TrueCrypt 5 - Now with System Encryption

wolfman

cheesy.mike wrote: »

Yeah but, no but... Actually the problem is with command line use on a server which doesn't have a graphical display. If you try to run the command (with the -t option) it fails. The solution is to add the core x-windows and gtk core & dev packages before the command line will run. None of this is documented on the Truecrypt website.

Ah interesting, thanks for the heads up I had no idea. I may come across this soon once i get my media box built.

Bob63

wolfman wrote: »

Ah interesting, thanks for the heads up I had no idea. I may come across this soon once i get my media box built.

Specifically you need to add the following (in Ubuntu server at least)

sudo apt-get update
sudo apt-get install x-window-system-core
sudo apt-get install libgtk2.0-common libgtk2.0-dev

buglawton

Wonder if the MOD or Tax people used Truecrypt on their lost lappys & disks? Suppose they would not tell the media as to do so gives a hacker the first step (knowing which software did the encrypting) on hacking into the data.

superscaper

buglawton wrote: »

Wonder if the MOD or Tax people used Truecrypt on their lost lappys & disks? Suppose they would not tell the media as to do so gives a hacker the first step (knowing which software did the encrypting) on hacking into the data.

No they don't. They don't use open source software, they used commercially licensed and security rated software such as BeCrypt.

nickmack

sra wrote: »

What looks particularly amazing -

Note that TrueCrypt can encrypt an existing unencrypted system partition/drive in-place while the operating system is running (while the system is being encrypted, you can use your computer as usual without any restrictions). Likewise, a TrueCrypt-encrypted system partition/drive can be decrypted in-place while the operating system is running. You can interrupt the process of encryption or decryption anytime, leave the partition/drive partially unencrypted, restart or shut down the computer, and then resume the process, which will continue from the point it was stopped.

I've been using BeCrypt for a while on my work laptop and it has this feature. If TrueCrypt have got near the same level as this, it works very well.

nickmack

buglawton wrote: »

Wonder if the MOD or Tax people used Truecrypt on their lost lappys & disks? Suppose they would not tell the media as to do so gives a hacker the first step (knowing which software did the encrypting) on hacking into the data.

With secure encryption software, it doesn't matter if hackers have the source code. A good algorithm and implimentation should stand up to scrutiny and hacking attempts.

superscaper

nickmack wrote: »

With secure encryption software, it doesn't matter if hackers have the source code. A good algorithm and implimentation should stand up to scrutiny and hacking attempts.

But when it comes to the MOD and MOD approved companies etc then there's specific certification requirements and I doubt it'd be logistically possible to achieve that with open source as there's no accountability. Doesn't matter if the software's even better than the market stuff.

buglawton

I know, but an inexperienced laptop thief who finds a black screen on boot up might give up and assume the machine is broken. A knowledgeable thief who realizes that Truecrypt was in use might then have a go at using some tools to crack the PW in case it was a weak one.

The strength of using the "Encrypt whole HD" that Truecrypt now offers looks to be the right sort of thing for MOD/NHS/IR if they'd only use it.

nickmack

superscaper wrote: »

But when it comes to the MOD and MOD approved companies etc then there's specific certification requirements and I doubt it'd be logistically possible to achieve that with open source as there's no accountability. Doesn't matter if the software's even better than the market stuff.

Yes, of course, if the encryption software needs to meet certain standards, they go with FIPS evaluated products for example. As you say open source may be better, but the testing is not going to get done to meet the requirement.

superscaper

buglawton wrote: »

The strength of using the "Encrypt whole HD" that Truecrypt now offers looks to be the right sort of thing for MOD/NHS/IR if they'd only use it.

I think you missed my post: the MOD uses BeCrypt already. They cannot use open source software for approval and certification reasons.