Truecrypt Seems to work pretty well

[fatcinco]

When using small 200 mb encrypted file containers, everything seems zippy.

root@raspberrypi:/mnt/bkdrive/Alison# truecrypt -m=nokernelcrypto encrypttest.tc /mnt/tc
Enter password for /mnt/bkdrive/Alison/encrypttest.tc:
Enter keyfile [none]:
Protect hidden volume (if any)? (y=Yes/n=No) [No]:
root@raspberrypi:/mnt/bkdrive/Alison# cd /mnt/tc
root@raspberrypi:/mnt/tc# ls
rude.png
root@raspberrypi:/mnt/tc#

[fatcinco]

I also tried it with drive encryption and large file containers - both seemed fine.

[AndiDog]

I get the error "Error: mount: you must specify the filesystem type", and when I try specifying it manually it fails with "Error: mount: wrong fs type, bad option, ...".

How did you create the volume? I created one in the boot partition for testing using the following command:

Code: Select all

./truecrypt -t --create /boot/truecrypt-test.img --password=1234 --size=10485760 --volume-type=normal --encryption=AES --hash=Whirlpool --filesystem=vfat -k "" --random-source=/dev/urandom

This image works without problems when mounted from the TrueCrypt GUI in Windows 7.

[AndiDog]

An image created with the TrueCrypt GUI in Windows seems to work though, so I must be doing something wrong in the creation command line.

[fatcinco]

I set --filesystem=none, I think. I can double check in a couple hours.

[finnw]

How did you build TrueCrypt for the Pi?

I know you need the NO_ASM option, but what about the wxGTK dependency? I couldn't get it to work with the version from Debian Squeeze.

[fatcinco]

Downloaded source and source for wxWidgets
Downloaded ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/ (pkcs#11 .h files)

export PKCS11_INC=/home/pi/crypto
make WX_ROOT=/home/pi/wx/ wxbuild
make WXSTATIC=1

[finnw]

Downloaded source and source for wxWidgets
Downloaded ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/ (pkcs#11 .h files)

export PKCS11_INC=/home/pi/crypto
make WX_ROOT=/home/pi/wx/ wxbuild
make WXSTATIC=1

It's working now. The WXSTATIC was what I needed, thanks!

[komw]

Could you post some benchmarks of use truecrypt?

[amar]

Downloaded source and source for wxWidgets
Downloaded ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/ (pkcs#11 .h files)

export PKCS11_INC=/home/pi/crypto
make WX_ROOT=/home/pi/wx/ wxbuild
make WXSTATIC=1

Are you using debian image or?

I tried both, installing wx from apt and from source but everytime build ends with

Code: Select all

pi@raspberrypi:~/truecrypt-7.1a-source$ make NOGUI=1 NOASM=1
Linking truecrypt
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x8): undefined reference to `wxApp::GetClassInfo() const'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x2c): undefined reference to `wxApp::GetEventTable() const'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x30): undefined reference to `wxApp::GetEventHashTable() const'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x44): undefined reference to `wxApp::Initialize(int&, wchar_t**)'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x50): undefined reference to `wxApp::OnInitGui()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x58): undefined reference to `wxAppBase::OnExit()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x5c): undefined reference to `wxApp::CleanUp()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x64): undefined reference to `wxAppBase::Exit()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x68): undefined reference to `wxAppBase::OnInitCmdLine(wxCmdLineParser&)'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x6c): undefined reference to `wxAppBase::OnCmdLineParsed(wxCmdLineParser&)'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x88): undefined reference to `wxApp::Yield(bool)'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x8c): undefined reference to `wxApp::WakeUpIdle()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x90): undefined reference to `wxAppBase::CreateTraits()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x94): undefined reference to `wxAppBase::MainLoop()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x98): undefined reference to `wxAppBase::ExitMainLoop()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x9c): undefined reference to `wxAppBase::Pending()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xa0): undefined reference to `wxAppBase::Dispatch()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xa4): undefined reference to `wxAppBase::ProcessIdle()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xa8): undefined reference to `wxAppBase::SendIdleEvents(wxWindow*, wxIdleEvent&)'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xb4): undefined reference to `wxAppBase::GetTopWindow() const'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xb8): undefined reference to `wxAppBase::GetDisplayMode() const'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xc4): undefined reference to `wxAppBase::GetLayoutDirection() const'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xc8): undefined reference to `wxAppBase::SetActive(bool, wxWindow*)'
UserInterface.o: In function `TrueCrypt::UserInterface::UserInterface()':
UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceC2Ev+0x8): undefined reference to `wxApp::wxApp()'
UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceC2Ev+0x16c): undefined reference to `wxApp::~wxApp()'
UserInterface.o: In function `TrueCrypt::UserInterface::~UserInterface()':
UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceD0Ev+0x2c8): undefined reference to `wxApp::~wxApp()'
UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceD0Ev+0x2fc): undefined reference to `wxApp::~wxApp()'
UserInterface.o: In function `TrueCrypt::UserInterface::~UserInterface()':
UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceD1Ev+0x2c8): undefined reference to `wxApp::~wxApp()'
UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceD1Ev+0x2f4): undefined reference to `wxApp::~wxApp()'
UserInterface.o:UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceD2Ev+0x2c8): more undefined references to `wxApp::~wxApp()' follow
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x8): undefined reference to `wxApp::GetClassInfo() const'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x2c): undefined reference to `wxApp::GetEventTable() const'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x30): undefined reference to `wxApp::GetEventHashTable() const'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x44): undefined reference to `wxApp::Initialize(int&, wchar_t**)'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x50): undefined reference to `wxApp::OnInitGui()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x54): undefined reference to `wxAppBase::OnRun()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x58): undefined reference to `wxAppBase::OnExit()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x5c): undefined reference to `wxApp::CleanUp()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x64): undefined reference to `wxAppBase::Exit()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x68): undefined reference to `wxAppBase::OnInitCmdLine(wxCmdLineParser&)'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x6c): undefined reference to `wxAppBase::OnCmdLineParsed(wxCmdLineParser&)'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x88): undefined reference to `wxApp::Yield(bool)'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x8c): undefined reference to `wxApp::WakeUpIdle()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x90): undefined reference to `wxAppBase::CreateTraits()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x94): undefined reference to `wxAppBase::MainLoop()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x98): undefined reference to `wxAppBase::ExitMainLoop()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x9c): undefined reference to `wxAppBase::Pending()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xa0): undefined reference to `wxAppBase::Dispatch()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xa4): undefined reference to `wxAppBase::ProcessIdle()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xa8): undefined reference to `wxAppBase::SendIdleEvents(wxWindow*, wxIdleEvent&)'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xb4): undefined reference to `wxAppBase::GetTopWindow() const'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xb8): undefined reference to `wxAppBase::GetDisplayMode() const'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xc4): undefined reference to `wxAppBase::GetLayoutDirection() const'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xc8): undefined reference to `wxAppBase::SetActive(bool, wxWindow*)'
UserInterface.o:(.rodata._ZTIN9TrueCrypt13UserInterfaceE+0x8): undefined reference to `typeinfo for wxApp'
collect2: ld returned 1 exit status
make[1]: *** [truecrypt] Error 1
make: *** [all] Error 2
pi@raspberrypi:~/truecrypt-7.1a-source$ 

[netomx]

no luck for me too

[fatcinco]

I am using Debian image.

Is the compile for wx going ok? And did you clean any bad installs?

[netomx]

no and yes

[fatcinco]

(I know the questions are stupid but just to confirm)
You:
Downloaded the sources
for wx you ./configure (that ran for forever)
(Configured wxWidgets 2.8.12 for `armv6l-unknown-linux-gnu')
make (runs for twice as long)
(mine is still going but I think the next steps were: - I will check again the morning)
Are things working up to this point?

export PKCS11_INC=/home/pi/crypto <this should be the directory of the headers you downloaded

then in truecrypt dir
make WX_ROOT=/home/pi/wx/ wxbuild <directory to wx
make WXSTATIC=1

[netomx]

I'm doing this, but will work for a headless station?

[ken_fallon]

These are the steps that I took to compile the application without a gui.

• Get the truecrypt source from http://www.truecrypt.org/downloads2 and download the “Mac OS X / Linux (.tar.gz)” file and save it to a directory.
• Get the wxWidgets from http://prdownloads.sourceforge.net/wxwi ... .12.tar.gz. You will need this even if you are not planning to run a GUI.
• You also need the fuze development libraries which you can install in Raspbian using

  Code: Select all

  aptitude install libfuse-dev

• You need to get the RSA Security Inc. PKCS #11 Cryptographic Token Interface (Cryptoki) 2.20 header files

  Code: Select all

  wget ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/*.h

To compile the application do as suggested above. The wxbuild took me 23m21.490s and the make of TrueCrypt itself took 51m29.737s

Code: Select all

$ export PKCS11_INC=/usr/local/src/truecrypt/pkcs/
$ make NOGUI=1 WX_ROOT=/usr/src/wxWidgets wxbuild 
$ make NOGUI=1 WXSTATIC=1 
$ sudo cp -v Make/truecrypt /usr/local/bin/

You can then run it using the following command.

