This gist is to make a specific WinAPI-call from PowerShell. May I inquire, how much explanation do you need?

As the source code is available, although incompatible with modern Visual Studios, I tinkered a build into github.com/HQJaTu/Filterkeys-setter

Thank you. I was confused as TRIM has nothing to do with this. :-) ATA / NVMe secure erase -command does. I need to try this on a suitable victim.

Can you point me to more details, please?

Oh, I omitted the reason. Sorry. Linux loaded ok, then kernel crashed on very early stage. As I really really needed to wipe the Laptop before handing it over to new owner, I kept trying and wet for ABAN (aban.derobert.net). It booted into Linux, did a quick performance measurement on which crypto to use for erasure and wiped the SSD ok.

ShredOS wouldn't boot from USB on my laptop. It seems modern and maintained, there simply are that many different types of machines out there.

On my MacBook Pro iw info is mostly worthless printing almost nothing. iw link will print the frequency used. This can be combined with iw phy to determine used channel. Nothing seems to display 802.11 mode (A/G/N/AC/AX).

All my private keys have a passphrase. Cannot add them in a script without interaction. Also, my script has /cygdrive/c/Windows/System32/setx just to make sure setx can be found in all environments and configurations.

Thanks. Solution is working. On Windows 11 grouping is very well hidden.

As this question was asked nearly 8 years ago, things have changed. See unix.stackexchange.com/a/704743/241396 for modern implementation of kernel.random.poolsize.

Using LVM partitions with dd and SSH, I successfully transferred LUKS-partition to a new machine to same sized volume. In my scenario, this was the easiest option.

@gavenkoa Look at the comments from JPX. Display off can trigger other effects. Those are not easily reproduced on a random Windows 10 or 11. I've tested the above one-liner on dozen PCs without any adverse effects.

Modern OpenSSL-versions emit following warning: "*** WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be better." Obvious fix is to use -pbkdf2 to derive a better encryption key.