Veracrypt Version Installation Help?

[AndyMH]

Also, if I am running Linux Mint 20.2, how do I know what version of the Linux Veracrypt to install?

Generally when you install from a ppa you get the latest stable version. I'm running V1.24-update7.

[Portreve]

Hi,

I'm running Cinnamon 20.2. I'm trying to download and install Vercrypt to play around with it. Is this the best place to download it: https://www.veracrypt.fr/en/Downloads.html and which version for Linux should I install? Should I install the latest version for Ubuntu 20.1 or another one and which version is recommended, GUI or Console?

SueS

Ubuntu 20.04 GUI installer: veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb

That's the one you want. Just download it, double-click it, and it will open the system's software installer (Gdebi). Let 'er rip.

After that, you'll find the launcher under Accessories.

It works well for both creating disk image files as well as partitions on physical storage media.

When you initially set something up, during the installation process it will tell you to take your mouse and move it randomly. Do so within the bounds of the program's on-screen window. Do it a lot, and until the little progress bar fills up.

This program is cross-platform, which is great if you need to deal with macOS or Windows environments.

[MikeNovember]

Hi,

Veracrypt is a security software. IT SHOULD NOT BE INSTALLED FROM AN UNOFFICIAL SOURCE.

"ppa:unit193/encryption" is, like any PPA, an untrusted source, not endorsed by Veracrypt.

Official way to install Veracrypt is to go to Veracrypt download page and to select the version for your system:
- Mint 19.x : choose Ubuntu 18.04 one,
- Mint 20.x : choose Ubuntu 20.04 one.

Download the deb of the version for your system, choose the GUI version (interactive use) AND/OR the command line one (use from a program or a script).

Then install Veracrypt with gdebi (select the downloaded deb, right click, "install with gdebi" to check the dependences are met.

Regards,

MN

[AndyMH]

I've been using veracrypt installed from unit193's ppa for probably five years without issue. I think if there was problem it would have surfaced by now. It is/has been discussed on veracrypt's forum, just one example:
https://sourceforge.net/p/veracrypt/dis ... it=25#c43f

[t42]

It is/has been discussed on veracrypt's forum, just one example:
https://sourceforge.net/p/veracrypt/dis ... it=25#c43f

I remeber this thread at the time of posting. This ppa was not discussed in that tread but just mentioned by VeraCrypt author Mounir IDRASSI in reply to the comment by anonymous I would also like to see a PPA for VeraCrypt on Ubuntu .

Code: Select all

Mounir IDRASSI - 2015-02-16

A user (nickname "Unit 193") is providing a PPA for Ubuntu installation of VeraCrypt. All information available here: https://launchpad.net/~unit193/+archive/ubuntu/encryption

Of course, this is not the official PPA of VeraCrypt. I did a first check to validation its content and I had email exchanges with the user behind it who seems to be a serious developer but at the same time I can't give my full endorsement to the available binaries.

For some people "I can't give my full endorsement to the available binaries" matters, for some not.

I think that the expressed above objections is not about low quality of unit193 packages, there were never complaints about that and he packages many software for Ubuntu (though he is not an Ubuntu developer per se). Of course nobody is using third party cryptographic software ppa for for the professional use (and doesn't asking questions on the forums). But I think it would be a good practice to inform beginners on ~unit193 ppa with accompanying Ubuntu's ppa warning

Adding Personal Package Archives (PPAs)
....
[warning icon] Packages in PPAs do not undergo the same process of validation as packages in the main repositories. PPAs are a low-security alternative to the main repositories, so the user will be installing software at their own risk.

Note. Unrelated to this thread but interesting interview about successful attempt to manipulate the encryption products Uncovering : NPR

[MikeNovember]

I've been using veracrypt installed from unit193's ppa for probably five years without issue. I think if there was problem it would have surfaced by now. It is/has been discussed on veracrypt's forum, just one example:
https://sourceforge.net/p/veracrypt/dis ... it=25#c43f

Hi,

I don't know who is the author of unit193's ppa and I do not trust him (her), because I have no way to do it:
- no possible code analysis, the original Veracrypt code is supposedly used,
- no information about compiling system / environment (secure? compromised? security updated?),
=> assessment is not possible; nothing personal against unit193's ppa author.

For a private use I trust Veracrypt authors and I download and use the software they have written and compiled. And I trust people who have reviewed the code.

For a professional use, I would review the code and compile the software myself on a system I would trust because I would have installed it.

We are not speaking of some ordinary desktop application, but of an encryption software, use to protect personal or sensitive data. One needs to be convinced that this software has no vulnerability, no backdoor...

Regards,

MN

[t42]

Veracrypt is a security software. IT SHOULD NOT BE INSTALLED FROM AN UNOFFICIAL SOURCE.

Take it a little easy, please, it's only your opinion, and it's still a free country...

[OunceofCommonSense]

Veracrypt is a security software. IT SHOULD NOT BE INSTALLED FROM AN UNOFFICIAL SOURCE.

Take it a little easy, please, it's only your opinion, and it's still a free country...

I have to agree that with Encryption software caution and using the official source is a good idea. Also the download should have checksums verified with SHA256 or SHA 512

[t42]

I have to agree that with Encryption software caution and using the official source is a good idea. Also the download should have checksums verified with SHA256 or SHA 512

I explained my (similar) point of view above Re: Veracrypt Version Installation Help by t42 » 06 Sep 2021 14:46
But can't be comfortable with such flame-like style of imposing their opinion, please compare it with the comments of other users on this page.

[t42]

Also the download should have checksums verified with SHA256 or SHA 512

The recomended way of verification is:

for Ubuntu 20.04 deb:

Code: Select all

wget https://www.idrix.fr/VeraCrypt/VeraCrypt_PGP_public_key.asc
gpg --import VeraCrypt_PGP_public_key.asc
wget https://launchpad.net/veracrypt/trunk/1.24-update7/+download/veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb
wget https://launchpad.net/veracrypt/trunk/1.24-update7/+download/veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb.sig
gpg --verify veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb.sig

expected output (note the line gpg: Good signature from "VeraCrypt Team):

Code: Select all

gpg: keyserver option 'no-try-dns-srv' is unknown
gpg: assuming signed data in 'veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb'
gpg: Signature made Sat Aug  8 21:23:12 2020 EEST
gpg:                using RSA key 5069A233D55A0EEB174A5FC3821ACD02680D16DE
gpg: Good signature from "VeraCrypt Team (2018 - Supersedes Key ID=0x54DDD393) <veracrypt@idrix.fr>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 5069 A233 D55A 0EEB 174A  5FC3 821A CD02 680D 16DE

for generic installer:

Code: Select all

wget https://www.idrix.fr/VeraCrypt/VeraCrypt_PGP_public_key.asc
gpg --import VeraCrypt_PGP_public_key.asc
wget https://launchpad.net/veracrypt/trunk/1.24-update7/+download/veracrypt-1.24-Update7-setup.tar.bz2
wget https://launchpad.net/veracrypt/trunk/1.24-update7/+download/veracrypt-1.24-Update7-setup.tar.bz2.sig
gpg --verify veracrypt-1.24-Update7-setup.tar.bz2.sig

[Portreve]

*whistles VERY LOUDLY into this discussion thread*

Download the deb of the version for your system, choose the GUI version (interactive use) AND/OR the command line one (use from a program or a script).

I've been using veracrypt installed from unit193's ppa for probably five years without issue. I think if there was problem it would have surfaced by now. It is/has been discussed on veracrypt's forum, just one example:
https://sourceforge.net/p/veracrypt/dis ... it=25#c43f

Note. Unrelated to this thread but interesting interview about successful attempt to manipulate the encryption products Uncovering : NPR

Hey, fellas!

Did any of you bother to read or pay attention to my post here?

There are some distros out there which include a version of VeraCrypt in their repos, or have a PPA or equivalent set up. Others, like LM, don't. VC is compiled for a whole heck of a lot of different scenarios, and honestly it's a bit confusing and requires doing research to know which binary one needs to use. This thread has been a real mess with just all kinds of different viewpoints and extraneous things put up, which is why I posted a copy of the appropriate link. I also posted a brief comment on why it should be used.

[SueS]

Thanks to everyone for a robust discussion. Maybe the next version of Linux Mint will include simple encryption software.

[t42]

Maybe the next version of Linux Mint will include simple encryption software.

Maybe ? In addition to ten (at least) already installed by default or readily available in the repository?

[SueS]

What's the best of the ones in the repository, in your opinion?

[AndyMH]

Depends on what you mean by 'best'. Easy to use - encfs plus the associated GUI. The GUI, gnome encfs manager, used to be in software manager but was dropped with LM20 - there was an incompatibility. The author has developed an alternative, Molch Encfs Manager, which you can get here:
https://moritzmolch.com/apps/mencfsm.html
More on encfs here:
https://en.wikipedia.org/wiki/EncFS
There are some security concerns with encfs, but adequate for normal use.

[t42]

What's the best of the ones in the repository, in your opinion?

I think there isn't one, there are a lot of specific features and the choice depends on your usage but more important is a good understanding of what you are doing. Some are listed here 10 Best File and Disk Encryption Tools Outside repository VeraCrypt may be a good choice, it has three distinctly different modes of operation.

[SueS]

One final question related to verifying the authenticity. I see the Checksums (SHA256 and SHA512) at the bottom of the download page: https://www.veracrypt.fr/en/Downloads.html. What are the commands for verifying the authenticity using those?

[t42]

To verify the integrity and authenticity of the package
- import VeraCrypt PGP Public Key:

Code: Select all

wget https://www.idrix.fr/VeraCrypt/VeraCrypt_PGP_public_key.asc
gpg --import VeraCrypt_PGP_public_key.asc
gpg --list-signatures veracrypt@idrix.fr |grep "Key fingerprint"

and check the fingerprint Key fingerprint = 5069 A233 D55A 0EEB 174A 5FC3 821A CD02 680D 16DE

- Verification of the package for Linux Mint 20:

Code: Select all

wget https://launchpad.net/veracrypt/trunk/1.24-update7/+download/veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb
wget https://launchpad.net/veracrypt/trunk/1.24-update7/+download/veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb.sig
gpg --verify veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb.sig

Look for the line gpg: Good signature from "VeraCrypt Team (2018 - Supersedes Key ID=0x54DDD393) <veracrypt@idrix.fr>" [unknown]

- Installation

Code: Select all

sudo dpkg -i veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb

Edit:

I see the Checksums (SHA256 and SHA512) at the bottom of the download page

These checksum files are Windows formatted. To go without removing \r and what else, generate a checksum of the package, open veracrypt-1.24-Update7-sha256sum.txt in text editor and compare it with your result. Or use cat

Code: Select all

sha256sum veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb
87c9a97d8ae45614f835967cf05c398c9804517a6d0cfe1700b8dfa8905785fc  veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb

cat  veracrypt-1.24-Update7-sha256sum.txt |grep veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb
87C9A97D8AE45614F835967CF05C398C9804517A6D0CFE1700B8DFA8905785FC veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb

You need to verify signature of downloaded checksum files as described above.

[SueS]

Thanks very much! I appreciate your help and patience with my questions!