Emergency Self Destruction of LUKS in Kali

[aelius]

Kali Linux Full Disk Encryption

As penetration testers, we often need to travel with sensitive data stored on our laptops. Of course, we use full disk encryption wherever possible, including our Kali Linux machines, which tend to contain the most sensitive materials.

Setting up full disk encryption with Kali is a simple process. The Kali installer includes a straightforward process for setting up encrypted partitions with LVM and LUKS. Once encrypted, the Kali operating system requires a password at boot time to allow the OS to boot and decrypt your drive, thus protecting this data in case your laptop is stolen. Managing decryption keys and partitions is done using the cryptsetup utility.

Nuking our Kali Linux FDE Installation

A couple of days ago, one of us had the idea of adding a “nuke” option to our Kali install. In other words, having a boot password that would destroy, rather than decrypt, the data on our drive. A few Google searches later, we found an old cryptsetup patch by Juergen Pabel which does just that, adding a “nuke” password to cryptsetup, which when used, deletes all keyslots and makes the data on the drive inaccessible. We ported this patch for a recent version of cryptsetup and posted it on Github.

Read more: Emergency self-destruction of LUKS in Kali | Kali Linux

[yo20063]

Super tare...laptopu' la gabori:

-Gaborul "Ba copile da parola ca te sparg cu bataia!"

-Kid "Poftim....'password'"

-Laptopu' "Begining data incineration...10%....50%....100%....Done!"

-Kid "Oups!"

//Done!

Edited January 8, 2014 by yo20063