Custom Commands: Nuking cryptsetup keyslots
HulaHoopWhonix opened this issue · 2 comments
HulaHoopWhonix commented
I don't know if custom commands are supported but nuking cryptsetup keyslots would be a good option.
cc/ @adrelanos
HulaHoopWhonix commented
EDIT:
On SSDs this won't be of value because wear levelling prevents proper erasure. Might make the feature not worth it. Or needs a disclaimer
Deleted user commented
You can add custom commands in the .ini file.
The commands are
cryptsetup erase [] or
cryptsetup luksErase []
Be aware that there is no sanity check for this command. This will render your entire partition to be unrecoverable. The key is used to decrypt a certain part of the LUKS header to make sure that it is the correct key. Without this, it is theoretically or practically impossible to recover the true plaintext.