[cyberknight]

Hii guys,
we all keep testing new softwares every now n then. Well i gave TrueCrypt a try. If anyone else has used this software feel free to share your view. I found TrueCrypt useful, but it calls for some learning lessons in encryption... definitely not meant for casual use! U got to understand the tutorial before u do something regrettable, for it can encrypt everything in sight!!
It has got several algorithms like AES, blowfish, serpent, CAST5, Triple DES... but the concept of "hidden volumes" is cool. But thats way too much security for someone like me. Whats best is the real time encryption of entire drives(even USB) & it is'nt a resourse hog!

[Car54]

Thanks for your info on TrueCrypt cybernight, as I hear about that one on other forums also, as far as it being recommended frequently. Yet, after your description, I think I'll pass on that one too, as I'm not that geekie.

As far as encrypting a full drive, I personally would only consider Windows 7 BitLocker, hoping that they would have a real handle on their own OS and protecting it and being "totally compatible" and not toasting a drive. I personally only use a folder and file encryption software. Even though this doesn't hide the volume itself, you can bury it away off the beaten path, and no files can be searched and found when stored in Cryptainer.

[LincolnSpector]

cyberknight, on 09 September 2010 - 07:32 AM, said:

Hii guys,
we all keep testing new softwares every now n then. Well i gave TrueCrypt a try. If anyone else has used this software feel free to share your view. I found TrueCrypt useful, but it calls for some learning lessons in encryption... definitely not meant for casual use! U got to understand the tutorial before u do something regrettable, for it can encrypt everything in sight!!
It has got several algorithms like AES, blowfish, serpent, CAST5, Triple DES... but the concept of "hidden volumes" is cool. But thats way too much security for someone like me. Whats best is the real time encryption of entire drives(even USB) & it is'nt a resourse hog!

I love TrueCrypt, and I've seen novices take to it quickly.

Now, having said that, I should qualify that they weren't trying to encrypt an entire drive and they didn't put much thought into what algorithm to use. If you simply want to encrypt a section of your drive, and to open it when you need it (which is actually how I recommend using TrueCrypt), it's pretty simple. And if someone asks, I'd say use AES.

btw, I never really got the idea of encrypting your boot drive. It seems like asking for trouble.

Lincoln

[cyberknight]

Car54, on 09 September 2010 - 08:08 AM, said:

Thanks for your info on TrueCrypt cybernight, as I hear about that one on other forums also, as far as it being recommended frequently. Yet, after your description, I think I'll pass on that one too, as I'm not that geekie.
...... Even though this doesn't hide the volume itself, you can bury it away off the beaten path, and no files can be searched and found when stored in Cryptainer.

Basically u dont always need to create a hidden volume... but u have to create an encrypted volume(known as container). All files that u place in this container will be encrypted. U dont need password for indivisual files. Whenever u wish to access files on this container, type the container password & it will be mounted like an ordinary drive.

As & when u read/write to this drive, the files will be decrypted/encrypted parallel to the operation i.e even when the container is mounted all files on it are encrypted. Also encryption/decryption is performed strictly on RAM, avoiding use of pagefile or any other HD space! So even in case of power failure, all the data is still encrypted & secure, no trace of any files(RAM is volatile). On the next boot u have to re-mount the container using the password, by default it is always un-mounted when there is power failure or system is shut down.

[cyberknight]

LincolnSpector, on 10 September 2010 - 09:07 AM, said:

I love TrueCrypt, and I've seen novices take to it quickly.
Now, having said that, I should qualify that they weren't trying to encrypt an entire drive and they didn't put much thought into what algorithm to use. If you simply want to encrypt a section of your drive, and to open it when you need it (which is actually how I recommend using TrueCrypt), it's pretty simple. And if someone asks, I'd say use AES.
btw, I never really got the idea of encrypting your boot drive. It seems like asking for trouble.

Yeah it is quite tricky encrypting the total drive, u need to study the tutorial thoroughly, else u end up losing all data or worse locking ur system(if the partion has OS). Experimenting with TrueCrypt is strictly for experts... !! Like i said it can even run hidden operating systems...& its volumes can hardly be detected as it has got no file headers. All keys r stored on RAM, however the presence of TrueCrypt boot loader can still be detected. This is a lot of security for a novice!!

