Skip to content

Commit

Permalink
Update MANPAGE
Browse files Browse the repository at this point in the history
  • Loading branch information
hakavlad committed Oct 16, 2024
1 parent e1ccc2e commit 3183dda
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 5 deletions.
4 changes: 2 additions & 2 deletions docs/MANPAGE.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ With **tird**, you can:

1. Create files filled with random data to use as containers or keyfiles.
2. Overwrite the contents of devices and regular files with random data. This can be used to prepare containers and to destroy residual data.
3. Encrypt file contents and comments with modern cryptographic primitives. The encrypted file format (cryptoblob) is a padded uniform random blob (PURB): it looks like random data and has a randomized size. This reduces metadata leakage through file format and length, and also allows cryptoblobs to be hidden among random data. You can use keyfiles and passphrases at your choice to enhance security.
3. Encrypt file contents and comments with modern cryptographic primitives. The encrypted file format (cryptoblob) is a padded uniform random blob (PURB): it looks like random data and has a randomized size. This reduces metadata leakage from file format and length, and also allows cryptoblobs to be hidden among random data. You can use keyfiles and passphrases at your choice to enhance security.
4. Create steganographic (hidden, undetectable) user-driven file systems inside container files and devices. Unlike VeraCrypt and Shufflecake containers, **tird** containers do not contain headers at all; the user specifies the location of the data in the container and is responsible for ensuring that this location is separated from the container.
5. Resist coercive attacks (keywords: key disclosure law, rubber-hose cryptanalysis, xkcd 538). **tird** provides some forms of plausible deniability out of the box, even if you encrypt files without hiding them in containers.

Expand Down Expand Up @@ -86,7 +86,7 @@ You can encrypt files and embed cryptoblobs into containers starting at arbitrar

- It is **hidden** because it is impossible to distinguish between random container data and cryptoblob data, as well as to determine the location of written cryptoblobs without knowing the positions and keys.
- It is **headerless** because containers do not contain any headers; all data about cryptoblob locations must be stored separately by the user.
- The starting position of the cryptoblob in the container is **user-defined**, and the **user must** store both the starting and ending positions separately from the container. This is why this "file system" is called a **user-driven file system**.
- The starting position of the cryptoblob in the container is **user-defined**, and the **user must** store both the starting and ending positions separately from the container. This is why it is called a **user-driven file system**.

Any file, disk, or partition larger than ~1 KiB can be a valid container. Cryptoblobs can be embedded into any area.

Expand Down
5 changes: 2 additions & 3 deletions docs/tird.1
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ This can be used to prepare containers and to destroy residual data.
Encrypt file contents and comments with modern cryptographic primitives.
The encrypted file format (cryptoblob) is a padded uniform random blob
(PURB): it looks like random data and has a randomized size.
This reduces metadata leakage through file format and length, and also
This reduces metadata leakage from file format and length, and also
allows cryptoblobs to be hidden among random data.
You can use keyfiles and passphrases at your choice to enhance security.
.IP "4." 3
Expand Down Expand Up @@ -134,8 +134,7 @@ by the user.
The starting position of the cryptoblob in the container is
\f[B]user-defined\f[R], and the \f[B]user must\f[R] store both the
starting and ending positions separately from the container.
This is why this \[lq]file system\[rq] is called a \f[B]user-driven file
system\f[R].
This is why it is called a \f[B]user-driven file system\f[R].
.PP
Any file, disk, or partition larger than \[ti]1 KiB can be a valid
container.
Expand Down

0 comments on commit 3183dda

Please sign in to comment.