Comments on How to encrypt a partition with DM-Crypt LUKS on Linux
TrueCrypt is no more, and the purpose of this post is to show you straightforward partition encryption with dm-crypt luks. DM-Crypt is transparent drive encryption that is kernel module and part of the device mapper framework for mapping physical block device onto higher-level virtual block devices, it uses cryptographic routines from the kernel's crypto api. Long story short, device mapping encryption provided by the kernel "linux" crypto api.
7 Comment(s)
Comments
Veracrypt [ the fork of truecrypt that was created to provide tougher security than truecrypt used ] is still alive and well. It also still provides features like hidden containers within containers which luks does not.
*I use both luks and veracrypt and both are good but stating that truecrypt is dead ala "The sky is falling" is misleading.
@Rudi "The development of TrueCrypt was ended in 5/2014"; source http://truecrypt.sourceforge.net/
That was announced by the TrueCrypt DEVELOPERS. The kernel provides you encryption out of the box, also the security audit report of TrueCrypt showed couple vulnerabilities that was easy to exploit and others marked as critical and high.
None of the TrueCrypt forks has managed to fix all of the vulnerabilities mentioned in the audit report so far. Until they are fixed, you will be shooting yourself in the foot.
The hidden container isn't really hidden as if anyone has physical access to your drive and is observing it will notice that there used space and they can spot exactly which sectors have been used.
On the other hand it seems you either haven't read the whole tutorial here or came to troll, because with LUKS as it was stated at the end of the tutorial you can create whole file system in LUKS encryption within prefixed file size, and you may recall it container.
In both cases if anyone has physical access to your drive will notice the encryption, so hidden container or not doesn't really matter.
TrueCrypt has been developed by true cryptography professionals, same goes for the active kernel development where every developer is well acknowledged. I doubt the TrueCrypt forks to be maintained by cryptography professionals.
zuluCrypt[1] is a simple,feature rich and powerful solution for hard drives encryption capable of handling LUKS,TrueCrypt and VeraCrypt volumes.
@Rudi Pittman,Give zuluCrypt a try since it can manage both your LUKS and VeraCrypt volumes from the same GUI interface.
[1] http://mhogomchungu.github.io/zuluCrypt/
Truecrypt has problems, but those problems are not really a problem at all; just stick with 7.1a the audit found the problems to be of no concern at atll.
Thank you, worked perfectly!
What benefits does it get from overwriting the partition 3 times insted of 1?