[{"data":1,"prerenderedAt":443},["ShallowReactive",2],{"project-23448608":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":44,"post_text":47,"what":48,"said":75,"maker_in_thread":179,"shape":187,"grid":191,"attempts":403,"same_week":408,"maker_shows":41,"maker_hidden":436,"reader_version":437,"card":438},"23448608","Puree","Password-based Uniform-Random-Equivalent Encryption","title","Show HN: Puree – Password-based Uniform-Random-Equivalent Encryption","http:\u002F\u002Fpuree.cc\u002F","puree.cc","notfed",1591548361,2020,190,82,297,3028,10,"notable","security_privacy","disk encryption","cli",[24,25,26,27],"full disk encryption","deniable encryption","plausible deniability","password-based encryption","mixed",-0.26,{"positive":31,"neutral":32,"mixed":33,"critical":34},4,12,2,14,32,{"idea":37,"privacy":40,"docs":42,"execution":43},{"positive":38,"critical":39},0,6,{"positive":41,"critical":39},1,{"positive":41,"critical":38},{"positive":41,"critical":41},[45,38,38,38,38,46,41,41,41,45,38,45,45,46,38,38,38,45,41,45,38,41,38,38,38,38,38,41,38,38,41,45,41,41,41,38,45,45,45,41],3,5,null,{"problem":49,"audience":47,"pricing":47,"motivation":47,"time_to_build":47,"stack":59,"openness":72,"stage":73,"team_size":74},{"value":50,"source":51,"evidence":52},"Disk encryption whose header is distinguishable from random data, revealing encrypted volumes","maker",[53,56],{"id":54,"by":11,"text":55},"23436039","PUREE stands for \"Password-based Uniform-Random-Equivalent Encryption\". PUREE lets you perform password-based full-disk encryption securely, and in a way that ensures the disk is…",{"id":57,"by":11,"text":58},"23449159","I called this out in the PUREE paper: > To be fair, some tools do support support completely-random-looking disk layouts, but in most cases, they either: > 1. Are key-based…",[60,66],{"value":61,"source":51,"evidence":62},"Argon2id",[63],{"id":64,"by":11,"text":65},"23448842","> DeLUKS Interesting, hadn't seen this project yet, or would have been more careful, thanks. A few thoughts: - The lack of a link to a white paper makes DeLUKS difficult to…",{"value":67,"source":51,"evidence":68},"Linux dm-crypt",[69],{"id":70,"by":11,"text":71},"23449241","> especially the part that allows subvolumes and multiple password slots Admittedly backup headers are not yet implemented. (I had to release an MVP at some point.) > how [is]…","open_source","beta","unknown",{"praise":76,"objections":89,"requests":123,"questions":138,"alternatives":150},[77],{"value":78,"source":79,"evidence":80},"Interesting project with simple design and useful subvolume and multiple password slot features","commenter",[81,85],{"id":82,"by":83,"text":84},"23449085","13415","I really like this, especially the part that allows subvolumes and multiple password slots. One thing I didn't really understand or maybe simply missed in the paper is how data…",{"id":86,"by":87,"text":88},"23449015","p4bl0","I like that the quick start guide uses \u002Fdev\u002Fsdz in the examples, so that copy-pasting will generally not work and you don't risk wiping a disk that actually exists.",[90,101,116],{"value":91,"source":79,"evidence":92},"Deniable encryption is only useful in narrow coercion scenarios",[93,97],{"id":94,"by":95,"text":96},"23449194","GekkePrutser","Interesting, but only useful in a specific situation (decryption coercion). And probably not that effective in such situations. Obligatory XKCD: https:\u002F\u002Fxkcd.com\u002F538\u002F Obviously…",{"id":98,"by":99,"text":100},"23453579","bawolff","From the article: > Clearly, it is trivial to detect that a disk is encrypted with LUKS. In fact, this isn't just a problem with LUKS; but also with most password-based disk…",{"value":102,"source":79,"evidence":103},"Claim of being first is inaccurate; TrueCrypt\u002FVeraCrypt and PGP Disk offer similar features",[104,108,112],{"id":105,"by":106,"text":107},"23448636","rendx","There is https:\u002F\u002Fgithub.com\u002Fkriswebdev\u002Fcryptsetup-deluks: \"The DeLUKS header is designed to be indistinguishible from random data.