21
votes
Is it safe to have a TrueCrypt container file synced with DropBox?
NO, it is not safe. Truecrypt uses the XTS block mode for encryption, which has severe problems when your adversary is able to see snapshots over time of how the data changes. In fact, an article ...
- 211
13
votes
Truly deniable encryption
Disclaimer: I'm the author of cryptsetup-deluks and grub-crypto-deluks.
Deniable encryption is only a part of the solution. There's no perfect solution to protect yourself and your data if you get ...
- 265
12
votes
Is 7-Zip's AES encryption just as secure as TrueCrypt's version?
Barring implementation bugs, 7-Zip's encryption is more robust than TrueCrypt's, because TrueCrypt has a much harder job.
Sector-level full-disk encryption is hard:
You have a fixed amount of space, ...
- 1,001
7
votes
Is TrueCrypt still safer than VeraCrypt?
VeraCrypt is a fork of the now abandoned TrueCrypt project. I really wonder where you have found the information that TrueCrypt was safer than VeraCrypt. More exactly, it may have been true in the ...
- 26.7k
7
votes
GUI isolation in X11 when entering Truecrypt password
Xterm does not allow isolation unless you set it to run as another user, in another tty. Gksu and Gksudo do not provide any sort of isolation at all. The same applies to all other password entry ...
- 66.7k
7
votes
Accepted
Bruteforce part of password in TrueCrypt
This is a good starting point to learn how the Mask Attack from oclHashcat works: https://hashcat.net/wiki/doku.php?id=mask_attack
You need to add the commandline-parameter -a 3 so hashcat knows ...
- 874
6
votes
Accepted
Are there any security advantages to the "TrueCrypt-Paradigm"?
Yes, there is a very real advantage. Take this hypothetical, but very likely scenario. You are storing something Very Bad(tm) that you absolutely do not want the police to find. Your opsec is pretty ...
- 66.7k
6
votes
Is 7-Zip's AES encryption just as secure as TrueCrypt's version?
Update March 2016:
It seems that TrueCrypt is no longer developed, which will lead to future security bugs not been fixed.
This appears when opening the TrueCrypt's website:
"WARNING: Using ...
- 71
6
votes
Accepted
How robust is duplicity encryption when the backup server is untrusted?
From a strictly cryptographic sense, the Duplicity model does not have any weaknesses.
Duplicity is designed specifically for a threat model when the destination server is untrusted. It drastically ...
- 66.7k
6
votes
Accepted
How secure is my encryption security Using Truecrypt?
I am using a non-SSD drive: Western Digital Black 1TB. Windows XP (please don't judge why I'm still using XP).
OK, I won't judge, but I will say that Windows XP (or any other equally vulnerable ...
- 66.7k
5
votes
Accepted
Is it possible to decrypt half of a TrueCrypt file container if the other half of the data is missing?
Sort of. You can decrypt it as long as you have more than 128 KiB of data downloaded, as that is the end of the header and backup header and where the actual filesystem starts. However, even if you ...
- 66
4
votes
Accepted
TrueCrypt FDE Password Recovery
In Unix, everything is a file! Just use the partition with your encrypted data as the filename.
So if for example your encrypted partition is /dev/sdb3 just use
truecrack -t /dev/sdb3 -w ...
- 5,973
4
votes
An attacker got a few 128bit TrueCrypt keys from a RAM analysis. What can he do?
That is not a TrueCrypt key. You can see that the key itself is 128 bits in length, and the number of round keys is 11, which is consistent with 128-bit AES. TrueCrypt uses 256-bit keys which, for AES,...
- 66.7k
4
votes
Is there a reason to use TrueCrypt over VeraCrypt?
I have been using TrueCrypt for years on Linux and Windows systems and was quite happy with it. Recently, I upgraded my Linux PCs to Ubuntu 16.04 and thought it would be the right moment to switch ...
- 41
4
votes
Accepted
How can BitLocker be considered safer, if it doesn't asks for a key during boot?
