21 votes

Is it safe to have a TrueCrypt container file synced with DropBox?

NO, it is not safe. Truecrypt uses the XTS block mode for encryption, which has severe problems when your adversary is able to see snapshots over time of how the data changes. In fact, an article ...
guest's user avatar
  • 211
13 votes

Truly deniable encryption

Disclaimer: I'm the author of cryptsetup-deluks and grub-crypto-deluks. Deniable encryption is only a part of the solution. There's no perfect solution to protect yourself and your data if you get ...
KrisWebDev's user avatar
12 votes

Is 7-Zip's AES encryption just as secure as TrueCrypt's version?

Barring implementation bugs, 7-Zip's encryption is more robust than TrueCrypt's, because TrueCrypt has a much harder job. Sector-level full-disk encryption is hard: You have a fixed amount of space, ...
Jander's user avatar
  • 1,001
12 votes
Accepted

Samsung SSD 850 EVO. Best way to protect personal data against thiefs

For Samsung 850 drives and other SSDs, your best and most secure option is to use the OPAL full-disk encryption by enabling a drive password in your system's BIOS. The way the encryption on these ...
Herringbone Cat's user avatar
7 votes
Accepted

Bruteforce part of password in TrueCrypt

This is a good starting point to learn how the Mask Attack from oclHashcat works: https://hashcat.net/wiki/doku.php?id=mask_attack You need to add the commandline-parameter -a 3 so hashcat knows ...
jmingov's user avatar
  • 874
7 votes

GUI isolation in X11 when entering Truecrypt password

Xterm does not allow isolation unless you set it to run as another user, in another tty. Gksu and Gksudo do not provide any sort of isolation at all. The same applies to all other password entry ...
forest's user avatar
  • 66.6k
7 votes

Is TrueCrypt still safer than VeraCrypt?

VeraCrypt is a fork of the now abandoned TrueCrypt project. I really wonder where you have found the information that TrueCrypt was safer than VeraCrypt. More exactly, it may have been true in the ...
Serge Ballesta's user avatar
6 votes

Is 7-Zip's AES encryption just as secure as TrueCrypt's version?

Update March 2016: It seems that TrueCrypt is no longer developed, which will lead to future security bugs not been fixed. This appears when opening the TrueCrypt's website: "WARNING: Using ...
Luisg123v's user avatar
6 votes
Accepted

Are there any security advantages to the "TrueCrypt-Paradigm"?

Yes, there is a very real advantage. Take this hypothetical, but very likely scenario. You are storing something Very Bad(tm) that you absolutely do not want the police to find. Your opsec is pretty ...
forest's user avatar
  • 66.6k
6 votes
Accepted

How robust is duplicity encryption when the backup server is untrusted?

From a strictly cryptographic sense, the Duplicity model does not have any weaknesses. Duplicity is designed specifically for a threat model when the destination server is untrusted. It drastically ...
forest's user avatar
  • 66.6k
6 votes
Accepted

How secure is my encryption security Using Truecrypt?

I am using a non-SSD drive: Western Digital Black 1TB. Windows XP (please don't judge why I'm still using XP). OK, I won't judge, but I will say that Windows XP (or any other equally vulnerable ...
forest's user avatar
  • 66.6k
5 votes
Accepted

Is it possible to decrypt half of a TrueCrypt file container if the other half of the data is missing?

Sort of. You can decrypt it as long as you have more than 128 KiB of data downloaded, as that is the end of the header and backup header and where the actual filesystem starts. However, even if you ...
guest's user avatar
  • 66
4 votes

GUI isolation in X11 when entering Truecrypt password

Ok, here are some ideas. Replace X with Wayland. It has gone a long way and should patch some problems. Utilize mandatory access control to suppress other actions(Specifically attacks that exploit ...
keepass_fan's user avatar
4 votes

An attacker got a few 128bit TrueCrypt keys from a RAM analysis. What can he do?

That is not a TrueCrypt key. You can see that the key itself is 128 bits in length, and the number of round keys is 11, which is consistent with 128-bit AES. TrueCrypt uses 256-bit keys which, for AES,...
forest's user avatar
  • 66.6k
4 votes

Is there a reason to use TrueCrypt over VeraCrypt?

