TrueCrypt is a freeware software application used for on-the-fly encryption (OTFE).

learn more… | top users | synonyms

15
votes
8answers
5k views

Is TrueCrypt safe enough to store clear-text-passwords?

The reason: I want to be able to use a portable USB drive to access my passwords on any machine and OS. TrueCrypt seems to be the only program that has sufficient support on all major platforms. So I ...
1
vote
3answers
213 views

How is Truecrypt any safer than just password-protection?

I'm not into security and encryption at all, I'm just a Truecrypt user. So maybe it's a very noob-question, but I can't figure it out. When I make a Truecrypt container, it will encrypt everything ...
2
votes
3answers
112 views

Adding photos to Truecrypted, gapless laptop from camera safely

I have a Truecrypted, airgapped (no internet connectivity at all) laptop that I use as a completely secure computer for sensitive files. I want to add images from my iPhone (I know), camera or other ...
0
votes
0answers
67 views

What else do I need to secure my data in an encrypted non-system drive?

I have to use an almost seven years old laptop running Windows 7 ultimate and want to encrypt my hard disk to protect my private data (e.g. documents, pictures, Dropbox, etc.). I encrypted a ...
0
votes
1answer
48 views

XTS vs AES-CBC with ESSIV for file-based filesystem encryption

In a blog post I recently read called "You Don't Want XTS," the author explains some of the pitfalls of using XTS to encrypt filesystems. Specifically, he recommends against ever sharing encrypted ...
10
votes
4answers
2k views

Can TrueCrypt encrypt SSDs without performance problems?

I am running windows 7 prof on a SSD (mSATA). My CPU i7-3610QM has AES-NI-support. I want to encrypt my SSD with truecrypt with AES. But I am really unsure if this is a good idea because of (a) the ...
13
votes
3answers
813 views

What are the security implications of 'open-source' vs. 'source-available'?

In light of the current fiasco surrounding TrueCrypt, I have received considerable criticism from current clients and peers in the IT industry for my continued support of the open-source model. Such ...
34
votes
5answers
7k views

Are there any reasonable TrueCrypt forks?

Unfortunately, TrueCrypt may have been discontinued yesterday. I use LUKS on Linux, but I liked the fact that with TrueCrypt I had a portable solution across Windows, Mac, & Linux. TrueCrypt ...
13
votes
1answer
1k views

What is the problem with TrueCrypt? [duplicate]

Since a few days, the Sourceforge project page of TrueCrypt is displaying a message saying: WARNING: Using TrueCrypt is not secure as it may contain unfixed security issues And, the authors are ...
2
votes
2answers
179 views

How can I separate two OS's files with encryption without using TrueCrypt?

I want to create a dual-boot such that the content of each OS is separated from the other using encryption. The main point point would be to to test out potentially harmful software on one OS, and ...
-1
votes
1answer
146 views

TrueCrypt Hidden OS Decryption

A couple of months ago, on my pc with Windows 7, i installed truecrypt and created a decoy system and a hidden os. I stored some really important documents and files on my hidden os that now i need ...
24
votes
3answers
23k views

Is 7-Zip's AES encryption just as secure as TrueCrypt's version?

The main difference being TrueCrypt creates containers and 7-Zip encrypts the file itself, so file sizes can be guessed. Now let's just talk about the strength and breakability of the encryption. ...
2
votes
2answers
349 views

Hiding Keepass databases and Truecrypt containers

If I change the extension of a Keepass database (i.e. change the .kdbx to something like .txt), Keepass is still able to open it. Is this an effective way for hiding the databases from an adversary?! ...
62
votes
3answers
17k views

Is TrueCrypt not secure now and should I stop using it? [closed]

The official TrueCrypt webpage now states: WARNING: Using TrueCrypt is not secure as it may contain unfixed security issues This page exists only to help migrate existing data encrypted by ...
11
votes
1answer
2k views

Truecrypt compromised? (Coldboot attack)

In light of recent developments in computer forensics and "password recovery" utilities, can encryption technologies such as TrueCrypt still be relied on for a high degree of protection? It would ...
5
votes
4answers
4k views

TrueCrypt -vs- MacOS encrypted sparse image - equally secure? Other alternatives?

I'm currently trying to find my personal best solution for storing passwords and other sensible data. Recently I've used 1Password on iPhone and Mac but I'm not really satisfied with its predefined ...
1
vote
1answer
777 views

Encrypted LVM as an alternative to TrueCrypt

In a weird announcement on the TrueCrypt page it says that the software is unsafe so we should migrate to BitLocker. If it is a prank it's sure not funny especially when it comes to data. Since I ...
6
votes
1answer
852 views

Are there other ways to encrypt files other then TrueCrypt and BitLocker [closed]

I don't trust BitLocker. Probably backdoored and relies on TPM which can be hacked according to DEFON. It also does not allow for hidden partitions or other advantages like TrueCrypt. With TrueCrypt ...
2
votes
1answer
251 views

An attacker got a few 128bit TrueCrypt keys from a RAM analysis. What can he do?

I'm trying to simulate a possible attack scenario for my studies. I've got a image, which has a encrypted disk, encrypted by TrueCrypt (confirmed). TrueCrypt is installed on the image itself too. ...
1
vote
1answer
60 views

What to put in outer volume of encrypted volume? [closed]

TrueCrypt offers the ability to have a hidden volume. What should go in the outer volume that would be revealed to an adversary? It's actually pretty tricky: you'd have to convince the adversary it ...
1
vote
1answer
255 views

Safety of TrueCrypt hidden volumes

According to the documentation a hidden volume stays hidden because it appears as free space. In TrueCrypt free space always has random data in it, however in the case of a hidden volume it's not ...
1
vote
1answer
81 views

Mitigating TrueCrypt Attack Vectors in Memory and System Cache

While browsing PasteBin today, I noticed a new Paste that outlined approaches to compromising TrueCrypt protected data, as well as full Keys, Encryption Schemes, Plain-text Files, and Volume Names ...
3
votes
5answers
1k views

TrueCrypt dataleaks that might betray the “Deniable File System” option

Reading into "Operation Satyagraha", one would have to believe give all the resources used that the investigators had some reason to believe there was data to decrypt, even though in theory and in ...
0
votes
2answers
160 views

I need two separate hidden volumes in disk encryption. What are my options? [closed]

C: for system (Windows) D: for my files Makes much more sense to me than packing everything on the same volume, right? Is there a disk encryption utility capable of doing this? I don't know much ...
3
votes
2answers
1k views

TrueCrypt vs “native” whole-disk encryption on Linux?

When preparing to encrypt an entire partition, is it better to rely on "native" whole-disk encryption (eg following this tutorial), or an external tool like TrueCrypt? The wikipedia article comparing ...
2
votes
2answers
243 views

What can I do with private 128 bit AES Keys?

For my studies, I am required to do an investigation on a fictional criminal VMWare image. The image is suspected of participating in DDoS attacks and other illegal activities. On this PC TrueCrypt is ...
0
votes
4answers
369 views

Are Truecrypt volumes safe from the government agencies? [closed]

I have some Truecrypt volumes stored on my USB drive and I would like to know if they are safe from being cracked by the FBI or any government agencies? Some people say Full Disk Encryption will ...
3
votes
2answers
3k views

Best practices for TrueCrypt + Yubikey combination

I'm trying to find a secure and convenient way to encrypt my external disk with TrueCrypt. Currently I use a 50 character strong password but I'm tired of typing it every single time. I have a Yubikey ...
1
vote
2answers
91 views

How to use ESSIV to avoid seeing repeated patterns?

I'm trying to implement an encrypted file-system. The file-system consists of 512-byte sectors. I encrypt/decrypt the contents of a sector as follows: Compute the SHA256 sum of the user password. ...
6
votes
3answers
9k views

Full Disk Encryption with GPT disk support

On my old computer I used Truecrypt full disk encryption. My old computer however was running Windows 7 with a standard MBR partition scheme. I recently got a new laptop with the fancy UEFI support. ...
9
votes
4answers
3k views

Why not simply backup the TrueCrypt container file?

The TrueCrypt website has some detailed information on how to backup (TrueCrypt non-system volumes) securely, summarised below: Create a new TrueCrypt volume Mount the main volume. Copy all ...
11
votes
1answer
13k views

Brute Forcing Password to a Truecrypt-encrypted file with Partial Knowledge

A while back, I encrypted a few files with Truecrypt, and stored the password in my head. Now I need to access it again, the password isn't working. I'm sure most of it is right, but I'm off by one or ...
9
votes
3answers
2k views

Truly deniable encryption

What tools can be used to make truly deniable encryption? Suppose, authorities can use any force to make you open your passwords. Truecrypt can have only one hidden container, which means that ...
2
votes
2answers
2k views

How secure is EncFS compared to TrueCrypt?

