Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

If I have a normal TrueCrypt volume, and I want to create a Hidden volume inside of it, how do I stop the 2 from overriding each other? Or do I just have to manually make sure the inner volume does not go over the threshold?

share|improve this question
    
I also saw there might be a problem of overwriting the Outer volume, when writing data into the hidden volume - any way to avoid that ? –  Rahul Aug 29 '13 at 4:33
add comment

2 Answers

up vote 4 down vote accepted

There is a mechanism to protect the hidden volume when opening the normal volume it shares. It is described in the TrueCrypt documentation: http://www.truecrypt.org/docs/?s=hidden-volume-protection

share|improve this answer
    
Ok thanks, I'll check it out. –  Yongke Bill Yu Mar 26 '12 at 12:34
add comment

When mounting the outer volume, Truecrypt has absolutely no idea that there is a hidden volume. That's by design. So you need to ensure that nothing writes to the outer volume when it's mounted normally.

Hidden volume protection is what you need when mounting the outer volume. Click mount options, then select "Protect hidden volume against damage caused by writing to outer volume" and enter the password for the hidden volume. Make sure the volume says "Outer" under type when it is mounted.

With this feature enabled, Truecrypt knows what area of the volume is taken up by the hidden section, and will switch the volume to read only if anything tries to write there.

When mounting the hidden volume, Truecrypt knows you are mounting a hidden volume and is only making the hidden portion accessible, so there is no risk of damaging the outer volume.

If an attacker forced you to mount the Truecrypt volume, you would mount the outer volume normally, without specifying the hidden volume's password. If the attacker writes to the volume, they may destroy the hidden volume, but will have no way to prove that the hidden volume exists. It is designed under the principle that you would rather have the data destroyed than in the hands of the attacker.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.