Free open-source disk encryption software for Windows Vista/XP, Mac OS X, and Linux

Main Features:


Creates a virtual encrypted disk within a file and mounts it as a real disk.
Encrypts an entire partition or storage device such as USB flash drive or hard drive.
Encrypts a partition or drive where Windows is installed (pre-boot authentication).
Encryption is automatic, real-time (on-the-fly) and transparent.
Provides two levels of plausible deniability, in case an adversary forces you to reveal the password:

1) Hidden volume (steganography – more information may be found here).

2) No TrueCrypt volume can be identified (volumes cannot be distinguished from random data).
Encryption algorithms: AES-256, Serpent, and Twofish. Mode of operation: XTS. Further information regarding features of the software may be found in the documentation.

what's new in v5.1

5.1 March 10, 2008

New features:


Support for hibernation on computers where the system partition is encrypted (previous versions of TrueCrypt prevented the system from hibernating when the system partition was encrypted). (Windows Vista/XP/2008/2003)
Ability to mount a partition that is within the key scope of system encryption without pre-boot authentication (for example, a partition located on the encrypted system drive of another operating system that is not running). (Windows Vista/XP/2008/2003)

Note: This can be useful e.g. when there is a need to back up or repair an operating system encrypted by TrueCrypt (from within another operating system).
Command line options for creating new volumes. (Linux and Mac OS X)
Improvements:

Increased speed of AES encryption/decryption (depending on the hardware platform, by 30-90%). (Windows)
Faster booting when the system partition is encrypted. (Windows Vista/XP/2008/2003)
When the system partition/drive is encrypted, the TrueCrypt Boot Loader is now stored in a compressed form and is, therefore, smaller. If a non-cascade encryption algorithm is used (i.e., AES, Serpent, or Twofish), the TrueCrypt Boot Loader is now small enough so that a backup of the TrueCrypt Boot Loader can be (and is) stored in the first drive cylinder. Whenever the TrueCrypt Boot Loader is damaged, its backup copy is run automatically instead.
As a result of this improvement, the following problem will no longer occur: Certain inappropriately designed activation software (used for activation of some third-party software) writes data to the first drive cylinder, thus damaging the TrueCrypt Boot Loader. The affected users had to use the TrueCrypt Rescue Disk to repair the TrueCrypt Boot Loader. This will no longer be necessary after upgrading to this version of TrueCrypt (provided that the system partition/drive is encrypted using a non-cascade encryption algorithm, i.e., AES, Serpent, or Twofish).
Note: If your system partition/drive is currently encrypted using a non-cascade encryption algorithm (i.e., AES, Serpent, or Twofish), a backup copy of the TrueCrypt Boot Loader will be automatically stored in the first drive cylinder when you upgrade to this version of TrueCrypt.
The minimum memory requirements for the TrueCrypt Boot Loader have been reduced from 42 KB to 27 KB (twenty-seven kilobytes). This allows users to encrypt system partitions/drives on computers where the BIOS reserves a large amount of memory. (Windows Vista/XP/2008/2003)
Many other minor improvements. (Windows, Mac OS X, and Linux)
Resolved incompatibilities:

On some computers, when performing the system encryption pretest, Windows failed to display the log-on screen. This will no longer occur. (Windows Vista/XP/2008/2003)
Bug fixes:

On some systems, drive letters were not correctly assigned to newly mounted non-system volumes. This will no longer occur. (Windows)
Many other minor bug fixes. (Windows, Mac OS X, and Linux)

www.truecrypt.org/downloads.php

| Сообщение посчитали полезным:

https://www.pgpru.com/novosti/2008/kriticheskajaujazvimostjvtruecrypt51

-----
PGP key <0x1B6A24550F33E44A>

| Сообщение посчитали полезным:

worth reading:

McGrew Security RAM Dumper (cold-boot attack in the wild)
Creating bootable USB drives for capturing the contents of
[url=http://mcgrewsecurity.com/projects/msramdmp/
]http://mcgrewsecurity.com/projects/msramdmp/
[/url]

blog itself:
www.mcgrewsecurity.com/?p=86

finally bootable .iso:
www.mcgrewsecurity.com/projects/msramdmp/msramdmp_cd.iso

| Сообщение посчитали полезным:

ntldr пишет:
https://www.pgpru.com/novosti/2008/kriticheskajaujazvimostjvtruecrypt5 https://www.pgpru.com/novosti/2008/kriticheskajaujazvimostjvtruecrypt5 1

"Уязвимости подвержены пользователи держащие систему на аппатарных RAID, а частности на популярном чипе Intel Matrix Storage.
Способы решения уязвимости: отключить hibernate в настройках электропитания. В случае если вы уже использовали hibernate вы должны проверить удалился ли файл hiberfil.sys и затереть все свободное место на диске программой безопасного уничтожения информации".

To Moderftors: sorry, but I don't know how to translate this

| Сообщение посчитали полезным:

?????????? ???? ?????????? ? ?????? 5.1a, ?? ? ?? ???????? ?? ?????????? ???????????? TrueCrypt ?? ?? ?????????? ???????? ??? ????, ??? ??? ????????? ????????????? ??????????? ? ???????? ?????? ????????.

-----
PGP key <0x1B6A24550F33E44A>

| Сообщение посчитали полезным:

fire4x, у кого простой IDE'шный винт - у тех всё хорошо?

Ну и как что-то попытался сказать наш коллега ntldr, попробую добавить, что версия 5.1a всё-таки вышла

-----
Я медленно снимаю с неё UPX... *FF_User*

| Сообщение посчитали полезным:

AlexZ пишет:
у кого простой IDE'шный винт - у тех всё хорошо?

Without a difference there is what type HDD, main that without RAID.

AlexZ пишет:
версия 5.1a всё-таки вышла

5.1a

March 17, 2008

Improvements:

Faster booting when the system partition/drive is encrypted (typically by 10%). (Windows Vista/XP/2008/2003)

Other minor improvements. (Windows, Mac OS X, and Linux)


Resolved incompatibilities:

On computers with certain hardware configurations, resuming from hibernation failed when the system partition was encrypted. Note: If you encountered this problem, the content of RAM may have been saved unencrypted to the hibernation file. You can erase such data, for example, by decrypting the system partition/drive (select System > Permanently Decrypt System Partition/Drive) and then encrypting it again. (Windows Vista/XP/2008/2003)

Remark: As Microsoft does not provide any API for handling hibernation, all non-Microsoft developers of disk encryption software are forced to modify undocumented components of Windows in order to allow users to encrypt hibernation files. Therefore, no disk encryption software (except for Microsoft's BitLocker) can guarantee that hibernation files will always be encrypted. At anytime, Microsoft can arbitrarily modify components of Windows (using the auto-update feature of Windows) that are not publicly documented or accessible via a public API. Any such change, or the use of an untypical or custom storage device driver, may cause any non-Microsoft disk encryption software to fail to encrypt the hibernation file. We plan to file a complaint with Microsoft (and if rejected, with the European Commission) about this issue, also due to the fact that Microsoft's disk encryption software, BitLocker, is not disadvantaged by this.

[Update 2008-04-02: Although we have not filed any complaint with Microsoft yet, we were contacted (on March 27) by Scott Field, a lead Architect in the Windows Client Operating System Division at Microsoft, who stated that he would like to investigate our requirements and look at possible solutions. We responded on March 31 providing details of the issues and suggested solutions.]

Workaround for a bug in the BIOS of some Apple computers that prevented users from entering pre-boot authentication passwords and controlling the TrueCrypt Boot Loader. (Windows Vista/XP/2008/2003)


Bug fixes:

When the system partition/drive is decrypted under Windows, the original partition table will not be restored. Note: This issue affected users who repartitioned an encrypted system drive and then decrypted it under Windows. (Windows Vista/XP/2008/2003)

Other minor bug fixes. (Windows, Mac OS X, and Linux)

| Сообщение посчитали полезным:

linhanshi ?????:
TrueCrypt 5.1
кг/ам
fire4x
http://www.freed0m.org/index.php/DiskCryptor http://www.freed0m.org/index.php/DiskCryptor

-----
Research is my purpose

| Сообщение посчитали полезным:

fire4x пишет:
чего-то с форумом не то - после создания сообщения вместо русских букв вопросительные знаки !!!
Приходится заново переписывать.

1. Only english posts are allowed in this subforum. (Только посты на английском языке в данном подфоруме))

| Сообщение посчитали полезным:

Error_Log пишет:
fire4x
http://www.freed0m.org/index.php/DiskCryptor http://www.freed0m.org/index.php/DiskCryptor

Чёт не доганяю при чём здесь DiskCryptor ?

fire4x пишет:
On computers with certain hardware configurations, resuming from hibernation failed when the system partition was encrypted. Note: If you encountered this problem, the content of RAM may have been saved unencrypted to the hibernation file. You can erase such data, for example, by decrypting the system partition/drive (select System > Permanently Decrypt System Partition/Drive) and then encrypting it again. (Windows Vista/XP/2008/2003)

Не силён в англицком, но исходя из текста вроде-как следует, что критическую уязвимость с RAID они пока не чешутся исправлять.

To Moderftors: sorry, but I don't know how to translate this

| Сообщение посчитали полезным:

WTF are you doing? Only english posts are allowed, other letters are intentionally typed as question marks. And now all of you translate your posts cause I don't want to do it myself and I don't want to leave here other than english posts.

| Сообщение посчитали полезным:

fire4x
because it's better than TrueCrypt

-----
Research is my purpose

| Сообщение посчитали полезным:

Error_Log:
fire4x
because it's better than TrueCrypt

Limitations in the current version

During the encryption/decryption process, the system must not be rebooted, until the task is completed. The partition must be either fully encrypted, or fully decrypted. Otherwise you risk to loose your data. Additionally, the use of the uninterruptible power supply (UPS) device, and making a backup copy of your system, is strongly recommended.

When they will correct this, then...

| Сообщение посчитали полезным:

fire4x
I don't think other software like TrueCrypt can recover from such mistakes when encrypting partition. If they don't mention it doesn't mean thay can handle it.

| Сообщение посчитали полезным:

fire4x ?????:
Limitations in the current version
Nu i govno... (chicken's shit)

-----
Я медленно снимаю с неё UPX... *FF_User*

| Сообщение посчитали полезным: