Any way to read LUKS flash drives from Windows?

[T]

Hi All,

Do any of you guys know how to read a LUKS encrypted flash drive
in Windows, other than FreeOTFE, which is missing driver signing?

I know, ask M$. But I did

https://social.technet.microsoft.com/Forums/en-US/fcc58bab-1f6b-4344-92a1-aef8692982f0/how-do-i-read-a-luks-encrypted-flash-drive?forum=w7itpromedia

And they told me to ask you. (No one heard my screams.)

And since you know that I know that you that guys
know all and see all, I am asking you guys on the off
chance someone knows. (Oh no pressure there!)

Many thanks,
-T

And we must jab M$ with the following signature:
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I am Windows
I am the Blue Screen of Death
No one hears your screams
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[William Unruh]

On 2017-03-28, T <T...@invalid.invalid> wrote:
> Hi All,
>
> Do any of you guys know how to read a LUKS encrypted flash drive
> in Windows, other than FreeOTFE, which is missing driver signing?

Sorry? You have a solution but do not want it? And you worry about
driver signing in Windows when the OS itself means that the there are
many ways of reading the content of the drive once you have opened it
anyway? I am not at all sure what "driver signing" would buy you as far
as security is concerned on windows.

>
> I know, ask M$. But I did
>
> https://social.technet.microsoft.com/Forums/en-US/fcc58bab-1f6b-4344-92a1-aef8692982f0/how-do-i-read-a-luks-encrypted-flash-drive?forum=w7itpromedia
>
> And they told me to ask you. (No one heard my screams.)

AFAIK LUKS is not something that MS supports (it is a Linux thing). So why would asking them
be a reasonable idea?

[T]

On 03/27/2017 07:04 PM, William Unruh wrote:
> On 2017-03-28, T <T...@invalid.invalid> wrote:
>> Hi All,
>>
>> Do any of you guys know how to read a LUKS encrypted flash drive
>> in Windows, other than FreeOTFE, which is missing driver signing?
>
> Sorry? You have a solution but do not want it? And you worry about
> driver signing in Windows when the OS itself means that the there are
> many ways of reading the content of the drive once you have opened it
> anyway? I am not at all sure what "driver signing" would buy you as far
> as security is concerned on windows.

32 bit W7 doesn't have a problem with FreeOTFE because it does not
require driver signing. With 64 bit, it is another story.

Basically, you have to

1) turn off driver signing
2) reboot (Quelle surprise!)
3) install Free OTFE and read the drive
4) turn driver signing back on to get rid of the
"scary" message on the bottom right of the desktop
to keep the user from freaking out
5) reboot again

It is a complete pain in the ass. Window is such ...

I carry a bootable Fedora 25 Flash drive and I read my
LUKS sticks that way. It also give me a shot at
doing a rel delete of their temp directories, etc.
where viruses and junkware like to hide at the same time.
It is a pain in the ass to figure out how to get the
various BIOS's to boot off a flash drive.

>> I know, ask M$. But I did
>>
>> https://social.technet.microsoft.com/Forums/en-US/fcc58bab-1f6b-4344-92a1-aef8692982f0/how-do-i-read-a-luks-encrypted-flash-drive?forum=w7itpromedia
>>
>> And they told me to ask you. (No one heard my screams.)
>
> AFAIK LUKS is not something that MS supports (it is a Linux thing). So why would asking them
> be a reasonable idea?

Course not. Same reason Apple doesn't support NTFS (or LUKS).

>> And since you know that I know that you that guys
>> know all and see all, I am asking you guys on the off
>> chance someone knows. (Oh no pressure there!)

Windows is such ... Mac is just weird for the sake
of weirdness.

[Bobbie Sellers]

On 03/27/2017 07:04 PM, William Unruh wrote:

OP should run Knoppix (or another live system with LUKS support)
from a Flash Drive on that Windows machine in order to read it.

blisss

--
bliss dash SF 4 ever at dslextreme dot com

[Robert Heller]

If the OP is doing this alot and wants/needs to move the files to/from the
MS-Windows file system and the LUKS file system, the OP could install
VirtualBox and install a linux distro in a VM and give the VM access to the
thumb drive in qustion, along with access to the MS-Windows file system (eg
enable file sharing and install the samba client on the VM, etc.).

>
> blisss
>

--
Robert Heller -- 978-544-6933
Deepwoods Software -- Custom Software Services
http://www.deepsoft.com/ -- Linux Administration Services
hel...@deepsoft.com -- Webhosting Services

[T]

I use a Fedora flash drive

[T]

It is a flash drive with private data on it that I take to
customer sites. I can not install VM on their machines

[William Unruh]

But you are proposing installing stuff on their system.
As has been said, why not set up a flash drive with a live Linux distro
with both Luks and Windows filesystem support and boot from that flash
drive and transfer the files that way. Of course this would involve
shutting down the customer's machine to reboot from the flash.

Otherwise put the stuff into an encrypted file on a Windows filesystem
on the flash drive. I am sure that there exist encryptions which both
Linux and windows can use.

[Robert Heller]

It is also possible to partition the flash drive and put multiple FS's on it,
one for each O/S, encrypted with software native to each.

