About this question
I am wondering about LUKS nuke patch efficiency. In fact, I think I don't really understand it.
From what I know of LUKS, a passphrase is used to encrypt a random key (the master key), which is used to encrypt the data. Both the encrypted master key and the encrypted data are stored on the partition. LUKS nuke equals erasing the encrypted master key.
Let's say my passphrase contains uppercase, lowercase, symbols, number, and is 30 characters long.
Now, is the master key encrypted with the same algorithm as the data? If so, how is it safe to erase the encrypted master key? I just have to try to decrypt the data.
Where am I wrong? Does it take much longer? Are the algorithms different? Do I miss something?
What is the security betterment?