The TPM is part of the motherboard, not the disk. If someone gains access to the disk, but not the computer, they will not have access to the TPM, which contains the keys.
During boot, the TPM is ...
- 16.1k
4
votes
How can BitLocker be considered safer, if it doesn't asks for a key during boot?
How can BitLocker be considered safe at all in given conditions
(second scenario)?
It can't be considered safe in the specified scenario, as it is. After the TPM gives out the key, it's stored ...
- 19k
3
votes
Accepted
Truecrypt and swap
Generally, if you have any encrypted storage, then you should encrypt your swap. This goes for any encryption system, not just TrueCrypt. The data of any program can end up in swap, including programs ...
3
votes
Accepted
truecrypt volume - Recover 18char known password with hashcat (characters variations)
There's currently no hashcat-native way to process a list of rules that perform both one-to-one and one-to-multiple character substitutions to attack TrueCrypt at efficient speeds. Because TrueCrypt ...
- 9,573
3
votes
Full disk encryption on dual boot system (Truecrypt/Veracrypt)
In an ideal world, I would like to introduce a third boot loader, loaded before Grub, that handles the decryption of the system partitions
As this would be a nice solution, the problem is that a ...
- 606
3
votes
Accepted
Differences between using an encrypted container and encrypting a partition
The container is an file, that can reside anywhere. You can copy or move it and the data inside remains secure.
Encrypting the whole partition encrypts all content in that partition. To securely move ...
- 8,899
3
votes
Is it sufficient to just change the password of a container after a leak?
This is correct and to some extent applies even if the container is not leaked yet. If there is any way the attacker may be able to get to the old version of the container (or just its header) for ...
- 7,858
2
votes
Brute Forcing Password to a Truecrypt-encrypted file with Partial Knowledge
I am writing this answer to save anyone the time searching for TCBrute as it download page currently is not avaiable.
Other than implicited by the so far only answer there IS documentation for the ...
- 21
2
votes
Are there any security advantages to the "TrueCrypt-Paradigm"?
From the top of my head, there are two main benefits. Note that I'm using the definition from your question - not the actual file format(s) from TrueCrypt or it's successors, as my second point may ...
- 14.4k
2
votes
SSD full disk encryption
Whether it is an HDD or SSD, FDE will not write unencrypted data to the drive.
However on an SSD, there are no guaranty that data that existed before the FDE install are securely erased. (unless you ...
- 409
2
votes
Is it safe to use TrueCrypt inside an encrypted Virtualbox guest OS?
Not in any way. Host software (eg. kernel rootkit) still has access to everything ie. your encryption keys inside VM's RAM.
Usually you use virtualization to protect the host against hostile code, so ...
- 293
2
votes
Getting my first HDD encryption
I will just reverse your arguments concerning VeraCrypt. First, it is by no way a brand new tool, but it is a fork of TrueCrypt. The fork was done when TrueCrypt was discontinued, and that was allowed ...
- 26.7k
2
votes
Accepted
Truecrypt FDE and BSOD dumping physical memory to disk - possible data leak?
Most operating systems, including Windows, can be configured to write
debugging information and contents of the system memory to so-called
memory dump files (also called crash dump files) when an ...
- 3,388
2
votes
How much more secure is encryption if the program requires random input from the user?
TL;DR:
None, really. Modern computers generate high-quality entropy ("randomness", essentially) fast enough that you wiggling your mouse is irrelevant.
More detail:
Programs like Truecrypt (...
- 48.4k
2
votes
Accepted
Can the Truecrypt downloads from the Gibson Research Corporation website be trusted?
Even if we assume the files on GRC are untainted, I would still recommend avoiding it because Truecrypt is no longer under development. I would recommend using VeraCrypt instead. For the following ...
- 36
2
votes
Accepted
ELI5 why plausible deniability doesn't work in reality
Assuming I understand the question correctly, you are asking if have an encrypted hidden partition on your device would be a good strategy for information hiding when the attacker is restricted by the ...
- 283
Only top scored, non community-wiki answers of a minimum length are eligible