3

Assuming both file containers had completely unique and strong passwords, are there any benefits or drawbacks to keeping a VeraCrypt (or any other encrypted container) file container inside another VeraCrypt file container?

1

I'd say it is not worth the trouble. Inserting an additional layer of encryption may thwart the work of an attacker only if he's trying to bruteforce the password, but won't be effective against several side-level attacks (cold boot attack, evil maid attack, malware, etc.). Plus, it will lower dramatically I/O performance as everything needs to be encrypted/decrypted twice.

It would be better to use VeraCrypt in the standard way, concatenating the two strong passwords into an unique, stronger password.

2
  • Or better, using a random keyfile – ddddavidee Oct 18 '15 at 12:38
  • 4
    And note that one password of length 2n provides strength Set^2n, while the nested approach provides only strength of about n, as you'd break the outer password first, requiring Set^n work and then the inner one requiring Set^n work, or in total: Set^n+Set^n=2*Set^n. – SEJPM Oct 18 '15 at 19:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy