16

  1. I can't think of a reason as to why you'd want to create a hidden volume in VeraCrypt. It says because "you may be asked to hand the information," but why would I need to hand it over? Nobody has any proof of what may or may not be in that volume, so they can't claim that I'm doing something unlawful (assuming I was), because they literally have no proof of absolutely anything. Hence, they cannot make me hand over the password nor can they penalize me for defending my privacy and refusing to hand over my personal files without any proof that those files are somehow harmful (or whatever you wanna call it).

  2. Also, if you have to hand it over, it doesn't make sense that while there is 500mb/700mb occupied space when the files there only take 300mb. Where did the other 200mb go?

...But let's focus on #1, as that - in my opinion - is a more important point that just obliterates the suggested reason, far as I can figure.

Improve this question
7
  • 11
    It's to mitigate the rubber hose attack.
    – Michael Hampton
    Commented Mar 1, 2015 at 18:05
  • 2
    Fun fact: in the US, you can be forced to unlock your devices if your lock is a fingerprint but you cannot be forced to reveal a password. The wording of the decision makes it seem that any biometric security could also be compelled.
    – tpg2114
    Commented Mar 1, 2015 at 19:16
  • 8
    You absolutely should create a hidden volume! If you don't, how many of your fingers will the attacker cut off before he finally believes you that there really isn't a hidden volume? Better go 2 to 3 hidden volumes deep just in case.
    – TTT
    Commented Mar 1, 2015 at 21:41
  • 2
    @tpg2114 There have been several cases where people have been compelled to enable decryption of a password protected device.
    – CodesInChaos
    Commented Mar 2, 2015 at 10:07
  • 2
    @TTT: Just one, because after that you tell them "yeah, there is information, but you just fed the fingerprint that will unlock them to your dog"
    – PlasmaHH
    Commented Mar 2, 2015 at 13:57

5 Answers 5

Reset to default
39

Your first question is really a legal one, and you seem to be assuming two things:

  • The attacker is a government of some sort.
  • That government actually respects citizen privacy and requires some sort of reasonable suspicion before it can force people to give up encryption keys.

Neither of those assumptions are necessarily true. For all you know, some random thief could grab your laptop while you are using it, notice a VeraCrypt file sitting on the desktop, and pull out a gun and force you to decrypt it. It's not super realistic, but definitely possible.

And even if it is indeed a government, not all countries have privacy protections or require reasonable suspicion. Even in ones that do (e.g. US and many European countries), there have been lots of cases where courts have forced people to supply their decryption keys because it is deemed relevant to an investigation. Whether they have the authority to do so is a subject of current debate, especially in the US where there is supposed to be protection against self-incrimination. Here is one such case:

http://www.cnet.com/news/judge-americans-can-be-forced-to-decrypt-their-laptops/

For your second question, try it out yourself: Create a 500mb outer volume, containing a 300mb hidden volume. Completely fill the hidden volume with files. Then mount the outer volume. The outer volume will still show 500mb of free space.

How does this work? The idea is that you're never supposed to write to the outer volume once you have created it, as doing so could corrupt your hidden volume. If you open the outer volume, even veracrypt does not know that the hidden one exists. There is no way to tell that a hidden volume exists because the hidden volume is indistinguishable from free space (which is why veracrypt still shows 500mb free space when you mount the outer volume). That's the whole idea of plausible deniability; there is no technical way to prove that there is more encrypted data.

Improve this answer
16
  • 1
    So if the outer volume was changed recently, but none of the files in it, then it is clear that there must be a hidden volume in it, right?
    – Paŭlo Ebermann
    Commented Mar 1, 2015 at 17:03
  • 3
    @Mark: I do. In the place where I keep my encrypted volumes, I also have a large file containing randomly-generated data. Which one is it? I'm certainly not telling you. It's a potential legal risk to do this, though, since here in the UK I could in principle go to prison for refusing to provide the password for it, despite that it doesn't have a password. So maybe I'm lying to you, and it's an empty encrypted volume just in case I need it to be. The "obvious" solution from a government's POV is just to criminalise random data, but in some countries that's difficult for constitutional reasons.
    – Steve Jessop
    Commented Mar 2, 2015 at 0:32
  • 6
    Actually it's possible to modify the outer volume after the inner volume is created, you will have to input both the inner and outer volume password. This will tell TC/VC about the size and location of the inner volume and so TC/VC will avoid writing over the inner volume while writing to the outer volume.
    – Lie Ryan
    Commented Mar 2, 2015 at 9:58
  • 3
    For the hidden partition feature to be plausibly deniable, there must be a large number of people that uses TC without hidden partition. This means the TC without hidden partition must be competitive with other encryption programs. An encryption program that wastes 10% space is not competitive. Plausible deniability cannot be achieved if everyone ended up using hidden partition.
    – Lie Ryan
    Commented Mar 2, 2015 at 22:25
  • 2
    Many comments here are based on wrong assumptions. There is not any space "reserved" for the hidden volume. The outer volume looks and behaves in every respect as if the hidden volume is not present. In fact, it does not "know" anything about the hidden volume. That means, if the outer volume is filled, the inner volume will be overwritten and destroyed. The hidden volume, is (usually - not necessarily, either) created so that it is small in enough for the (prior existing) content of the outer volume not being overwritten. But if you add to the outer, then to the inner, that will also occur.
    – Nicolai Ehemann
    Commented Sep 29, 2016 at 9:16
19

You're wrong in your assumptions. There are many legal jurisdictions where you can be required to produce passwords for encrypted data on suspicion, rather than proof, that the data may be relevant to a criminal investigation. If you don't provide your password, you can be jailed. But if there's no encrypted volume visible, they don't know to do it. For example, the United Kingdom, under the Regulation of Investigatory Powers Act 2000.

Improve this answer
6
  • I see. But what about #2? The volume says 500mb is occupied, but the files only weight 300mb. Where's the extra 200mb? It's obvious that there is something hidden in there.
    – Jack
    Commented Mar 1, 2015 at 16:03
  • 10
    @Jack A deniable VeraCrypt volume is apparently just random data, with no indication that it's encrypted. It could equally well be an unused volume that has been put through a secure-erase process to write random data to it. You can see the space, but you can't tell that it's encrypted data. Furthermore, VeraCrypt volumes contain random data in their unused space. That random data can be a second hidden volume with a different password. After you've provided the first password for the visible volume, there's no way to tell if the unused space on it is a second volume or just unused space.
    – Mike Scott
    Commented Mar 1, 2015 at 16:07
  • I see then, that works. Just as I asked below, is there any other - more convenient - way to hide my data from anyone seeing it under any circumstances? Hidden volumes are mighty inconvenient.
    – Jack
    Commented Mar 1, 2015 at 16:13
  • 1
    If you want to hide your data from anyone seeing it, physically destroy the drive it's stored on and scatter the fragments. Of course, you yourself are included in "anyone". If you want to stop anyone except yourself from seeing it then deniable hidden volumes are probably the easiest way -- but don't forget your passwords. If you store them anywhere then that's your weak link rather than the file encryption.
    – Mike Scott
    Commented Mar 1, 2015 at 16:16
  • 9
    That's a separate question, and should be asked as such, not hidden down here in the comments.
    – Mike Scott
    Commented Mar 1, 2015 at 16:37
5

Your assumptions in 1 are just false in many places. In the US, you cannot be forced to hand over encryption keys. That is not generally the case; in the UK, the Regulation of Investigatory Powers Act makes it a criminal offense to not surrender encryption keys when asked. Assuming "just because they know I encrypt my data doesn't mean they think I'm breaking the law" is also misguided; someone who wants access to your data and sees it's encrypted may well think you have something to hide. Even when the law prohibits it, or if it's a criminal trying to access your data, you expose yourself to the $5 wrench attack: someone beats you with a wrench until you give them your password.

As for "no proof:" You forget that they can have some idea what it'll contain before looking at it; in fact, they often have a pretty good idea, because they know something about you. While it could have anything, no court in the world will be so stupid as to pretend that you've actually encrypted random files. In reality, this sort of thing happens all the time: police have some good reason to suspect they'll find evidence somewhere, and so they get a court order to look for it. In the US, you can get a search warrant on probable cause, which is way below the threshold to convict of a crime. The whole point of search warrants is to allow police to search something, when they have a decent idea that they'll find evidence of a crime there, even though they can't know for sure what's in it. Even in the US, the reason you can't be forced to disclose keys has nothing to do with "it could have anything in it" and everything to do with "that's self-incrimination." So the fact that an encrypted volume exists means people know where to look, plus some reason to suspect that you have evidence of a crime hidden somewhere, is a risk.

Improve this answer
3
  • That may as well be an anonymous phonecall if you are say a blogger or a youtuber. But anyway, speaking of self-incrimination, there are people who simply like their privacy. I.e. in case someone breaks into their computer or steals it, they don't want personal documents to be seen or maybe they are writing a book or maybe they have some pictures they don't want to be seen or voice recordings or anything else. Personally, I wouldn't want anything to be seen by anyone, law or not. Are hidden volumes the only way to hide data from potentially prying eyes? They are quite inconvenient to use.
    – Jack
    Commented Mar 1, 2015 at 16:12
  • @Jack for privacy, simply proper encryption is enough. The only added benefit of hidden volumes is only to resist coercion (legal, physical, whatever) by adding some plausible deniability.
    – Peteris
    Commented Mar 3, 2015 at 9:05
  • @Peteris Well, most people seem to assume that privacy is your cousin peeking in. But what if you are say on YouTube or own a blog and post ideas that some people hate? If someone knows your identity, they may tip off the authorities, who in turn may ask you to reveal the data, even if you have nothing illegal there. The authorities would still see whatever the data is and they would have to examine it, which means my privacy would still be invaded.
    – Jack
    Commented Mar 3, 2015 at 9:42
2

You have to create a hidden volume for two related reasons.

  1. If you are arrested by the government and they suspect that some of the data in the encrypted volume is evidence, you can be forced to provide the password. Since TrueCrypt advertises its ability to create a hidden volume and encourages its use (and that's stating it mildly) the government is right to assume that a hidden volume exists and can force you to provide the key. If no hidden volume exists, the burden of proof rests with you: you have to somehow prove that despite everything you didn't create a hidden volume. So you have to make sure that such a volume exists, so you can provide the password. As a corollary, make sure it's an easy password and fill up the hidden volume so no empty space remains.
  2. Non-government attackers similarly will suspect the presence of a hidden volume. Not bound by rules and regulations, they will just beat you until you provide the password, so you better make sure there's a password to provide.
Improve this answer
6
  • "make sure it's an easy password and fill up the hidden volume so no empty space remains." -- or just fill up the outer volume to prove that no hidden volume exists.
    – Steve Jessop
    Commented Mar 2, 2015 at 0:47
  • 1
    "If no hidden volume exists, the burden of proof rests with you: you have to somehow prove that despite everything you didn't create a hidden volume." -- I call hogwash on that. There's no reason why the burden of proof would suddenly be on you to show that you do not a hidden volume. For a start, it would be impossible to prove this if it were true (unless the outer volume was full, but why would it be 100% full all of the time?).
    – Desty
    Commented Mar 2, 2015 at 10:26
  • 1
    @Jack By analogy, consider if the police suspected you had hidden drugs in a certain location, but had no evidence to suggest that this was the case. If you did have drugs hidden there, it would of course not be in your interest to tell them anything, and if you did not have drugs hidden somewhere, then you can't prove that (not in practice, anyway). The advice here seems equivalent to telling people to hide an empty box in the one place you might otherwise hide drugs, then provide police with the location of the empty box to prove that you haven't hidden drugs...
    – Desty
    Commented Mar 2, 2015 at 14:38
  • 1
    @Jack The only real difference between that scenario and this one is that it seems like you can only have a maximum of one hidden volume, whereas there are almost infinitely many potential hiding places for drugs. So I do see the logic behind "filling" the one slot that could contain a hidden volume and showing that to the interrogators. Unless you can have as many hidden volumes as you like, in which case the advice is certainly useless :)
    – Desty
    Commented Mar 2, 2015 at 14:40
  • 1
    @Desty Indeed I see your point. Also - your post made me realize something unrelated to this, which, while you nor me could've been aware of beforehand, is a very interesting realization, so I'm voting your messages up. :)
    – Jack
    Commented Mar 2, 2015 at 15:56
0

Also in your comments about having to hand over passwords. You are wrong that act was over turned by the 11th circuit. Saying in that you do not have to provide passwords to law enforcement. I just defended a guy who was brought up on charges the police told him he had to provide the passwords becouse it was covered under the warrents I got it kicked on the 11th circuit opinion. The only thing you have to provide is passwords to get into files that are not encrypted.

Improve this answer
1
  • Wait what? you have to give passwords to files they have in plain text? Do you mean you do have to comply and log into a laptop for example? But do not have to provide a key to open a specific file? The hidden volume is still useful here before it goes to court because you want to show full co operation or you get arrested for 'talking back'.
    – daniel
    Commented Mar 28, 2017 at 9:40

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .