martijnvanbrummelen / nwipe

nwipe secure disk eraser
GNU General Public License v2.0
631 stars 71 forks source link

[Feature request] Add special option to detect encrypted partitions and only erase decryption key #584

Open LoHub opened 1 week ago

LoHub commented 1 week ago

Hello and thank you for your wonderful software.

Is it acceptable to add an option to only erase metadata on encrypted partitions (like LUKS or BitLocker) to speedup erasure since without this metadata content is definitively unrecoverable. Of course it is not as secure as a real erasure but I do not know any means to recover data if header is correctly erase.

For example LUKS metadata can be removed like this :

cryptsetup erase /dev/sdX # Definitively erase decryption keys
wipefs -a /dev/sdX # Erase filesystem signature

Or it could be simpler to parse header then extract start and end offsets and erase it at block level.

Thanks for reading