Dissimuler un répertoire crypté avec Tomb 2.9.0 sous Debian 11
Uniquement quand on a rien à cacher... comme des fichiers avec des mots de passe, des signatures numérisées, des projets industriels...
Installer les dépendances requises :
$ sudo apt install zsh file sudo gnupg cryptsetup pinentry-curses
Télécharger Tomb depuis : https://files.dyne.org/tomb
$ tar xvfz Tomb-2.9.tar.gz
$ cd Tomb-2.9
$ sudo make install
L'aide :
$ tomb -h
$ man tomb
Once installed one can proceed creating a tomb, for instance:
$ tomb dig -s 10 secrets.tomb (dig a 10MB Tomb)
$ tomb forge secrets.tomb.key (create a new key and set its password)
$ tomb lock -k secrets.tomb.key secrets.tomb (format the tomb, lock it with key)
When this is done, the tomb can be opened with:
$ tomb open -k secrets.tomb.key secrets.tomb (will ask for password)
To open it, do
$ tomb open secret.tomb -k secret.tomb.key
and after you are done
$ tomb close
or if you are in a hurry
$ tomb slam all
The key can also be hidden in an image, to be used as key later
$ tomb bury -k secrets.tomb.key nosferatu.jpg (hide the key in a jpeg image)
$ tomb open -k nosferatu.jpg secrets.tomb (use the jpeg image to open the tomb)
Or backed up to a QRCode that can be printed on paper and hidden in books. QRCodes can be scanned with any mobile application, resulting into a block of text that can be used with -k just as a normal key.
$ tomb engrave -k secrets.tomb.key (also an image will work)
Et ça marche
Source : https://www.dyne.org/software/tomb/