I have been using TrueCrypt for years on Linux and Windows systems and was quite happy with it. Recently, I upgraded my Linux PCs to Ubuntu 16.04 and thought it would be the right moment to switch ...
midi3892's user avatar
4 votes
Accepted

TrueCrypt FDE Password Recovery

In Unix, everything is a file! Just use the partition with your encrypted data as the filename. So if for example your encrypted partition is /dev/sdb3 just use truecrack -t /dev/sdb3 -w ...
Josef's user avatar
  • 5,973
4 votes

Samsung SSD 850 EVO. Best way to protect personal data against thiefs

I don't know for the specific model but this answer is suitable for most self encrypting devices: For SSDs the advantage of using the builtin SED-encryption is that it can take advantage of the trim ...
H. Idden's user avatar
  • 2,998
4 votes
Accepted

How can BitLocker be considered safer, if it doesn't asks for a key during boot?

The TPM is part of the motherboard, not the disk. If someone gains access to the disk, but not the computer, they will not have access to the TPM, which contains the keys. During boot, the TPM is ...
vidarlo's user avatar
  • 16k
4 votes

How can BitLocker be considered safer, if it doesn't asks for a key during boot?

How can BitLocker be considered safe at all in given conditions (second scenario)? It can't be considered safe in the specified scenario, as it is. After the TPM gives out the key, it's stored ...
Esa Jokinen's user avatar
  • 18.9k
3 votes
Accepted

Truecrypt and swap

Generally, if you have any encrypted storage, then you should encrypt your swap. This goes for any encryption system, not just TrueCrypt. The data of any program can end up in swap, including programs ...
Gilles 'SO- stop being evil''s user avatar
3 votes
Accepted

truecrypt volume - Recover 18char known password with hashcat (characters variations)

There's currently no hashcat-native way to process a list of rules that perform both one-to-one and one-to-multiple character substitutions to attack TrueCrypt at efficient speeds. Because TrueCrypt ...
Royce Williams's user avatar
3 votes

Is it sufficient to just change the password of a container after a leak?

This is correct and to some extent applies even if the container is not leaked yet. If there is any way the attacker may be able to get to the old version of the container (or just its header) for ...
Peter Harmann's user avatar
2 votes

Brute Forcing Password to a Truecrypt-encrypted file with Partial Knowledge

I am writing this answer to save anyone the time searching for TCBrute as it download page currently is not avaiable. Other than implicited by the so far only answer there IS documentation for the ...
s3rb31's user avatar
  • 21
2 votes

Are there any security advantages to the "TrueCrypt-Paradigm"?

From the top of my head, there are two main benefits. Note that I'm using the definition from your question - not the actual file format(s) from TrueCrypt or it's successors, as my second point may ...
Tobi Nary's user avatar
  • 14.4k
2 votes
Accepted

Can the Truecrypt downloads from the Gibson Research Corporation website be trusted?

Even if we assume the files on GRC are untainted, I would still recommend avoiding it because Truecrypt is no longer under development. I would recommend using VeraCrypt instead. For the following ...
human's user avatar
  • 36
2 votes
Accepted

Truecrypt FDE and BSOD dumping physical memory to disk - possible data leak?

Most operating systems, including Windows, can be configured to write debugging information and contents of the system memory to so-called memory dump files (also called crash dump files) when an ...
Yorick de Wid's user avatar
2 votes

SSD full disk encryption

Whether it is an HDD or SSD, FDE will not write unencrypted data to the drive. However on an SSD, there are no guaranty that data that existed before the FDE install are securely erased. (unless you ...
Nate's user avatar
  • 409
2 votes

Getting my first HDD encryption

I will just reverse your arguments concerning VeraCrypt. First, it is by no way a brand new tool, but it is a fork of TrueCrypt. The fork was done when TrueCrypt was discontinued, and that was allowed ...
Serge Ballesta's user avatar
2 votes

Is it safe to use TrueCrypt inside an encrypted Virtualbox guest OS?

Not in any way. Host software (eg. kernel rootkit) still has access to everything ie. your encryption keys inside VM's RAM. Usually you use virtualization to protect the host against hostile code, so ...
filo's user avatar
  • 293
2 votes

How much more secure is encryption if the program requires random input from the user?

TL;DR: None, really. Modern computers generate high-quality entropy ("randomness", essentially) fast enough that you wiggling your mouse is irrelevant. More detail: Programs like Truecrypt (...
CBHacking's user avatar
  • 47.5k

Only top scored, non community-wiki answers of a minimum length are eligible