\" And also volumes by the quite popular…",{"id":109,"by":110,"text":111},"23449328","fortran77","PGP Disk also had \"deniable encryption\". So this is certainly not \"first\" https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FDeniable_encryption Also see the Wikipedia chart for \"Hidden Containers\"…",{"id":113,"by":114,"text":115},"23448964","jchw","TrueCrypt\u002FVeraCrypt can do the same stuff but with physical drives, so yes, the claim of 'first' is inaccurate even with that technicality in mind. The reason why that's not the…",{"value":117,"source":79,"evidence":118},"Only one-pass password hashing without memory hardness in the comparison; key-derivation concerns",[119],{"id":120,"by":121,"text":122},"23449669","simcop2387","No memory hardness and no data dependence. Along with that SHA1 is really simple to implement on ASICs, FPGA, GPUs and such. This means that you can do lots of tests in parallel…",[124,131],{"value":125,"source":79,"evidence":126},"Implement backup headers and subvolume support",[127,128],{"id":70,"by":11,"text":71},{"id":129,"by":11,"text":130},"23449142","I fully admit to prior ignorance of VeraCrypt's abilities. From what I read on their website, I don't disagree with you. I will add that the PUREE specification does support…",{"value":132,"source":79,"evidence":133},"Compare with TrueCrypt disk and container format in the white paper",[134],{"id":135,"by":136,"text":137},"23455171","ComodoHacker","In the white paper I can't find a comparison with or even mention of TrueCrypt disk\u002Fcontainer format, which also offers plausible deniability. Does PUREE improves over it on…",[139,143],{"value":140,"source":79,"evidence":141},"How is data integrity and bad block handling managed",[142],{"id":82,"by":83,"text":84},{"value":144,"source":79,"evidence":145},"Are repeated shadow headers detectable on disk",[146],{"id":147,"by":148,"text":149},"23449244","akkishore","From the white paper: \"If additional shadow headers are used, their suggested locations are (where possible) at the sectors starting at offsets 128MiB, 128GiB, and 128TiB\" Is…",[151,156,163,171,175],{"value":152,"source":79,"evidence":153},"VeraCrypt",[154,155],{"id":105,"by":106,"text":107},{"id":113,"by":114,"text":115},{"value":157,"source":79,"evidence":158},"TrueCrypt",[159],{"id":160,"by":161,"text":162},"23448885","marcinzm","TrueCrypt can also do full disk encryption however full disk encryption is LESS safe than a hidden file\u002Fvolume. The reason is that the lack of a non-encrypted volume on a disk…",{"value":164,"source":79,"evidence":165},"LUKS",[166,170],{"id":167,"by":168,"text":169},"23449043","chc4","You can also simply have LUKS with a detached header - I know some people that have their header and boot partitions exclusively on a USB, so that it's required to be in…",{"id":94,"by":95,"text":96},{"value":172,"source":79,"evidence":173},"DeLUKS",[174],{"id":105,"by":106,"text":107},{"value":176,"source":79,"evidence":177},"PGP Disk",[178],{"id":109,"by":110,"text":111},{"comments":180,"answered":45,"key":181},9,[182,183,184],{"id":64,"text":65},{"id":129,"text":130},{"id":185,"text":186},"23449428","Duly noted, title has been changed.",{"commenters":188,"max_depth":189,"maker_replies":180,"first_comment_mins":38,"lifespan_hours":190},55,8,84,[192,194,196,200,203,206,207,210,211,212,215,216,220,224,228,230,232,234,235,238,241,245,248,250,253,257,260,262,265,267,270,273,275,276,279,280,282,284,288,292,295,298,300,302,304,305,307,310,313,316,319,322,324,327,329,331,334,335,339,342,345,349,352,354,358,360,364,366,368,371,373,375,377,379,382,383,386,389,391,394,398,400],[105,38,45,193,106,38],"project\u002Fmixed\u002Fidea",[64,38,38,195,11,41],"maker\u002Fneutral\u002Fnone",[197,38,38,198,199,38],"23448870","commenter\u002Fneutral\u002Fnone","yjftsjthsd-h",[201,38,38,198,202,38],"23448920","capdeck",[204,38,38,198,205,38],"23449059","frei",[160,38,38,198,161,38],[208,38,38,198,209,38],"23455367","StavrosK",[113,38,38,198,114,38],[129,38,38,195,11,41],[213,38,38,198,214,38],"23449324","cortesoft",[185,38,38,195,11,41],[217,38,46,218,219,38],"23452519","maker\u002Fpositive\u002Fnone","Myce",[221,38,41,222,223,38],"23453727","project\u002Fcritical\u002Fidea","cyphar",[225,38,45,226,227,38],"23449394","project\u002Fneutral\u002Fnone","staticassertion",[229,38,38,226,11,41],"23449447",[120,38,41,231,121,38],"project\u002Fcritical\u002Fprivacy",[233,38,38,198,227,38],"23449733",[167,38,41,222,168,38],[236,38,45,226,237,38],"23449094","comboy",[239,38,38,198,240,38],"23449571","OJFord",[242,38,38,243,244,38],"23450570","other\u002Fneutral\u002Fnone","xwdv",[246,38,38,198,247,38],"23450616","dkdk8283",[57,38,38,249,11,41],"maker\u002Fneutral\u002Fidea",[251,38,45,226,252,38],"23452023","tempay",[254,38,45,255,256,38],"23452263","project\u002Fneutral\u002Fidea","viraptor",[258,38,45,255,259,38],"23454455","jcynix",[86,41,46,261,87,38],"project\u002Fpositive\u002Fdocs",[263,41,38,243,264,38],"23449248","numpad0",[266,41,38,243,87,38],"23449389",[268,41,38,243,269,38],"23449502","K2L8M11N2",[271,41,38,243,272,38],"23449508","Etheryte",[274,41,38,198,87,38],"23450155",[54,33,38,249,11,41],[277,33,38,243,278,38],"23449837","dang",[109,45,41,222,110,38],[82,31,46,281,83,38],"project\u002Fpositive\u002Fexecution",[70,31,38,283,11,41],"maker\u002Fneutral\u002Fexecution",[285,31,41,286,287,38],"23449951","project\u002Fcritical\u002Fexecution","WhatIsDukkha",[289,31,45,290,291,38],"23450080","project\u002Fneutral\u002Fexecution","dheera",[293,31,45,255,294,38],"23450687","fwip",[296,31,45,290,297,38],"23451320","dfox",[299,31,38,198,294,38],"23458180",[301,31,38,198,297,38],"23458338",[303,31,38,198,294,38],"23469431",[94,46,41,222,95,38],[306,46,38,243,240,38],"23449677",[308,46,38,243,309,38],"23450130","cyberbanjo",[311,46,38,243,312,38],"23450171","m3kw9",[314,46,38,243,315,38],"23450411","steelframe",[317,46,38,243,318,38],"23451357","hailwren",[320,46,38,243,321,38],"23454072","dpc_pw",[323,46,38,243,244,38],"23450661",[325,46,38,198,326,38],"23451429","Thorrez",[328,46,38,198,244,38],"23452979",[330,46,38,198,326,38],"23454029",[332,46,38,243,333,38],"23485196","quickthrower2",[98,39,41,222,99,38],[336,337,38,198,338,38],"23449923",7,"modeless",[340,337,38,198,341,38],"23450228","ciarannolan",[343,337,38,198,344,38],"23451232","e12e",[346,337,38,347,348,38],"23451242","commenter\u002Fneutral\u002Fprivacy","phkamp",[350,337,45,351,333,38],"23485203","project\u002Fneutral\u002Fprivacy",[353,189,41,231,348,38],"23449340",[355,189,46,356,357,38],"23449542","project\u002Fpositive\u002Fprivacy","adrianmonk",[359,189,41,231,161,38],"23449965",[361,189,41,362,363,38],"23450240","project\u002Fcritical\u002Fnone","na85",[365,189,38,347,348,38],"23451162",[367,189,41,231,256,38],"23452393",[369,189,41,231,370,38],"23450476","n0on3",[372,189,38,347,348,38],"23451009",[374,189,41,231,370,38],"23451843",[376,189,38,347,348,38],"23454368",[378,189,38,198,370,38],"23457852",[380,189,38,347,381,38],"23455195","eeZah7Ux",[147,180,45,351,148,38],[384,180,38,385,11,41],"23449333","maker\u002Fneutral\u002Fprivacy",[387,18,45,193,388,38],"23451240","noodlesUK",[135,390,45,255,136,38],11,[392,32,45,255,393,38],"23453121","est",[395,396,41,222,397,38],"23454221",13,"linuxhansl",[399,396,38,385,11,41],"23456330",[401,34,38,243,402,38],"23455286","melicerte",[404,407],{"id":405,"t":406,"points":45,"comments":38},"23436038",1591407514,{"id":4,"t":12,"points":14,"comments":15},[409,414,419,423,427,431],{"id":410,"name":411,"points":412,"category":413},"23420091","Grid.js",390,"dev_tools",{"id":415,"name":416,"points":417,"category":418},"23418796","C0D3",261,"learning_science",{"id":420,"name":421,"points":422,"category":413},"23466506","topngx",219,{"id":424,"name":425,"points":426,"category":413},"23433290","Jqview",208,{"id":428,"name":429,"points":430,"category":413},"23443430","Weylus",176,{"id":432,"name":433,"points":434,"category":435},"23418910","interviewing.io",171,"productivity",false,"v2",{"id":439,"name":5,"line":6,"ai":436,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":29,"top":18,"kw":440,"maker":11,"domain":10,"tier":19,"attempts":33,"strip":441,"url":9,"mix":442,"praise":78,"objection":91,"sub":21},23448608,[24,25,26,27],"3000051113033500031301000001001311103331",[31,32,33,34],1794036591764]