Hacker News new | ask | show | jobs
by dontupvoteme 794 days ago
It always seemed like the 'fake' encrypted data, e.g. hidden volumes on veracrypt[1] seemed like one of the better options for these situations. Obviously phones don't have them and the data has to be believable, but it gives you an out.

1 - (I'm not sure what this is technically called)

1 comments

One of the older and more entertaining names is Rubber hose encryption.

When faceless Zombie thugs of a military junta beat you with a rubberhose you can give up successive passwords to deeper and deeper "secrets" until finally(???) your embarrasing stash of midget donkey necro porn is revealed!! .. and no one can ever establish whether there is yet another password that hides your local contacts in the resistance.

The success of this may vary in practice and black site .. but mathematically the theory is sound.

Today we have the less evocative name Deniable encryption.

Fun Trivia:

    Rubberhose (also known by its development codename Marutukku) is a deniable encryption program which encrypts data on a storage device and hides the encrypted data. The existence of the encrypted data can only be verified using the appropriate cryptographic key. It was created by Julian Assange, Suelette Dreyfus, and Ralf Weinmann as a tool for human rights workers who needed to protect sensitive data in the field and was initially released in 1997.
https://en.wikipedia.org/wiki/Deniable_encryption

https://theconversation.com/profiles/suelette-dreyfus-1102/a...