Is there an alternative to truecrypt?

For discussions about security.
Message
Author
bark_bark_bark
Posts: 1885
Joined: Tue 05 Jun 2012, 12:17
Location: Wisconsin USA

Is there an alternative to truecrypt?

#1 Post by bark_bark_bark »

Is there an alternative to truecrypt for Windows and Linux?
....

User avatar
Barkin
Posts: 803
Joined: Fri 12 Aug 2011, 04:55

#2 Post by Barkin »


User avatar
SFR
Posts: 1800
Joined: Wed 26 Oct 2011, 21:52

Re: Is there an alternative to truecrypt?

#3 Post by SFR »

bark_bark_bark wrote:truecrypt is not safe
Why do you think so?

BTW, I keep an eye on on IsTrueCryptAuditedYet and saw this yesterday:
https://www.indiegogo.com/projects/the-truecrypt-audit#activity wrote:We are pleased to announce that Phase I of the audit is complete. 11 vulnerabilities were found, all rated Low to Medium severity. To date, we have found no 0-Day critical vulnerabilities or "backdoors" (intentional or otherwise) in the code. In Phase II, we will conduct a formal cryptanalysis, as well as examine the OSX and Linux ports.
Well, not so bad, after all. :wink:

Greetings!
[color=red][size=75][O]bdurate [R]ules [D]estroy [E]nthusiastic [R]ebels => [C]reative [H]umans [A]lways [O]pen [S]ource[/size][/color]
[b][color=green]Omnia mea mecum porto.[/color][/b]

User avatar
ThoriumBlvd
Posts: 159
Joined: Fri 04 Oct 2013, 09:04
Location: N.E. USA

#4 Post by ThoriumBlvd »

I thought dm-crypt would be a sufficient 2nd choice. Looks like you're concerned over lack of support. Well, dm-crypt seems OK on NT or newer, and Mobile (W8?) Windows. Always Linux. But Encrypted A within Encrypted B shows up as no. hmmmm...
[img]http://www.am3radio.us/image3.jpg[/img] . [img]http://www.am3radio.us/image4.jpg[/img]

slavvo67
Posts: 1610
Joined: Sat 13 Oct 2012, 02:07
Location: The other Mr. 305

#5 Post by slavvo67 »

There are plenty of alternatives to Truecrypt. I used Axcrypt a few years ago and it seemed to work well on individual files (Windows). There are a bunch of other free programs and scripts, as well. The full version of Adobe Acrobat has encryption for PDF's, not sure about Adobe Reader. Lots of others. The version of Puppy that I'm using has Bcrypt in the menu, though I haven't tried it. There are also bash scripts you can use.

One of the issues that I tend to have is that if I'm encrypting to send over to someone else, they need the same program on their side to decrypt. That can be a hassle.

User avatar
Barkin
Posts: 803
Joined: Fri 12 Aug 2011, 04:55

#6 Post by Barkin »

slavvo67 wrote:... One of the issues that I tend to have is that if I'm encrypting to send over to someone else, they need the same program on their side to decrypt. That can be a hassle.
On Windows a self-extracting encryped archive is possible,
i.e. the decryption software is included with the file (an .exe) you send, example attached , ( password is PUPPY ).
Attachments
puppy_forum_screengrab.zip
encrypted 7z exe in a ZIP file , password for 7z is PUPPY
(146.29 KiB) Downloaded 233 times
Last edited by Barkin on Sat 24 May 2014, 23:55, edited 2 times in total.

User avatar
Barkin
Posts: 803
Joined: Fri 12 Aug 2011, 04:55

#7 Post by Barkin »

It's also possible to create a self-decrypting html webpage, and email that webpage to someone,
where they can read it in their browser if it has JavaScript enabled , ( and if they have the password, ideally sent via another channel ).

slavvo67
Posts: 1610
Joined: Sat 13 Oct 2012, 02:07
Location: The other Mr. 305

#8 Post by slavvo67 »

Well, I downloaded your attachment and then realized it was an exe for Windows. LOL Running 3 Linux boxes so it wasn't very helpful. Any self extracting things for Puppy (cross platform type stuff)?

Now, I've heard that Truecrypt has no back doors and further, you can encrypt inside an encryption and so on. Pretty crazy! I play around with some scripts and things but they're probably amateur hour compared to Truecrypt. What make you think it's not safe?

User avatar
SFR
Posts: 1800
Joined: Wed 26 Oct 2011, 21:52

#9 Post by SFR »

slavvo67 wrote:Well, I downloaded your attachment and then realized it was an exe for Windows. LOL Running 3 Linux boxes so it wasn't very helpful. Any self extracting things for Puppy (cross platform type stuff)?
You can normally unpack self-extracting *.exe created by 7zip (or rar) on Linux box, just use 7z itself:

Code: Select all

7z x somarchive.exe
The only difference between somearchive.7z and somearchive.exe is PE32 executable prepended to the latter, which (under Win) reads and unpacks the rest of a file, but when you use 7z directly, the "ugly" part will be skipped.

Also, if you have full version of p7zip installed (you can grab it here: http://pkgs.org/search/p7zip), which contains the necessary 7zCon.sfx module, you can create Linux-specific self-extracting 7z archives - in this case instead of PE32 exec, an ELF exec will be prepended (no GUI, CLI only), eg.:

Code: Select all

7z -sfx7zCon.sfx a somearchive.sfx /path/to/file/or/dir
Greetings!
[color=red][size=75][O]bdurate [R]ules [D]estroy [E]nthusiastic [R]ebels => [C]reative [H]umans [A]lways [O]pen [S]ource[/size][/color]
[b][color=green]Omnia mea mecum porto.[/color][/b]

User avatar
Barkin
Posts: 803
Joined: Fri 12 Aug 2011, 04:55

#10 Post by Barkin »

slavvo67 wrote:(cross platform type stuff)?
The webpage attached is cross-platform encryption, just requires a browser with JavaScript eneabled.

The password, aka "Key", is PUPPY , then click on "decrypt" at the very bottom of the page , then look in the big green box.

It's an adequate method for sending/storing passwords , but too slow for large amounts of data.
Attachments
JavaScrypt Encryption and Decryption , [ key is PUPPY ].zip
webpage in ZIP file
(10.37 KiB) Downloaded 227 times

User avatar
fabrice_035
Posts: 765
Joined: Mon 28 Apr 2014, 17:54
Location: Bretagne / France

#11 Post by fabrice_035 »

Hi,

tcplay is sure ? tcplay not available for puppy ?

regard

bark_bark_bark
Posts: 1885
Joined: Tue 05 Jun 2012, 12:17
Location: Wisconsin USA

#12 Post by bark_bark_bark »

The TC developers posted on their sourceforge page that it is not safe.
....


watchdog
Posts: 2021
Joined: Fri 28 Sep 2012, 18:04
Location: Italy

#14 Post by watchdog »

How much is it safe to use a heavy encrypted savefile mounted by filemnt in every puppy to put resereved data in it?

sfs
Posts: 49
Joined: Sat 02 Nov 2013, 04:49
Location: Russia
Contact:

#15 Post by sfs »

fabrice_035 wrote: tcplay is sure ? tcplay not available for puppy ?
https://github.com/bwalex/tc-play
Attachments
tcplay-git-2.0+5+g088389d-1-i686.tar.gz
(147.97 KiB) Downloaded 249 times
[url=https://sourceforge.net/projects/puppyrusa/]PuppyRus-Arch[/url]

User avatar
SFR
Posts: 1800
Joined: Wed 26 Oct 2011, 21:52

#16 Post by SFR »

RE: TrueCrypt is dead

I think it's best to wait a few months with final conclusions, until the Phase II of the Audit will be completed.

Personally, I don't see any reasonable replacement for TC, considering things like:
- Free and Open Source
- cross-platform
- full-disk/partition/container encryption
- cascade encryption
- plausible deniability

The best I can think of is LUKS/dm-crypt (cryptsetup) on Lin + FreeOTFE to access it on Win (dunno what about Mac?), but it would be a PITA to use, at least in comparison to TC.
And tc-play seems to be only for Linux and DragonFly BSD.

Btw, GRC is now hosting the latest "normal" release of TC (v7.1a):
https://www.grc.com/misc/truecrypt/truecrypt.htm
and I'm sure others will take over the baton, maybe them:
http://truecrypt.ch/
___________
watchdog wrote:How much is it safe to use a heavy encrypted savefile mounted by filemnt in every puppy to put resereved data in it?
Cryptoloop is deprecated and vulnerable:
https://en.wikipedia.org/wiki/Cryptoloop wrote:Cryptoloop is vulnerable to watermarking attacks,[1] making it possible to determine presence of watermarked data on the encrypted filesystem
Also, see here: https://github.com/puppylinux-woof-CE/w ... issues/146
I hope it will be eventually implemented (FatDog already has it)...
___________

@Sfs: How (and where) did you compile tcplay?
In Slacko-5.7.0, I was having problems at './configure' stage with "missing" uuid.h file, until I compiled and installed the latest libuuid-1.0.2 and the problem's gone.
Exactly the same happend while compiling cryptsetup.
Thanks.

Greetings!
[color=red][size=75][O]bdurate [R]ules [D]estroy [E]nthusiastic [R]ebels => [C]reative [H]umans [A]lways [O]pen [S]ource[/size][/color]
[b][color=green]Omnia mea mecum porto.[/color][/b]

slavvo67
Posts: 1610
Joined: Sat 13 Oct 2012, 02:07
Location: The other Mr. 305

Truecrypt Forked and Relocated to Switzerland

#17 Post by slavvo67 »


watchdog
Posts: 2021
Joined: Fri 28 Sep 2012, 18:04
Location: Italy

#18 Post by watchdog »

I think cryptography will not be ever quite safe. If you have the right calculation power you can decrypt every code by statistical methods. Militaries had said to send important orders by paper mails in warfare circumstances. New York's Police bought mechanic typewriters.

slavvo67
Posts: 1610
Joined: Sat 13 Oct 2012, 02:07
Location: The other Mr. 305

#19 Post by slavvo67 »

Watchdog:

I think you're right. There is no true answer.

I will say though, it is still common for thieves to get vital information by going through your paper trash. Perhaps, still the most common threat to security.

Best,

Slavvo67

User avatar
RetroTechGuy
Posts: 2947
Joined: Tue 15 Dec 2009, 17:20
Location: USA

Re: Is there an alternative to truecrypt?

#20 Post by RetroTechGuy »

bark_bark_bark wrote:Is there an alternative to truecrypt for Windows and Linux?
Back before I migrated to Truecrypt, I used Scramdisk (under Win98).

There is a Linux project:

http://sd4l.sourceforge.net/

Though if Truecrypt is compromised, those volumes are suspect.

I thought that it supported several volume types...
[url=http://murga-linux.com/puppy/viewtopic.php?t=58615]Add swapfile[/url]
[url=http://wellminded.net63.net/]WellMinded Search[/url]
[url=http://puppylinux.us/psearch.html]PuppyLinux.US Search[/url]

Post Reply