On Wed, May 26, 2021 at 08:00:32 CEST, Michael Kjörling wrote: > On 25 May 2021 11:44 +0000, from xxjacs@xxxxxxxxx (JAC): > > Once the option 2 password is entered, the system will decrypt > > correctly but "covertly". > > The partition will be presented containing a series of files and/or > > directories that the user has previously wanted to incorporate and > > present to whoever has tried to force him to reveal his data. > > /.../ > > I suppose that I am not the first person who thinks about this > > solution, but I leave it there, in case it is possible to implement > > this second option (or password). > > No, you're not the first person to think about having something like > this. In fact, it's covered in the LUKS FAQ, and has been for a while. > <https://gitlab.com/cryptsetup/cryptsetup/-/wikis/FrequentlyAskedQuestions> > > See in particular questions 5.2 "Is LUKS insecure? Everybody can see I > have encrypted data!" and 5.18 "What about Plausible Deniability?". If you have feedback, comments or questions for these (or other) FAQ items, please let me know. Arno -- Arno Wagner, Dr. sc. techn., Dipl. Inform., Email: arno@xxxxxxxxxxx GnuPG: ID: CB5D9718 FP: 12D6 C03B 1B30 33BB 13CF B774 E35C 5FA1 CB5D 9718 ---- A good decision is based on knowledge and not on numbers. -- Plato If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier _______________________________________________ dm-crypt mailing list -- dm-crypt@xxxxxxxx To unsubscribe send an email to dm-crypt-leave@xxxxxxxx