[Robert Heller]

OK, if the bulk of the customers are running MS-Windows, then what you need
carry your private data in some for suitable for MS-Windows -- eg you need a
MS-Windows "native" encryption system or something like that.

[Roger Blake]

On 2017-03-29, Robert Heller <hel...@deepsoft.com> wrote:
> OK, if the bulk of the customers are running MS-Windows, then what you need
> carry your private data in some for suitable for MS-Windows -- eg you need a
> MS-Windows "native" encryption system or something like that.

I use Veracrypt for this since it is cross-platform, keeping portable copies
of the Windows and Linux versions on the unencrypted part of the drive.

https://veracrypt.codeplex.com/

--
-----------------------------------------------------------------------------
Roger Blake (Posts from Google Groups killfiled due to excess spam.)

NSA sedition and treason -- http://www.DeathToNSAthugs.com
Don't talk to cops! -- http://www.DontTalkToCops.com
Badges don't grant extra rights -- http://www.CopBlock.org
-----------------------------------------------------------------------------

[T]

A simple utility is different that a VM.

> As has been said, why not set up a flash drive with a live Linux distro
> with both Luks and Windows filesystem support and boot from that flash
> drive and transfer the files that way. Of course this would involve
> shutting down the customer's machine to reboot from the flash.

reread my post on 03/27/2017 10:52 PM in this discussion

[T]

True, but they are a pain in the ass. And, my office is Linux,
with the exceptions of several Windows VM's, which I use
for research. And one gets used for Go To Assist. (They
are promising Linux support sometime in the unforeseeable
future.)

[T]

On 03/28/2017 08:39 PM, Roger Blake wrote:
> On 2017-03-29, Robert Heller <hel...@deepsoft.com> wrote:
>> OK, if the bulk of the customers are running MS-Windows, then what you need
>> carry your private data in some for suitable for MS-Windows -- eg you need a
>> MS-Windows "native" encryption system or something like that.
>
> I use Veracrypt for this since it is cross-platform, keeping portable copies
> of the Windows and Linux versions on the unencrypted part of the drive.
>
> https://veracrypt.codeplex.com/
>

I will look. Thank you!

[Carlos E. R.]

On 2017-03-28 03:14, T wrote:
> Hi All,
>
> Do any of you guys know how to read a LUKS encrypted flash drive
> in Windows, other than FreeOTFE, which is missing driver signing?

Use a virtual Linux system (which you can carry on an USB disk, if you
don't want to install it on your customers), or use an encryption system
that Windows supports.

There was one some years ago that worked both on Linux and Windows, then
it almost disappeared then reappeared. I forget the name to dig out the
story.

--
Cheers,
Carlos E.R.

[Ant]

Roger Blake <rogb...@iname.invalid> wrote:
> On 2017-03-29, Robert Heller <hel...@deepsoft.com> wrote:
> > OK, if the bulk of the customers are running MS-Windows, then what you need
> > carry your private data in some for suitable for MS-Windows -- eg you need a
> > MS-Windows "native" encryption system or something like that.

> I use Veracrypt for this since it is cross-platform, keeping portable copies
> of the Windows and Linux versions on the unencrypted part of the drive.

> https://veracrypt.codeplex.com/

Ditto. It used to be TrueCrypt until its fallouts.
--
Quote of the Week: "Each of us needs to withdraw from the cares which
will not withdraw from us. We need hours of aimless wandering or spates
of time sitting on park benches, observing the mysterious world of ants
and the canopy of treetops." --Maya Angelou (b. 1928) American writer
and entertainer
Note: A fixed width font (Courier, Monospace, etc.) is required to see this signature correctly.
/\___/\ Ant(Dude) @ http://antfarm.home.dhs.org (Personal Web Site)
/ /\ /\ \ Ant's Quality Foraged Links: http://aqfl.net
| |o o| |
\ _ / Please nuke ANT if replying by e-mail privately. If credit-
( ) ing, then please kindly use Ant nickname and AQFL URL/link.

[swi...@gmail.com]

(So, being a bottom poster and all...)
Have you considered Mobile VirtualBox? Not sure if this thread is still relevant, but thought I'd throw this out there.

www.vbox.me/

[Carlos E.R.]

On 28/03/2017 04.04, William Unruh wrote:
> On 2017-03-28, T <T...@invalid.invalid> wrote:
>> Hi All,
>>
>> Do any of you guys know how to read a LUKS encrypted flash drive
>> in Windows, other than FreeOTFE, which is missing driver signing?
>
> Sorry? You have a solution but do not want it? And you worry about
> driver signing in Windows when the OS itself means that the there are
> many ways of reading the content of the drive once you have opened it
> anyway? I am not at all sure what "driver signing" would buy you as far
> as security is concerned on windows.
>>
>> I know, ask M$. But I did
>>
>> https://social.technet.microsoft.com/Forums/en-US/fcc58bab-1f6b-4344-92a1-aef8692982f0/how-do-i-read-a-luks-encrypted-flash-drive?forum=w7itpromedia
>>
>> And they told me to ask you. (No one heard my screams.)
>
> AFAIK LUKS is not something that MS supports (it is a Linux thing). So why would asking them
> be a reasonable idea?

Well, they do have - I forgot the name of the thing - something to
execute Linux commands in Windows. Like Wine in reverse.

You might be able to run fuse in there.

--
Cheers, Carlos.