Skip to content

Wipe the LUKS header when deleting a persistent volume

In Tails::Persistence::Setup::delete_persistence_partition, we should make sure that the LUKS header is wiped (that is, at least overwritten once with zeroes) to make further forensics more difficult. It might be that UDisks does it already, so we should check that first. It might be that UDisks and UDisks2 behave differently in this area, so this should be checked too.

Related issues

Original created by @intrigeri on 8436 (Redmine)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information