Code: Select all

truecrypt -t -k "" --protect-hidden=no /tmp/test.truecrypt /tmp/key/ -v -m=nokernelcrypto

[Forumkel]

When trying a large partition on my 3TB USB drive I get this:

Code: Select all

Error: Error: The drive uses a sector size other than 512 bytes.

Due to limitations of components available on your platform, partition/device-hosted volumes on the drive can only be mounted using kernel cryptographic services.

Possible solutions:
- Enable use of the kernel cryptographic services (Preferences > System Integration).
- Use a drive with 512-byte sectors.
- Create a file-hosted volume (container) on the drive.

I'm using XBian and tried to build the dm kernel modules following this howto: http://elinux.org/RPi_Kernel_Compilation
But there doesn't seem to be any dm support at all?

[chrisprt]

I get the error "Error: mount: you must specify the filesystem type", and when I try specifying it manually it fails with "Error: mount: wrong fs type, bad option, ...".

How did you create the volume? I created one in the boot partition for testing using the following command:

Code: Select all

./truecrypt -t --create /boot/truecrypt-test.img --password=1234 --size=10485760 --volume-type=normal --encryption=AES --hash=Whirlpool --filesystem=vfat -k "" --random-source=/dev/urandom

This image works without problems when mounted from the TrueCrypt GUI in Windows 7.

I'm having the same problem unfortunately. I've tried ext3, ext4 and NTFS.

[Mon Nov 26 01:33:47 2012] FAT-fs (loop1): invalid media value (0xb0)
[Mon Nov 26 01:33:47 2012] FAT-fs (loop1): Can't find a valid FAT filesystem
[Mon Nov 26 01:33:47 2012] NTFS-fs warning (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum.
[Mon Nov 26 01:33:47 2012] NTFS-fs error (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid.
[Mon Nov 26 01:33:47 2012] NTFS-fs error (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[Mon Nov 26 01:33:47 2012] NTFS-fs error (device loop1): ntfs_fill_super(): Not an NTFS volume.
[Mon Nov 26 01:36:06 2012] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[Mon Nov 26 01:40:45 2012] EXT4-fs (loop1): VFS: Can't find ext4 filesystem

[chrisprt]

For everyone having trouble mounting their formatted containers, create the volume with NO filesystem. After that's done, mount the file with --filesystem=none, which will merely create a /dev/loop1 device. After that, use the common filesystem formatting tool for your desired filesystem (e.g. mkfs.ext4 /dev/loop1). After that, you should be able to mount it fine.

Thanks to everyone in this thread for helping me get this all working!

[vmkivinen]

For everyone having trouble mounting their formatted containers, create the volume with NO filesystem. After that's done, mount the file with --filesystem=none, which will merely create a /dev/loop1 device. After that, use the common filesystem formatting tool for your desired filesystem (e.g. mkfs.ext4 /dev/loop1). After that, you should be able to mount it fine.

Thanks to everyone in this thread for helping me get this all working!

How do I know what the /dev/loop# number is? Is there a way to list the "active" loop devices or something like that?

Thanks.

[Genmutant]

Mounting doesn't seem to work for me.
After I enter the password, it hangs on the password input and nothing happens.

Code: Select all

/media$ truecrypt -t -k "" --protect-hidden=no -v -m=nokernelcrypto /dev/sda1 /media/truecrypt1/

If I kill the input (strg+x) there is an empty truecrypt1 and if I try to mount it again using truecrypt, it says it's already mounted.
The device is a complete encrypted extern hdd with NTFS (formatted in Windows, truecrypt).

[chrisprt]

For everyone having trouble mounting their formatted containers, create the volume with NO filesystem. After that's done, mount the file with --filesystem=none, which will merely create a /dev/loop1 device. After that, use the common filesystem formatting tool for your desired filesystem (e.g. mkfs.ext4 /dev/loop1). After that, you should be able to mount it fine.

Thanks to everyone in this thread for helping me get this all working!

How do I know what the /dev/loop# number is? Is there a way to list the "active" loop devices or something like that?

Thanks.

Sorry for the late reply, but you can use "df -h" to see the active loops.

[vmkivinen]

Sorry for the late reply, but you can use "df -h" to see the active loops.

But still very helpful. Thank you very much

[Narf03]

Hi all, i have done doing exactly what you ppl say, but i cant find my compiled truecrypt, please help.

Code: Select all

pi@raspberrypi /temp2/truecrypt-7.1a-source $ sudo make NOGUI=1 WX_ROOT=/temp2/wxWidgets-2.8.12 wxbuild
Configuring wxWidgets library...
Building wxWidgets library...
In file included from /temp2/wxWidgets-2.8.12/include/wx/memory.h:16:0,
                 from /temp2/wxWidgets-2.8.12/include/wx/object.h:20,
                 from /temp2/wxWidgets-2.8.12/include/wx/wx.h:16,
                 from /temp2/wxWidgets-2.8.12/include/wx/wxprec.h:68:
/temp2/wxWidgets-2.8.12/include/wx/string.h:1205:7: note: the mangling of âva_listâ has changed in GCC 4.4
/temp2/wxWidgets-2.8.12/src/common/log.cpp:87:6: note: the mangling of âva_listâ has changed in GCC 4.4
/temp2/wxWidgets-2.8.12/src/common/string.cpp:84:39: warning: âwxEmptyStringâ initialized and declared âexternâ [enabled by default]
In file included from /temp2/wxWidgets-2.8.12/include/wx/debug.h:22:0,
                 from /temp2/wxWidgets-2.8.12/include/wx/defs.h:521,
                 from /temp2/wxWidgets-2.8.12/include/wx/wxprec.h:13:
/temp2/wxWidgets-2.8.12/include/wx/wxchar.h: In member function âint wxString::PrintfV(const wxChar*, va_list)â:
/temp2/wxWidgets-2.8.12/include/wx/wxchar.h:1080:9: note: the mangling of âva_listâ has changed in GCC 4.4
/temp2/wxWidgets-2.8.12/src/common/wxchar.cpp:1713:5: note: the mangling of âva_listâ has changed in GCC 4.4
In file included from /temp2/wxWidgets-2.8.12/include/wx/memory.h:16:0,
                 from /temp2/wxWidgets-2.8.12/include/wx/object.h:20,
                 from /temp2/wxWidgets-2.8.12/include/wx/wx.h:16,
                 from /temp2/wxWidgets-2.8.12/include/wx/wxprec.h:68:
/temp2/wxWidgets-2.8.12/include/wx/string.h:1205:7: note: the mangling of âva_listâ has changed in GCC 4.4
In file included from /temp2/wxWidgets-2.8.12/include/wx/memory.h:16:0,
                 from /temp2/wxWidgets-2.8.12/include/wx/object.h:20,
                 from /temp2/wxWidgets-2.8.12/include/wx/wx.h:16,
                 from /temp2/wxWidgets-2.8.12/include/wx/wxprec.h:68:
/temp2/wxWidgets-2.8.12/include/wx/string.h:1205:7: note: the mangling of âva_listâ has changed in GCC 4.4
pi@raspberrypi /temp2/truecrypt-7.1a-source $ sudo make NOGUI=1 WXSTATIC=1
Compiling Application.cpp
Compiling CommandLineInterface.cpp
Compiling FavoriteVolume.cpp
Compiling LanguageStrings.cpp
Compiling StringFormatter.cpp
Compiling TextUserInterface.cpp
TextUserInterface.cpp: In member function âvirtual void TrueCrypt::TextUserInterface::RestoreVolumeHeaders(TrueCrypt::SharedPtr<TrueCrypt::VolumePath>) constâ:
TextUserInterface.cpp:1374:11: warning: variable âheaderSizeâ set but not used [-Wunused-but-set-variable]
Compiling UserInterface.cpp
Compiling UserPreferences.cpp
Compiling Xml.cpp
Compiling Main.cpp
Compiling Resources.cpp
Linking truecrypt
pi@raspberrypi /temp2/truecrypt-7.1a-source $ ls
Boot    Core        ct-kip.h  License.html   Main      otp-pkcs11.h  pkcs11t-consolidated-d1.h  pkcs-11v2-20a3.h  Release    wxrelease
Build   Crypto      Driver    License.txt    Makefile  pkcs11f.h     pkcs11t.h                  Platform          Resources
Common  cryptoki.h  Format    License.txt.h  Mount     pkcs11.h      pkcs-11v2-20a3d3.h         Readme.txt        Volume
pi@raspberrypi /temp2/truecrypt-7.1a-source $ 

[mattborja]

You guys do know you can also just download the guy's compiled binary here: http://reinhard-seiler.blogspot.co.at/2 ... e-for.html

After hours of trying to get it compiled, it appears there was some inconsistency using the latest version of PKCS11 preventing me from successfully doing make WXSTATIC=1 in the truecrypt sources directory. I returned to the same article we've all been using (http://reinhard-seiler.blogspot.com/201 ... ry-pi.html) and found the discrete "you can download them here" link which is a link to download the binary (already compiled) version.

To mount my encrypted drive, I now run the following (bypasses the device-mapper error):

Code: Select all

sudo ./truecrypt -m=nokernelcrypto /dev/sda1 /media/somemountpoint/