this post was submitted on 31 May 2024
13 points (78.3% liked)

Privacy

29798 readers
786 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago
MODERATORS
 

Hello,

Suppose you have a PC with 2 separate SSDs. One is an install of Windows 11. The other is an install of a Linux distro, encrypted at time of installation (for example, with LUKS). Obviously you would only boot into one or the other at a time.

So a dual-boot, but each boot portion is on its own SSD (not sure if this matters, but its a relevant scenario).

Can the Windows 11 portion somehow get through the Linux encryption and access / read data on the Linux portion?

Sorry if this is a stupid or obvious question.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 8 points 1 month ago (2 children)

Sure you can. Here's one way that looks similar how I do it using wsl. This assumes you're on an EXT4 file system.

https://superuser.com/questions/584883/how-can-i-access-volumes-encrypted-with-luks-dm-crypt-from-windows#936284

There's quite a few options for this but this should at least get you closer to your goal.

I use btrfs on my Linux installs now and there's a windows driver that is phenomenal for that here.

https://github.com/maharmstone/btrfs

Good luck!

[–] [email protected] 5 points 1 month ago (1 children)

Thanks for the detailed reply. Just to clarify, I'm asking if the Windows 11 system itself, without my intervention, can access the encrypted Linux portio on its own. Something like a system scan.

[–] [email protected] 7 points 1 month ago (1 children)

No, that's the whole point of using encryption. If the windows boatloader had a means of scanning the content of an encrypted file system, it would have already been exploited to circumvent encryption.

[–] [email protected] 2 points 1 month ago

Thanks! That makes sense.

[–] [email protected] 2 points 1 month ago

Heck just read the updates on that post linked above and it looks like someone wrote something just for this. My bad for missing it earlier. It is linked in the 4th-ish answer down.

https://github.com/AlexSSD7/linsk