• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 682
  • Last Modified:

truecrypt hidden volume

Dear Expert,

 If I use true crypt software hidden volume in my flash drive, there is a way to know it is hidden, someone realize there is hidden data.
0
G55
Asked:
G55
  • 2
  • 2
  • 2
  • +1
1 Solution
 
msimnCommented:
I am answering this as I've never used a TrueCrypt product before, but yes, if you hide something in a separated partition,
  1) The free disc space left will not make sense.
  2) The hidden partition will show up in the disk management (diskmgmt.msc - windows) or disk utility (mac).

So someone with your flash drive with some knowledge of computer storage will figure out that there are something they couldn't see (yet) inside that flash drive.
0
 
TolomirAdministratorCommented:
Well, we should bring is some facts here. Let's assume the makes of truecrypt invested some time to identify the major flaws...


Please take a look at:
http://www.truecrypt.org/docs/?s=hidden-volume

As you can see the hidden volume is "stored" in the free data area of a truecrypt partition.

There are also some security precautions that you have to consider, also already worked out:

http://www.truecrypt.org/docs/?s=hidden-volume-precautions

---

If you want hardware based security you should consider to use an ironkey instead.

https://www.ironkey.com/personal

If will physically disable (a chip will self-destruct...) itself if someone enters 10 times in a row the wrong password.

With the personal edition you can use a portable firefox edition, that stores all of it's data only on the stick: usersettings, cache, bookmarks.

Tolomir
0
 
msimnCommented:
According to comment 2, I'd probably be wrong.
0
Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

 
G55Author Commented:
msimn:  
so you are saying there is an idea to prove there are hidden volume in the flash drive. If yes how because am writing research paper..
0
 
TolomirAdministratorCommented:
I suggest you start reading with these precautions: http://www.truecrypt.org/docs/?s=hidden-volume-precautions this gives you a lot of suggestions where to start to identify a hidden volume.

Also keep this in mind:  http://xkcd.com/538/
0
 
G55Author Commented:
hi there are procedure that i can follow to detect the hidden file.
0
 
BMPTSCommented:
G55,

it is very difficult to detect a hidden volume, you have to basically have access to the initial non hidden file, and then write the data to fill up the supposed free space,  the links above explain the flaws with nesting an encrypted file (as a volume) in another.  

I have seen TC take a beating from major forensic software, and finding the exact point of where one starts and the other ends is hard enough, let alone once its detected you still have to get into it!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now