Tinfoil Hat Linux
| Company type | Linux distribution |
|---|---|
| Industry | Computer software |
| Founded | February 2002 |
| Founder | The Shmoo Group |
| Products | Security-focused Linux operating system |
| Website | www |
Tinfoil Hat Linux (abbreviated as THL) is a minimalist Linux distribution centered on security, created by The Shmoo Group. Its inaugural version (1.000) was launched in February 2002. By the year 2013, development had shifted to a low-priority status. THL is compatible with Intel 80386 processors or newer and requires a minimum of 8 MB RAM. The entire system fits onto a single high-density floppy disk, removing the necessity for a hard drive and facilitating easy cleanup after use.
The emblem depicts Tux, the Linux mascot, adorned with a tinfoil hat.
Per The Shmoo Group, THL originated as a secure Linux system on one floppy disk intended for storing PGP keys and performing encryption, digital signing, and secure file deletion; over time, it grew into an exercise in excessive engineering.
Security features
Tinfoil Hat integrates various protections against hardware and software surveillance techniques including keystroke logging, video eavesdropping, and TEMPEST attacks:
- Encryption — Utilizes GNU Privacy Guard (GPG) to implement public key cryptography.
- Data management — Temporary data resides on an encrypted RAM disk that is wiped clean upon shutdown; GPG key files themselves can also be encrypted while stored on the floppy.
- Keystroke defense — The GPG Grid allows users to input passphrases through a character grid resembling a video game interface, thwarting keystroke logger capture.
- Side-channel mitigation — Paranoid mode activates background processes that generate cryptographic keys and encrypt dummy information to mask genuine encryption operations.
- Visual security — Paranoid mode additionally lowers screen contrast to reduce the risk of shoulder surfing.
Applications
THL supports most contemporary PC systems with x86 architecture. It is frequently deployed on isolated computers disconnected from any network, dedicated exclusively to cryptographic key signing tasks. Creating the Tinfoil Hat boot floppy under Microsoft Windows is relatively simple, although validating the checksum can present challenges. The documentation incorporates humor that contrasts with its serious security emphasis; the distribution’s name itself alludes to the stereotypical "Tinfoil Hat" as a symbol of paranoia.
Operating in a text-only Linux environment, Tinfoil Hat Linux provides users with a Bourne shell, the text editor vi, and omits any graphical user interface. It employs BusyBox instead of standard Util-Linux, GNU Core Utilities, and typical Unix tools, while also including the more straightforward GNU nano editor.