TrueCrypt, VeraCrypt, or ???

[tovian]

I was planning to install TrueCrypt to encrypt some partitions but was advised that VeraCrypt is more current and more secure. I could not find it in the Mint Repo(s) so I downloaded a deb package that was supposed to be for the Ubuntu GUI. It appeared to install correctly - and there was a link/shortcut in my Start-Menu. But when I attempt to launch the program I get the "busy indicator" for a minute then it goes away.

Anyone know where to get and how to install VeraCrypt to run on Mint-19.3/Cinnamon
or
is there a better CROSS-PLATFORM alternative (I definitely want something that runs on Linux AND Windows).

Thanks in advance !!

[Koning Mint]

edited: wrong answer

[Appoloin]

Do you really need encrypted partitions or would encrypted folders do? For encrypted folders you can use Gnome Encfs Manager.

[AndyMH]

Do you really need encrypted partitions or would encrypted folders do? For encrypted folders you can use Gnome Encfs Manager.

encfs is okay, but has limitations and weaknesses - google. For starters, an encrypted folder will show all the files and sizes, the filenames are gibberish and you can't read them.

Also use veracrypt, you can install from ppa:
https://www.linuxbabe.com/ubuntu/instal ... 6-04-16-10
I would advise against encrypting whole partitions, use veracrypt containers (they are a file) instead.

[Joe2Shoe]

I use LUKS (Linux Unified Key Setup) in LM 19.3 x64. I created a "Data" partition on the HDD. Within the Data partition, I have several encrypted folders (LUKS).
I, personally, would NOT use either TrueCrypt or VeraCrypt (as TrueCrypt has a NASA backdoor, probably VeraCrypt, also).
Safe encrypting.

[pbear]

... advised that VeraCrypt is more current and more secure.

Main improvement of VeraCrypt is a delay in processing password, which make brute force attacks more difficult. Whether this matters depends on what sort of "adversary" you have in mind. For casual busybody security, doesn't matter. For govt-agency types, doesn't help.

... TrueCrypt has a NASA backdoor

Cite, please. Been following the saga ever since TrueCrypt was abandoned without warning. Haven't heard this one before.

[tovian]

open a terminal and press...
...
post the message in the terminal back in this threat

Thank you for your help. When I discovered that the app did not work I uninstalled and reinstalled it several times with no luck. I'm going to try installing from the ppa also mentioned in the replies above. If that doesn't work I will abandon VeraCrypt for some other solution (can't beat a dead horse forever).

The principal reason I'm still pursuing VeraCrypt at all is that I've used TrueCrypt for a number of years and have a little experience which I hate to let go to waste. But, I will give up on it very soon if it continues to be stubborn.

I prefer a partition or "container" over encrypting files since I would rather have all of this type of data in one place (on the HDD) rather than spread all over who-knows-where. Plus, partitions are relatively easy to image for backup purposes. None of what I am encrypting is "Super-Secret". It's mainly old family history and pictures and miscellaneous archives. None of it would be useful to somebody wanting current personal or financial information.

THANKS for all suggestions !!

[deck_luck]

While researching a way to use a file as an encrypted dm-crypt LUKS virtual disk, I stumbled across the Veracrypt extension in the cryptsetup man page. I do not use Veracrypt, but I thought you might have an interest.

man cryptsetup excerpts:

TCRYPT (TrueCrypt-compatible and VeraCrypt) EXTENSION
cryptsetup supports mapping of TrueCrypt, tcplay or VeraCrypt (with
--veracrypt option) encrypted partition using a native Linux kernel
API. Header formatting and TCRYPT header change is not supported,
cryptsetup never changes TCRYPT header on-device.
...

[AndyMH]

I'm going to try installing from the ppa also mentioned in the replies above.

Un-install what you've done first - synaptic package manager.

[Buzzsaw]

... advised that VeraCrypt is more current and more secure.

Main improvement of VeraCrypt is a delay in processing password, which make brute force attacks more difficult. Whether this matters depends on what sort of "adversary" you have in mind. For casual busybody security, doesn't matter. For govt-agency types, doesn't help.

... TrueCrypt has a NASA backdoor

Cite, please. Been following the saga ever since TrueCrypt was abandoned without warning. Haven't heard this one before.

There is no backdoor.

I hate it when people write sensationalist things like this and then never reply when asked what their source is.

[pbear]

If that doesn't work I will abandon VeraCrypt for some other solution (can't beat a dead horse forever).

The unit193 PPA works fine (I've used it). unit193 is a Xubuntu developer, btw, and his PPA is listed on VeraCrypt's website.

ETA: Was almost (but not quite) certain I tested the deb file at some point, which is what I assume you tried. I've done so now (again, I think). Works fine.

If you'd rather stick with TrueCrypt, there's ppa:stefansundin/truecrypt. Just a user who packaged the tarball (also available).
Been up for three years I know about, so I regard it as reliable.

And I agree about partition containers, they're fine. In fact, my container is a partition on a USB drive (backed up to another one).

[t42]

Why not to install VeraCrypt from the original website?
see https://www.veracrypt.fr/en/Downloads.html):

Code: Select all

wget https://launchpad.net/veracrypt/trunk/1.24-update7/+download/veracrypt-1.24-Update7-setup.tar.bz2
wget https://launchpad.net/veracrypt/trunk/1.24-update7/+download/veracrypt-1.24-Update7-setup.tar.bz2.sig
wget https://www.idrix.fr/VeraCrypt/VeraCrypt_PGP_public_key.asc

gpg --import VeraCrypt_PGP_public_key.asc
gpg --verify veracrypt-1.24-Update7-setup.tar.bz2.sig

tar -xjf veracrypt-1.24-Update7-setup.tar.bz2

To install GUI x64:
sudo ./veracrypt-1.24-Update7-setup-gui-x64
choose installation options  [1] or [2] then accept license

Or to install console x64:
sudo ./veracrypt-1.24-Update7-setup-console-x64
choose installation options  [1] or [2] then accept license

[tovian]

I hate it when people write sensationalist things like this and then never reply when asked what their source is.

Wecome to the world of "Fake News". It's everywhere... all we can do is "Identify and Ignore".

use veracrypt, you can install from ppa:...

Worked GREAT !! Starting my migrations now.

my container is a partition on a USB drive (backed up to another one)

Great "security AND backup" strategy...
I wish you would start/link-to a tutorial. I am VERY interested in precisely how to implement all the pieces.


THANK YOU TO EVERYONE WHO RESPONDED

[rujikin]

I hate it when people write sensationalist things like this and then never reply when asked what their source is.

Wecome to the world of "Fake News". It's everywhere... all we can do is "Identify and Ignore".

Truecrypt was forced to stop development all of a sudden under unique circumstances and censored. Then after they were forced to stop they released one more version with no notes or anything. Everyone assumed it was a compromised version with an NSA backdoor. It was very suspicious and people kept sharing the previous version.

Sadly the world has been fake news for much longer than you know. The more you look back the more prevalent you notice it was but when you only have 1 source providing news then there is a lot less push back for lies and propaganda. Many "multipart" stories are technically ways for media companies to get payments from the company they are reporting on and if they pay up part 2 never airs.

[pbear]

Truecrypt was forced to stop development all of a sudden under unique circumstances and censored.

Also not true. Or, rather, all we know is that they stopped. The most plausible explanation (imho) is that this occurred about the time a secure email provider was threatened with jail time if he didn't implement a back door for his service. Even that explanation, though, is pure speculation.

[I2k4]

I hate it when people write sensationalist things like this and then never reply when asked what their source is.

Wecome to the world of "Fake News". It's everywhere... all we can do is "Identify and Ignore".

Truecrypt was forced to stop development all of a sudden under unique circumstances and censored. Then after they were forced to stop they released one more version with no notes or anything. Everyone assumed it was a compromised version with an NSA backdoor. It was very suspicious and people kept sharing the previous version.

Sadly the world has been fake news for much longer than you know. The more you look back the more prevalent you notice it was but when you only have 1 source providing news then there is a lot less push back for lies and propaganda. Many "multipart" stories are technically ways for media companies to get payments from the company they are reporting on and if they pay up part 2 never airs.

It's been a few years and the drama dragged on for months, but the basic story seems to be the TrueCrypt "team" broke up over who knows what (that if anything was "censored") while an independent security audit was still in progress. The audit proved it safe. Moreover, the Snowden data included accounts of NSA and other federal authorities banging their heads about inability to crack it. These are searchable things.

I still use the last version, via the PPA maintained by Stephen Sundin - you'll see the last update was very recent:

https://launchpad.net/~stefansundin/+ar ... /truecrypt

The desktop client operates extremely well. I'm not personally trying to beat the NSA or Fancy Bear, just the average hacker twerp that might get into one of my devices or cloud storage services somehow.

[deck_luck]

Tovian, reading the recent Ubuntu 20 media release, it mentions the Gnome Disks utility supports Veracrypt open source encryption. I would expect the Linux Mint 20 (based on Ubuntu 20.4) will have the same capabilities. If you need interoperability with Windows Veracrypt, it might be useful.

[tovian]

...Ubuntu 20 media release, it mentions the Gnome Disks utility supports Veracrypt open source encryption. I would expect the Linux Mint 20 (based on Ubuntu 20.4) will have the same capabilities.

VERY Interesting. I will pursue this. I may PM Xenopeek to see what he thinks about True-vs-Vera Crypt... his advice on things like this (specifically remembering his comments regarding KeepassXC) has always been good for me.

THANK YOU for this information.

[nn70]

Truecrypt gets my vote. Reading between the lines (not just from the source I've given below) it appears it's pretty unbreakable. Check hash before installing, but it will be the right version at Gibson Research.

https://www.grc.com/misc/truecrypt/truecrypt.htm

[pbear]

I go back and forth. On the one hand, VeraCrypt definitely is more resistant to brute force attack, because of the change to the validation procedure I mentioned earlier. On the other hand, TrueCrypt has the nice quality that there's no one to intimidate into creating a backdoor. On the third hand (heh), for most regular users, both probably are secure enough, which would make Disks compatibility (if it works well) a pretty good tie-breaker.