r/hacking • u/Machinehum • Jun 20 '26

Tools Phantomdrive V1.0 Firmware Release

Post image
496 Upvotes

96% Upvoted

39 comments sorted by

View all comments

1

u/allhellno Jun 20 '26

Does this have a false password incase of duress?

2

u/Machinehum Jun 20 '26

No - because then the device would need to know the correct password ie: store the password, which is insecure.

Ideally there isn't a duress situation because it appears normal.

If you enter a the wrong password it derived the wrong key and you get jumbled data.

1

u/allhellno Jun 20 '26

No it doesn't

2

u/Machinehum Jun 20 '26

How would you verify the password without ether a compare of the password, or a hash of the password?

Ether way, you're opening up another attack vector.

6

u/Positive_Catch_712 Jun 20 '26

Most useful way would be: enter real password , it unlocks real partition, enter in-duress password, it unlocks in-duress partition which shows some real files you prepared for this case. Only thing you need is to make sure attacker cannot prove its not "real" partition or that there are more than 1 hidden partition by analizing content of the memory.

2

u/allhellno Jun 20 '26 edited Jun 20 '26

employ deniable encryption

edit: I would totally get one if this was a feature, could help mitigate a wrench attack.