search

xmikos / SnooperStopper

Android device ecryption password manager and failed unlock attempts monitor
GNU General Public License v3.0
48 stars 7 forks source link

[Feature Idea] Nuke Password #20

Open killathe opened 7 years ago

killathe commented 7 years ago

The addition your App provides to the Cryptfs Password Manager is incredible. Your App is one of the first I install on a fresh Android, it's a must have, if you use encryption. I recently thought about how this concept could be improved even more. Maybe you are familiar with the Kali Linux LUKS Nuke feature. https://www.kali.org/tutorials/emergency-self-destruction-luks-kali/ In short it lets you set a nuke-password which purges your keys. So if someone is forcing you to decrypt your storage you can safe your data by entering the nuke-password instead of the decrypt-password. I'm not a developer but I think it might be possible on Android too. Cryptsetup also uses dm-crypt. But other than LUKS Androids encryption only allows one single key in its crypto footer. But it seems you need 2 keyslots, one for the real and one for the nuke key. I don't know for shure, let me know what you think.

licaon-kter commented 7 years ago

That would need a Custom ROM I guess.

0x5ECF4ULT commented 6 years ago

@killathe this is a VERY cool suggestion but unfortunately @licaon-kter is right... It would need a custom ROM or a patch to the built-in cryptsetup utility. If you are a developer you can create a PR. Otherwise I would create a PR

0x5ECF4ULT commented 5 years ago

Update: It wouldn't need a custom ROM. The app could make a backup of the system partition and patch the binary afterwards. There ARE official ways to patch the binary we are talking about, but I don't know how to accomplish this on Android... Research time! xD