this post was submitted on 31 May 2024
13 points (78.3% liked)

Privacy

37176 readers
221 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Hello,

Suppose you have a PC with 2 separate SSDs. One is an install of Windows 11. The other is an install of a Linux distro, encrypted at time of installation (for example, with LUKS). Obviously you would only boot into one or the other at a time.

So a dual-boot, but each boot portion is on its own SSD (not sure if this matters, but its a relevant scenario).

Can the Windows 11 portion somehow get through the Linux encryption and access / read data on the Linux portion?

Sorry if this is a stupid or obvious question.

top 14 comments
sorted by: hot top controversial new old
[–] PonyOfWar@pawb.social 40 points 10 months ago (1 children)

Not without the encryption key, no.

[–] mayra@lemmy.world 2 points 10 months ago (1 children)
[–] mindlight@lemm.ee 5 points 10 months ago* (last edited 10 months ago) (1 children)

Not even if Windows and Linux were on different partitions on the same disk would Windows be able to access the files on the Linux partition without the key.

Just pointing out that s separate disks doesn't change anything. The data, in its encrypted form, will be inaccessible without the decryption key.

[–] mayra@lemmy.world 1 points 10 months ago

Thank you! Good to know.

[–] glouriousgouda@lemmy.myserv.one 8 points 10 months ago (2 children)

Sure you can. Here's one way that looks similar how I do it using wsl. This assumes you're on an EXT4 file system.

https://superuser.com/questions/584883/how-can-i-access-volumes-encrypted-with-luks-dm-crypt-from-windows#936284

There's quite a few options for this but this should at least get you closer to your goal.

I use btrfs on my Linux installs now and there's a windows driver that is phenomenal for that here.

https://github.com/maharmstone/btrfs

Good luck!

[–] mayra@lemmy.world 5 points 10 months ago (1 children)

Thanks for the detailed reply. Just to clarify, I'm asking if the Windows 11 system itself, without my intervention, can access the encrypted Linux portio on its own. Something like a system scan.

[–] viking@infosec.pub 7 points 10 months ago (1 children)

No, that's the whole point of using encryption. If the windows boatloader had a means of scanning the content of an encrypted file system, it would have already been exploited to circumvent encryption.

[–] mayra@lemmy.world 2 points 10 months ago

Thanks! That makes sense.

[–] glouriousgouda@lemmy.myserv.one 2 points 10 months ago

Heck just read the updates on that post linked above and it looks like someone wrote something just for this. My bad for missing it earlier. It is linked in the 4th-ish answer down.

https://github.com/AlexSSD7/linsk

[–] Lemongrab@lemmy.one 4 points 10 months ago

It can access the encrypted data and any unencrypted startup software that hands things off to the OS after decryption.

[–] Scolding0513@sh.itjust.works 4 points 10 months ago (1 children)

that would be pretty bad if it could. but no, there are no known ways to break luks encryption afaik.

never have a Windows partition on the same machine as an unencrypted ext4 partition/drive!! or any other unencrypted drive for that matter. Windows is fully capable of accessing them and sending data about your personal files back to Microdick HQ

[–] mayra@lemmy.world 1 points 10 months ago
[–] MonkderDritte@feddit.de -3 points 10 months ago (1 children)

an encrypted Linux portion

So, uh, encrypted file or folder?