Due to the anti-forensic properties of the key-stripes, any normal delete is already better than a "secure" one. So, no, it does not. I recomment reading the on-disk specification instead and realizing what you want to do is entirely unneccessary. Also refer to FAQ Item 5.4 if you are trying to do this on SSD. Regards, Arno On Sun, Apr 29, 2018 at 03:26:46 CEST, tripleedgedsword wrote: > I've been looking at the command luksRemoveKey recently. I was > wondering if a "cryptsetup luksRemoveKey" command securely deletes the > part of the storage device on which the key was stored. > > If not, where do the key slots store their keys, and how would we wipe > the unallocated space on the drive to make sure all traces of old keys > are truly removed? > _______________________________________________ > dm-crypt mailing list > dm-crypt@xxxxxxxx > https://www.saout.de/mailman/listinfo/dm-crypt -- Arno Wagner, Dr. sc. techn., Dipl. Inform., Email: arno@xxxxxxxxxxx GnuPG: ID: CB5D9718 FP: 12D6 C03B 1B30 33BB 13CF B774 E35C 5FA1 CB5D 9718 ---- A good decision is based on knowledge and not on numbers. -- Plato If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx https://www.saout.de/mailman/listinfo/dm-crypt
