The physical bits on the disk are stored in "plain text." If someone gains access to the underlying storage hardware or a snapshot of the volume, they can read your data without needing a cryptographic key.
cryptsetup luksClose secret_volume # Unmounts encrypted layer mount /dev/sdb1 /mnt/exfil # Mounts raw, unencrypted partition data not encrypted mount parameters are modified
The physical bits on the disk are stored in "plain text." If someone gains access to the underlying storage hardware or a snapshot of the volume, they can read your data without needing a cryptographic key.
cryptsetup luksClose secret_volume # Unmounts encrypted layer mount /dev/sdb1 /mnt/exfil # Mounts raw, unencrypted partition