I was thinking of veracrypt FDE and to which extent it's unbreachable. 🕵️
Most sources online say that once the device is encrypted it's secure, and don't go into more detail, most of them being guides or explaining basic encryption.
The thing is that there are methods like cold boot attacks, evil maid, dma, side-channel, and many other forms of attacks that might gain access to the key or bypass certain things.
There are certain methods like secure boot, bootloader verification, bios password, disabling external boot devices, encryption in pre-boot environment, that might help against certain attacks, but I was wondering if it's possible to make it unbreachable. If there was some sort of security measure that would make it so that no matter how much time an expert has with the drive or entire PC physically accessible to them, the security would be too airtight to exploit.
There are trusted encryption methods for that sort of thing, but the vulnerability starts with veracrypt, since it's not just encrypting data, it's also storing keys and gatekeeping and entire system instead of just having encrypted text/data, making the attack surface much larger.
TLDR: Is there a way to make veracrypt FDE fully airtight and unable to exploit regardless of expertise or time or physical access? If not are there other methods, like FDE + Encrypted hidden volumes for windows? What about on linux? Is there a method where forensics experts just sit there and think "well fuck it's over we can't continue without the key and we can't get the key"?
Most sources online say that once the device is encrypted it's secure, and don't go into more detail, most of them being guides or explaining basic encryption.
The thing is that there are methods like cold boot attacks, evil maid, dma, side-channel, and many other forms of attacks that might gain access to the key or bypass certain things.
There are certain methods like secure boot, bootloader verification, bios password, disabling external boot devices, encryption in pre-boot environment, that might help against certain attacks, but I was wondering if it's possible to make it unbreachable. If there was some sort of security measure that would make it so that no matter how much time an expert has with the drive or entire PC physically accessible to them, the security would be too airtight to exploit.
There are trusted encryption methods for that sort of thing, but the vulnerability starts with veracrypt, since it's not just encrypting data, it's also storing keys and gatekeeping and entire system instead of just having encrypted text/data, making the attack surface much larger.
TLDR: Is there a way to make veracrypt FDE fully airtight and unable to exploit regardless of expertise or time or physical access? If not are there other methods, like FDE + Encrypted hidden volumes for windows? What about on linux? Is there a method where forensics experts just sit there and think "well fuck it's over we can't continue without the key and we can't get the key"?
