21
votes
Is it safe to have a TrueCrypt container file synced with DropBox?
NO, it is not safe. Truecrypt uses the XTS block mode for encryption, which has severe problems when your adversary is able to see snapshots over time of how the data changes. In fact, an article ...
- 211
13
votes
Truly deniable encryption
Disclaimer: I'm the author of cryptsetup-deluks and grub-crypto-deluks.
Deniable encryption is only a part of the solution. There's no perfect solution to protect yourself and your data if you get ...
- 265
7
votes
Accepted
Bruteforce part of password in TrueCrypt
This is a good starting point to learn how the Mask Attack from oclHashcat works: https://hashcat.net/wiki/doku.php?id=mask_attack
You need to add the commandline-parameter -a 3 so hashcat knows ...
- 884
7
votes
Is TrueCrypt still safer than VeraCrypt?
VeraCrypt is a fork of the now abandoned TrueCrypt project. I really wonder where you have found the information that TrueCrypt was safer than VeraCrypt. More exactly, it may have been true in the ...
- 26.8k
6
votes
Accepted
How secure is my encryption security Using Truecrypt?
I am using a non-SSD drive: Western Digital Black 1TB. Windows XP (please don't judge why I'm still using XP).
OK, I won't judge, but I will say that Windows XP (or any other equally vulnerable ...
- 67.1k
6
votes
Accepted
How robust is duplicity encryption when the backup server is untrusted?
From a strictly cryptographic sense, the Duplicity model does not have any weaknesses.
Duplicity is designed specifically for a threat model when the destination server is untrusted. It drastically ...
- 67.1k
5
votes
Accepted
Is it possible to decrypt half of a TrueCrypt file container if the other half of the data is missing?
Sort of. You can decrypt it as long as you have more than 128 KiB of data downloaded, as that is the end of the header and backup header and where the actual filesystem starts. However, even if you ...
- 66
4
votes
Accepted
TrueCrypt FDE Password Recovery
In Unix, everything is a file! Just use the partition with your encrypted data as the filename.
So if for example your encrypted partition is /dev/sdb3 just use
truecrack -t /dev/sdb3 -w ...
- 6,001
4
votes
An attacker got a few 128bit TrueCrypt keys from a RAM analysis. What can he do?
That is not a TrueCrypt key. You can see that the key itself is 128 bits in length, and the number of round keys is 11, which is consistent with 128-bit AES. TrueCrypt uses 256-bit keys which, for AES,...
- 67.1k
4
votes
Is there a reason to use TrueCrypt over VeraCrypt?
I have been using TrueCrypt for years on Linux and Windows systems and was quite happy with it. Recently, I upgraded my Linux PCs to Ubuntu 16.04 and thought it would be the right moment to switch ...
- 41
4
votes
Accepted
How can BitLocker be considered safer, if it doesn't asks for a key during boot?
The TPM is part of the motherboard, not the disk. If someone gains access to the disk, but not the computer, they will not have access to the TPM, which contains the keys.
During boot, the TPM is ...
- 16.9k
4
votes
How can BitLocker be considered safer, if it doesn't asks for a key during boot?
How can BitLocker be considered safe at all in given conditions
(second scenario)?
It can't be considered safe in the specified scenario, as it is. After the TPM gives out the key, it's stored ...
- 19.2k
3
votes
Accepted
Differences between using an encrypted container and encrypting a partition
The container is an file, that can reside anywhere. You can copy or move it and the data inside remains secure.
Encrypting the whole partition encrypts all content in that partition. To securely move ...
- 8,909
3
votes
Full disk encryption on dual boot system (Truecrypt/Veracrypt)
In an ideal world, I would like to introduce a third boot loader, loaded before Grub, that handles the decryption of the system partitions
As this would be a nice solution, the problem is that a ...
- 606
3
votes
Accepted
truecrypt volume - Recover 18char known password with hashcat (characters variations)
There's currently no hashcat-native way to process a list of rules that perform both one-to-one and one-to-multiple character substitutions to attack TrueCrypt at efficient speeds. Because TrueCrypt ...
- 9,678
3
votes
Accepted
Truecrypt and swap
Generally, if you have any encrypted storage, then you should encrypt your swap. This goes for any encryption system, not just TrueCrypt. The data of any program can end up in swap, including programs ...
3
votes
Is it sufficient to just change the password of a container after a leak?
This is correct and to some extent applies even if the container is not leaked yet. If there is any way the attacker may be able to get to the old version of the container (or just its header) for ...
- 7,858
2
votes
Accepted
Can the Truecrypt downloads from the Gibson Research Corporation website be trusted?
Even if we assume the files on GRC are untainted, I would still recommend avoiding it because Truecrypt is no longer under development. I would recommend using VeraCrypt instead. For the following ...
- 36
2
votes
SSD full disk encryption
Whether it is an HDD or SSD, FDE will not write unencrypted data to the drive.
However on an SSD, there are no guaranty that data that existed before the FDE install are securely erased. (unless you ...
- 409
2
votes
Accepted
Truecrypt FDE and BSOD dumping physical memory to disk - possible data leak?
Most operating systems, including Windows, can be configured to write
debugging information and contents of the system memory to so-called
memory dump files (also called crash dump files) when an ...
- 3,398
2
votes
Getting my first HDD encryption
I will just reverse your arguments concerning VeraCrypt. First, it is by no way a brand new tool, but it is a fork of TrueCrypt. The fork was done when TrueCrypt was discontinued, and that was allowed ...
- 26.8k
2
votes
Is it safe to use TrueCrypt inside an encrypted Virtualbox guest OS?
Not in any way. Host software (eg. kernel rootkit) still has access to everything ie. your encryption keys inside VM's RAM.
Usually you use virtualization to protect the host against hostile code, so ...
- 293
2
votes
Accepted
ELI5 why plausible deniability doesn't work in reality
Assuming I understand the question correctly, you are asking if have an encrypted hidden partition on your device would be a good strategy for information hiding when the attacker is restricted by the ...
- 283
2
votes
How much more secure is encryption if the program requires random input from the user?
TL;DR:
None, really. Modern computers generate high-quality entropy ("randomness", essentially) fast enough that you wiggling your mouse is irrelevant.
More detail:
Programs like Truecrypt (...
- 50.2k
2
votes
Are multiple encrypted containers with the same passphase containing the same files a cryptographic risk?
Most modern (symmetric and public key) encryption schemes are considered to have (at least) IND-CPA security. This is'indistinguishability under a chosen plaintext attack' and is defined by a ...
- 41
2
votes
Are multiple encrypted containers with the same passphase containing the same files a cryptographic risk?
Anything designed to be an encrypted container will not be weakened by having multiple, known-to-be-identical files placed in them. This happens regularly: think of when you install an operating ...
- 33.1k
2
votes
How safe are Truecrypt-file containers?
I spent some time seriously digging into the Truecrypt/Veracrypt source code and studying the issued audit, and I would bet one of my testicles that the container format is secure.
A simple TC ...
- 875
2
votes
Accepted
TrueCrypt "silently" updated bootloader
No, it is not a security breach. It is as fine as it was before. There is no change in safety.
7.2 was created in order to warn everyone that TrueCrypt will stop being developed and practically it is ...
- 8,909
1
vote
Accepted
Does using two layers of encryption reduce security (Veracrypt/Truecrypt)?
Say you memorize a random 16 character password. With 16 characters from a set of 95, there are a total of 9516 possible combinations. Using two layers of encryption each with an 8 character password, ...
- 67.1k
Only top scored, non community-wiki answers of a minimum length are eligible