.de
To unsubscribe send an email to dm-crypt-leave@saout.de
next prev parent reply other threads:[~2021-08-08 19:51 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <1876586861.281618.1628426928218.ref@mail.yahoo.com>
2021-08-08 12:48 ` [dm-crypt] secure use of cryptsetup by non-root JT Morée
2021-08-08 13:16 ` [dm-crypt] " Milan Broz
2021-08-08 18:43 ` Peter Grandi
2021-08-08 19:48 ` Milan Broz [this message]
2021-08-09 12:03 ` JT Morée
2021-08-08 18:06 ` Peter Grandi
2021-08-09 12:27 ` JT Morée
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=c04c0190-3daa-2fa6-12e4-aeb0d3b712cc@gmail.com \
--to=gmazyland@gmail.com \
--cc=dm-crypt@saout.de \
--cc=pg@dmcrypt.list.sabi.co.UK \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox