Cryptsetup-nuke-password

noise617

Has anyone played with this program?

The software cryptsetup-nuke password is a software developed by Offensive Security and publish under GPLv3 licence. [...] It allows to define an additional password which can also be typed in the cryptsetup password prompt, but allows to destroy the decryption key of the cryptsetup volumes in order to prevent its unlocking.

noise617

Hi,
I am still interested if anyone has tested this program. Someone must have since the program is in the Solus repository.

To put it short, the program allows emergency erasure of data on encrypted drives, during password entry. It may be useful for journalists who work with sensitive information, e. g.

Does it work as intended? Can it be relied on?

noise617

I am flying to Russia. Customs officers there sometimes forcefully check people's phones, I think they may check the laptop as well. Guys, has anyone tried out cryptsetup-nuke-password on Solus? I want to have an erasure option just in case. At the same time, I don't want to risk accidently erasing everything after doing something wrong : )

WetGeek

noise617 I am flying to Russia.

Would it make sense to clone your HDD or SSD and leave the original at home until you return from Russia? Things are bound to be pretty messy there, given the current war.

Or to put an inocent un-encrypted SSD in the laptop, and carry the original in luggage? Or would they be likely to assume that was evidence of smuggling (or spying)?

You're in an interesting situation.

elfprince

noise617 How about encrypting and storing data you need in the cloud, and downloading it in Russia, after you arrived?

WetGeek

elfprince storing data you need in the cloud

I wish I'd thought of that. What are the chances he'll be able to connect to his cloud from Russia? They're reputed to be pretty particular about what's available online to civilians.

elfprince

WetGeek That is a valid point to consider and research before the trip. What other option is there, if they search the luggage? The scans will reveal all tech stuff.

WetGeek

elfprince What other option is there,

I don't know what other options would be safe, or lead to prison for spying. Russia prevents residents from getting any news that's not presented by the government, and not much of it is true. That's why I was thinking that a cloud service might be impossible to connect with from there. If it could be, that would be the best idea so far.

WetGeek

WetGeek If it could be, that would be the best idea so far.

Of course, retrieving encrypted data from a cloud service would probably be filtered through the GRU. There's probably little encryption that they can't break. Or put one in jail for using it.

noise617

I remember a story I heard from a Russian oppositional journalist covering some war, years ago. She was detained by a Russian soldier and ordered to give access to her computer. When hesitating, she was told, "Do you want me to break your finger or what?"

I guess what this program, cryptsetup-nuke-password, could be good for is making the PC look as if it is broken. If it is broken, what is there to be demanded from the owner.

Thank you for the answers though. I passed through the border. A customs officer asked me some weird questions, indeed. Probably because I was flying from Southern Europe. But my PC or phone were not searched.

WetGeek

noise617 But my PC or phone were not searched.

That's a relief! I was a bit worried about you, and I'm sure others here were as well. Are you home now?

noise617

WetGeek Yes, thank you.