this post was submitted on 31 May 2024
13 points (78.3% liked)

Privacy

31954 readers
537 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Hello,

Suppose you have a PC with 2 separate SSDs. One is an install of Windows 11. The other is an install of a Linux distro, encrypted at time of installation (for example, with LUKS). Obviously you would only boot into one or the other at a time.

So a dual-boot, but each boot portion is on its own SSD (not sure if this matters, but its a relevant scenario).

Can the Windows 11 portion somehow get through the Linux encryption and access / read data on the Linux portion?

Sorry if this is a stupid or obvious question.

top 14 comments
sorted by: hot top controversial new old
[–] PonyOfWar@pawb.social 40 points 5 months ago (1 children)

Not without the encryption key, no.

[–] mayra@lemmy.world 2 points 5 months ago (1 children)
[–] mindlight@lemm.ee 5 points 5 months ago* (last edited 5 months ago) (1 children)

Not even if Windows and Linux were on different partitions on the same disk would Windows be able to access the files on the Linux partition without the key.

Just pointing out that s separate disks doesn't change anything. The data, in its encrypted form, will be inaccessible without the decryption key.

[–] mayra@lemmy.world 1 points 5 months ago

Thank you! Good to know.

[–] glouriousgouda@lemmy.myserv.one 8 points 5 months ago (2 children)

Sure you can. Here's one way that looks similar how I do it using wsl. This assumes you're on an EXT4 file system.

https://superuser.com/questions/584883/how-can-i-access-volumes-encrypted-with-luks-dm-crypt-from-windows#936284

There's quite a few options for this but this should at least get you closer to your goal.

I use btrfs on my Linux installs now and there's a windows driver that is phenomenal for that here.

https://github.com/maharmstone/btrfs

Good luck!

[–] mayra@lemmy.world 5 points 5 months ago (1 children)

Thanks for the detailed reply. Just to clarify, I'm asking if the Windows 11 system itself, without my intervention, can access the encrypted Linux portio on its own. Something like a system scan.

[–] viking@infosec.pub 7 points 5 months ago (1 children)

No, that's the whole point of using encryption. If the windows boatloader had a means of scanning the content of an encrypted file system, it would have already been exploited to circumvent encryption.

[–] mayra@lemmy.world 2 points 5 months ago

Thanks! That makes sense.

[–] glouriousgouda@lemmy.myserv.one 2 points 5 months ago

Heck just read the updates on that post linked above and it looks like someone wrote something just for this. My bad for missing it earlier. It is linked in the 4th-ish answer down.

https://github.com/AlexSSD7/linsk

[–] Lemongrab@lemmy.one 4 points 5 months ago

It can access the encrypted data and any unencrypted startup software that hands things off to the OS after decryption.

[–] Scolding0513@sh.itjust.works 4 points 5 months ago (1 children)

that would be pretty bad if it could. but no, there are no known ways to break luks encryption afaik.

never have a Windows partition on the same machine as an unencrypted ext4 partition/drive!! or any other unencrypted drive for that matter. Windows is fully capable of accessing them and sending data about your personal files back to Microdick HQ

[–] mayra@lemmy.world 1 points 5 months ago
[–] MonkderDritte@feddit.de -3 points 5 months ago (1 children)

an encrypted Linux portion

So, uh, encrypted file or folder?