Arch Linux

yuvadm

Member

From: Tel Aviv-Jaffa, Israel

Registered: 2012-08-08

Posts: 102

Website

Amenthes // EYES ONLY document viewing

I'd like to present a little POC project I've been working on recently - it's called Amenthes, and it's basically an extension of archiso that builds a secure document viewing platform.

The core of the idea is to automate the building of an encrypted payload of documents to a trusted party, and encapsulate those documents in a live system that is hardened against accidental leakage of the files. The recipient of the live USB system has a convenient way to view the encrypted documents in a lightweight desktop environment that provides everything they need to work on the documents, while not needing to worry about leakage of the files due to end user mistakes.

Implementation-wise, the files are encrypted into a loop device that is thrown into the archiso rootfs, along with a customizable set of packages, and a helper script to decrypt and mount the payload. The output of the scripts is a complete ISO that is dd'd to a USB drive and delivered via sneakernet to the recipient.

Feel free to take a look at teh codez (and some more docs) at https://github.com/yuvadm/amenthes and join in on the development if you're interested. Many different tangents this project can take off on.

Thanks to the creators and maintainers of (mk)archiso for building an awesome set of extensible scripts.