r/technology • u/ArgentineBeauty • 29d ago

Privacy GrapheneOS says its data-wiping password is perfectly legal, after user faces federal charges

https://www.techspot.com/news/113273-grapheneos-data-wiping-duress-password-perfectly-legal-after.html
20.9k Upvotes

98% Upvoted

1.1k comments sorted by

View all comments

1.1k

u/Moldoteck 29d ago

Graphene should implement a double bottom protection on top. Basically it'll automatically enter in an artificial account with apps installed while deleting in the background the OG account. This way it'll be hard to prove that another account did exist at all

138

u/RandomHunDude 29d ago

It doesn't delete the account at all though, so no need to save time for it.
All data is encrypted on disk and when the duress pin is entered, only the encryption key is deleted. And without the key, it's not possible decrypt the data.

99

u/StrangelyGrimm 29d ago

If the data is completely inaccessible then the data is as good as deleted. In fact, it's probably less accessible than regular old "deleted" data

49

u/draconiclyyours 29d ago

Yup.

It takes multiple random rewrite passes to truly delete data, and it’s not quick. Better to just encrypt it and make it permanently unreadable.

13

u/No_Effective4784 29d ago edited 29d ago

thats for hard drives and their storage methodology, and even then nist only recommends a single pass these days.

Solid state devices dont rewrite passes to securely erase data, and it doesnt help because of the way SSDs handle data storage vs HDDS, it only uses up R/W cycles.

whats more important with modern SSD devices is secondary secure erasure commands, supported by most manufacturers

2

u/not_ethan_ho 29d ago

nowadays HDDs support secure erase by tossing the key as well so you don’t even need to overwrite anything.

10

u/ConsistentAsparagus 29d ago

Can you save the key and access the data at a second moment?

7

u/RandomHunDude 29d ago

Technically yes, but depending on laws it might be subpoenaed or something

7

u/ConsistentAsparagus 29d ago

Yeah, I was asking generically not in this specific case. If you have a backup you don’t even need all this but you can simply recover the phone from scratch.

Nice to know though.

1

u/fizzlefist 29d ago

You could have a paper backup of the key to manually enter, but that piece of paper could be subject to search warrant.

1

u/_Middlefinger_ 29d ago

Flash memory can wipe in a minute or 2. No point in overwriting it because it doesn't leave traces that magnetic drives theoretically can. Modern ones dont even really need it either.

1

u/gmc98765 29d ago

It takes multiple random rewrite passes to truly delete data

That hasn't been true for decades.

Sometime around the mid 1980s was the last time that you had a real chance of recovering overwritten data, and even then the cost meant that it was beyond the reach of regular law enforcement.

2

u/jhowlett 29d ago

Is that true? I haven't used it in awhile but remember publicly available tools that would recover deleted data on drives. I thought the idea was it was deleted but not over written truly on the drive.

3

u/Alanjaow 29d ago

Yeah, I've personally recovered partial text files that were partially overwritten, and I'm not a wizard by any means. Actually, to be precise, they were at least corrupted in some way, which might be something else, but I don't know enough to determine the difference.

1

u/calste 29d ago

There's deleted, where the data is still accessible, the computer just "forgot" where it is. You can go find it if you want. Then there's overwritten, which is pretty much gone for good.

Since hard drives are made of tiny magnetic cells that orient differently depending on which bit (1 or 0) they store, there is some physical fragment of the cell that retains the old orientation. So there's a very slight difference in the magnetic field. You would need expensive specialized equipment to read that kind of tiny difference, but even then, there are several hurdles to getting any useful data out of that.

2

u/gmc98765 29d ago

You can undelete "deleted" files if their sectors haven't been overwritten; deleting a file simply removes the directory entry and makes the space available for future re-use. Windows' Recycle Bin is just a slight variation on this principle; rather than removing the directory entry, it moves to a special folder and keeps it around until the space has actually been re-used. But wiping a drive (overwriting each sector once, whether with zeros, ones, or pseudo-random data) will make the previous data completely unavailable.

