Tag Info

New answers tagged

0

For luks particularly there is a way to detach the luks header from the rest of the data. I've often used it as a sort of 2fa for fully encrypted systems. First copy the luks header somewhere else: cryptsetup luksHeaderBackup windows.vdi --header-backup-file header.img Then erase it from the original location: dd if=/dev/urandom of=windows.vdi bs=1M ...


2

What you are looking for is called steganography, it is a branch of cryptography. You can read wikipedia just for a fast start: http://en.wikipedia.org/wiki/Steganography Thereafter, you can find that there are a couple of open-source tools to "stego" any container into .jpg or even .avi. Such a stego-container looks like a .jpg or .avi file. Moreover, ...


2

You could append the encrypted LUKS partition to any streamable file that is significantly larger than it, such as an mp3 file: $ cat beethovens_9th.mp3 windows.vdi > beethovens_9th_with_partition.mp3 The file will still play in most MP3 software, and will show as an MP3 file when using the file command. You will need to know the exact size of the ...


1

The whole of your story consists in: The idea is that in a situation where one can not resist a demand to provide passwords (for instance if he is captured physically and tortured), he should be able to deny the very existence of any encryption. Your goal, even if you reach it, is seriously criticized using rubber hose cryptanalysis which could ...


15

What you're looking for is called deniable encryption. There are two forms of deniable encryption. The first sort is "information-theoretic" deniable encryption: encryption where no mathematical analysis an attacker can perform can prove that a file is encrypted data and not a collection of random bytes. The second sort is "real-world" deniable ...


5

Reading at your answers, what you want is called deniable encryption. It's done by hidding an encrypted container in another encrypted container. That is because when you encrypt, the cipher text looks like random if you don't know the key. Just by searching random in your harddrive, someone can have a good guess that you have encrypted some data and ask ...


2

You could encrypt the file with a second type of encryption, say 'GPG' or similar, and then the file command would not be able to determine the 'inner' file type. Alternatively, just do something really simple like XOR-ing the file with the same file content with a one byte offset (for example), or base64 the file etc. It depends on how much you want to ...


2

Actually no matter the filename and file type is changed, the content still gives the fingerprint of the file type. So if you want to hide something in a system, you better store it in your own folder, assigning the permission of access/write to the file. Although root user can still access the file, however it can prevent other users (normal users) ...



Top 50 recent answers are included