> LUKS leaves encryption metadata unencrypted. You can detach the header and store it on a USB drive, and boot from the USB drive. No one will know you're usin

> LUKS leaves encryption metadata unencrypted. You can detach the header and store it on a USB drive, and boot from the USB drive. No one will know you're using LUKS at that point.