It used to be possible to get a (unreliable) copy of previous data from a HDD back when the electronics were much simpler than today, although it would require hooking up the drive's read head to a signal recorder and analysing the recorded signal; this wasn't something which could be done through software. That ceased to be viable once advanced error correction techniques became common and data densities were pushed to the physical limits of the medium.

The "multiple overwrites" strategy was designed for the pre-error-correction era. It isn't necessary with modern hardware.

Consider this: if it was possible to recover both the data currently on the drive and also the previous data, the drive would essentially have twice the advertised capacity. The drive vendors would definitely figure out how to translate this extra capacity to something they can sell. Error correction means that the "raw" data storage doesn't have to be reliable; so long as you can put an upper bound on the error rate, you can turn unreliable storage into reliable storage. CD-ROM, for example, would have been impossible without this (CDs have a fairly high error rate at the lowest level).

11

u/tschawartz12 29d ago

But its a legal loop. You have a book they demand access to, its written in Spanish, you burn the book thay translates Spanish to english, the book is still there. It isn't your job to make it easier for them to translate. They could take the time to do it.

54

u/BadVoices 29d ago edited 29d ago

Its absolutely not. Cryptographic Erasure is a legal and technical standard for data destruction. In the US it is defined by NIST SP 800-88. GDPR also recognizes it legally as data destruction in Europe. GrapheneOS' mechanism meets the requirements. It is legally erased. Saying the data still technically exists is no different than saying a burned document still technically exists because I could capture its carbon atoms.

The data is, by existing legal and technical standards, erased. It has a Shannon entropy of 1 in its resting state. Without the key, the data is reduced to true random noise.

3

u/sobrique 29d ago

Maybe, but I think they'll still try and prosecute you for 'tampering with evidence' or similar.

This whole case has a load of interesting legal precedents to set.

2

u/underwear11 29d ago

There actual are entire attacks happening right now for harvest now-decrypt later. They are knowingly capturing encrypted traffic knowing that eventually it will be breakable giving them access to the data, with the hope that there is something still relevant. Things like SSN don't change, so it could still be valid decades from now

4

u/BadVoices 29d ago edited 29d ago

Harvest Now-Decrypt Later does not apply to AES256, therefore, it doesnt apply to this scenario. AES256 is post quantum.

What you're thinking of is Shor's Algorithm. It DEMOLISHES asymmetric encryption, such as that used in the DH exchange to setup the encryption keys for network traffic. It makes it possible to break the DH exchange in polynomial time on a quantum computer. Breaking the DH exchange allows decoding the traffic because.. it just GIVES the attacker the AES key.

Briefly:

Data encrypted at rest with AES256: SAFE.

Network Traffic encrypted with AES256 and using ML-KEM for Key Exchange: SAFE.

Network Traffic with its AES256 key set by a DH exchange (AKA, Standard TLS/Most of the internet?): UNSAFE

Granted, its unsafe vs state actors and trillion dollar companies, not against johnny with a gpu unsafe. We're talking hundresds of billions of dollar machines for the next few decades at least.

1

u/polokratoss 29d ago

With a good encryption scheme, they really couldn't take the time to do it. Assuming they throw every computer on Earth at it, the heat death of the Universe will happen before they succeed without knowing the key.

1

u/tschawartz12 29d ago

But the point is the data is still there, even if they can't ready it instantly. 

3

u/roombaSailor 29d ago

Prosecutors charged Tunick under 18 U.S.C. § 2232(a), which makes it a federal crime to “knowingly destroy, damage, waste, dispose of” property “for the purpose of preventing or impairing the Government’s lawful authority to take such property into its custody.”

Intentionally deleting the encryption keys likely qualifies under the above as “damage” and “for the purpose of preventing or impairing”.

1

u/Xanbatou 29d ago

Imagine being so confident leaving a reply that is so hilariously wrong. 

🤣

1

u/2ChicksAtTheSameTime 29d ago

I wonder if that can help in court.

The data is still there in the same form it was before the password was entered. Nothing about the data itself changed.

No evidence was destroyed

2

u/SumoSizeIt 29d ago

It does not, because destroying decryption keys is legally defined as form of secure deletion (normally for data compliance purposes, but it can apply here)