You think I didn’t think about their physical access to the external bootloader when I asked this? My question has sense only if assume that I could somehow get rid of / or destroy that external bootloader before they could take it. So that’s why I ask if they can replicate it. Because if they can then the only reason left why to use this setup is to achieve a deniable encryption, as said in Apparatus manual. And at the same time it could protect you from that keylogger if luks headers are transferred to this drive too so adversary still can’t decrypt disk even if knows the password, until he gets physical access to that drive.
1 Like