[LincolnSpector]

cyberknight, on 11 September 2010 - 02:09 AM, said:

LincolnSpector, on 10 September 2010 - 09:07 AM, said:

I love TrueCrypt, and I've seen novices take to it quickly.
Now, having said that, I should qualify that they weren't trying to encrypt an entire drive and they didn't put much thought into what algorithm to use. If you simply want to encrypt a section of your drive, and to open it when you need it (which is actually how I recommend using TrueCrypt), it's pretty simple. And if someone asks, I'd say use AES.
btw, I never really got the idea of encrypting your boot drive. It seems like asking for trouble.

Yeah it is quite tricky encrypting the total drive, u need to study the tutorial thoroughly, else u end up losing all data or worse locking ur system(if the partion has OS). Experimenting with TrueCrypt is strictly for experts... !! Like i said it can even run hidden operating systems...& its volumes can hardly be detected as it has got no file headers. All keys r stored on RAM, however the presence of TrueCrypt boot loader can still be detected. This is a lot of security for a novice!!

Good point. Perhaps the next time I recommend True Crypt in an article, I'll warn readers to either stick to it's simpler features or take time to learn it.

btw, can anyone explain to me why someone would want to encrypt their C: drive? Other than because they can or because they think they have to.

Lincoln

[cyberknight]

LincolnSpector, on 12 September 2010 - 10:55 AM, said:

Good point. Perhaps the next time I recommend True Crypt in an article, I'll warn readers to either stick to it's simpler features or take time to learn it.

btw, can anyone explain to me why someone would want to encrypt their C: drive? Other than because they can or because they think they have to.

Lincoln

By "hidden operating system" i meant operating system present in an hidden volume. The concept lies in creating a TrueCrypt volume within another. However there r certain ways to find the existence of hidden volumes.

When a hidden volume is mounted, the operating system and third-party applications may write to the unencrypted system volume, information about the data stored in the hidden volume (e.g. filenames and locations of recently accessed files, databases created by file indexing tools, etc.), or the data itself in an unencrypted form(temporary files, etc.), or unencrypted information about the filesystem residing in the hidden volume (which might be used to identify/determine the location of hidden volume).

To avoid this create a hidden operating system and mount hidden volumes only when the hidden operating system is running. If u have more time or someone really hates to share his/her data!!...feel free to check out this link
Why to create a hidden OS??

[LincolnSpector]

cyberknight, on 13 September 2010 - 07:39 AM, said:

By "hidden operating system" i meant operating system present in an hidden volume. The concept lies in creating a TrueCrypt volume within another. However there r certain ways to find the existence of hidden volumes.

When a hidden volume is mounted, the operating system and third-party applications may write to the unencrypted system volume, information about the data stored in the hidden volume (e.g. filenames and locations of recently accessed files, databases created by file indexing tools, etc.), or the data itself in an unencrypted form(temporary files, etc.), or unencrypted information about the filesystem residing in the hidden volume (which might be used to identify/determine the location of hidden volume).

To avoid this create a hidden operating system and mount hidden volumes only when the hidden operating system is running. If u have more time or someone really hates to share his/her data!!...feel free to check out this link
Why to create a hidden OS??

Thanks. I think I'll wait until I have a very good reason to try this.

Lincoln

[buczacz]

Changing the subject slightly...

The October 2010 Issue of PCWorld, Pg 70, recommends "Encrypt Stick Free" to encrypt sensitive data. If one is just interested in encrypting several files on a flash drive, does "Ecrypt Stick Free have any advantages over "True Crypt" as well as the reverse.

[cyberknight]

buczacz, on 02 October 2010 - 10:10 PM, said:

Changing the subject slightly...

The October 2010 Issue of PCWorld, Pg 70, recommends "Encrypt Stick Free" to encrypt sensitive data. If one is just interested in encrypting several files on a flash drive, does "Ecrypt Stick Free have any advantages over "True Crypt" as well as the reverse.

I have never personally used EncryptStick. So can't say how good it is. But this is what i found about it on cnet; just a publishers description. No reviews or even an editor's rating, can't expect one 'cause it's just released. Guess this is the version your talkin about
EncryptStick 4.3.3

Well all the publisher talks about is encrypting USB & nothing else. Now there nothing so great about that given a 7mb download size! Take a look at True crypt 7.0a high on functionality plus rating & just 3.3MB

With several algorithms, it is a flexible & powerful encryption utility which has got much more than a novice can ask for! It provides unmatched security... erasing signs of encryption process, keystrokes..mouse movements. If u are a casual user, just go through the part of manual that concerns u.

PS: U can damage your OS/ lock PC if u try to play around with this app.
The below link should help u to create an encrypted volume on an USB/DVD/HD
check left side column of this link