If I choose the paranoia option for EncFS and for TrueCrypt I create containers using the encryption algorithm AES-Twofish-Serpent and the Hash Algorithm Whirlpool. Are both methods equally secure, ...
0
votes
1answer
79 views

When using keyfiles with TrueCrypt how does the file size and/or number of files affect the difficulty of breaking into the container?

I'm looking at setting up an encrypted container with TrueCrypt (surprise) but I'm not sure whether I should use multiple files or if a large file would make any difference. Does the file size or ...
0
votes
4answers
214 views

Keeping TrueCrypt keyfiles in plain sight

If I create a TrueCrypt volume and secure it with a password and a keyfile, is there any way that someone who has access to my computer would be able to tell that the volume requires a keyfile to ...
1
vote
1answer
801 views

TrueCrypt on shared cloud folder (Dropbox, Skydrive,…) [closed]

So here's the situation: I have a Skydrive folder that is shared with all of my colleagues at work. For added security we would like to encrypt our Skydrives with TrueCrypt. But what will happen when ...
5
votes
1answer
12k views

Repairing corrupt TrueCrypt volumes/disks?

(I'm asking this for a friend of mine as I'm trying to help him with this problem over remote desktop, so if any details are needed, just ask and I will get them). Two entire hard disks were encrypted ...
5
votes
3answers
4k views

How easily could be truecrypt and EFS cracked in this scenario

I suspect some info was subtracted in the past months from my laptop. Therefore Im looking for methods to encrypt my data. I want to try using truecrypt for the sensitive files folder plus EFS for ...
4
votes
3answers
2k views

Nested Truecrypt containers

Which is more secure: use one container encrypted with AES > Twofish > Serpent = 768bits key size make an AES container, and inside it make another Twofish container then inside it make a third ...
5
votes
1answer
324 views

AV boot disks and Truecrypt encrypted drives

I was wondering if there were any "how-to" guides on what is needed to modify AV boot disks, such as Sophos, kaspersky, AVG etc in order to load the decryption drivers/bootloader for Truecrypt before ...
10
votes
7answers
7k views

Who tells that TrueCrypt is secure?

Assuming you're not running on a compromised machine and you're following common recommendations (long random passwords, etc.), who specifically (name and affiliation) asserts that TrueCrypt is ...
0
votes
1answer
121 views

Is it a good idea to hash a string and use it as a passphrase?

Is it a good idea to hash(SHA-512/whirlpool) some simple memorable string and use it for passphrase(for LUKS/TrueCrypt container), instead of using just a string like t4k#La93Fs(5w5) as a passphrase?
1
vote
2answers
391 views

Read-write mount both hidden + regular TrueCrypt volume at same time?

Can I read-write mount both a regular TrueCrypt volume AND a hidden volume inside the regular volume at the same time? The general idea would be to use the outer volume for non-sensitive stuff and ...
7
votes
1answer
274 views

When TrueCrypt prompts to re-enable automatic mounting, should I be worried?

Assume one day you receive the following error from TrueCrypt: is that a reason to worry that someone may have removed the disk (in my case disk 0) and used it offline and then put it back into the ...
3
votes
1answer
589 views

Recognizing PGP-encrypted disks

I am studying various disk encryption schemes (such as PGP, MS Bit Locker, BestCrypt and TrueCrypt) on my Windows OS. I am interested to know how an encrypted partition/disk/file with a particular ...
2
votes
2answers
782 views

Using multiple keyfiles in truecrypt

I have a truecrypt container who's main password is 20+ characters long. I don't know if the keyfiles are still necessary for further improving the security. But anyway, I have folder of some .jpeg ...
0
votes
2answers
475 views

In TrueCrypt Hidden / Normal overriding?

If I have a normal TrueCrypt volume, and I want to create a Hidden volume inside of it, how do I stop the 2 from overriding each other? Or do I just have to manually make sure the inner volume does ...
8
votes
3answers
428 views

Erasing a hard-disk, encrypting it as alternative?

I was pondering about this, sometimes people ask me to erase data on their drive. So I use a shredding program, which takes a long time. However what if instead of shredding all the files, I'd just ...
5
votes
4answers
307 views

Is Encrpyting Home Sufficient?

I currently have a fully encrypted Windows System, and I'm looking at switching to Ubuntu. Is encrypting my home directory (with ecryptfs) sufficient? On windows this would be problematic due to ...