Truecrypt Seems to work pretty well

When using small 200 mb encrypted file containers, everything seems zippy.

root@raspberrypi:/mnt/bkdrive/Alison# truecrypt -m=nokernelcrypto encrypttest.tc /mnt/tc
Enter password for /mnt/bkdrive/Alison/encrypttest.tc:
Enter keyfile [none]:
Protect hidden volume (if any)? (y=Yes/n=No) [No]:
root@raspberrypi:/mnt/bkdrive/Alison# cd /mnt/tc
root@raspberrypi:/mnt/tc# ls
rude.png
root@raspberrypi:/mnt/tc#

I also tried it with drive encryption and large file containers - both seemed fine.

I get the error "Error: mount: you must specify the filesystem type", and when I try specifying it manually it fails with "Error: mount: wrong fs type, bad option, ...".

How did you create the volume? I created one in the boot partition for testing using the following command:

Code: Select all

./truecrypt -t --create /boot/truecrypt-test.img --password=1234 --size=10485760 --volume-type=normal --encryption=AES --hash=Whirlpool --filesystem=vfat -k "" --random-source=/dev/urandom

This image works without problems when mounted from the TrueCrypt GUI in Windows 7.

An image created with the TrueCrypt GUI in Windows seems to work though, so I must be doing something wrong in the creation command line.

I set --filesystem=none, I think. I can double check in a couple hours.

How did you build TrueCrypt for the Pi?

I know you need the NO_ASM option, but what about the wxGTK dependency? I couldn't get it to work with the version from Debian Squeeze.

Downloaded source and source for wxWidgets
Downloaded ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/ (pkcs#11 .h files)

export PKCS11_INC=/home/pi/crypto
make WX_ROOT=/home/pi/wx/ wxbuild
make WXSTATIC=1

Downloaded source and source for wxWidgets
Downloaded ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/ (pkcs#11 .h files)

export PKCS11_INC=/home/pi/crypto
make WX_ROOT=/home/pi/wx/ wxbuild
make WXSTATIC=1

It's working now. The WXSTATIC was what I needed, thanks!

Could you post some benchmarks of use truecrypt?

Downloaded source and source for wxWidgets
Downloaded ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/ (pkcs#11 .h files)

export PKCS11_INC=/home/pi/crypto
make WX_ROOT=/home/pi/wx/ wxbuild
make WXSTATIC=1

Are you using debian image or?

I tried both, installing wx from apt and from source but everytime build ends with

Code: Select all

pi@raspberrypi:~/truecrypt-7.1a-source$ make NOGUI=1 NOASM=1
Linking truecrypt
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x8): undefined reference to `wxApp::GetClassInfo() const'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x2c): undefined reference to `wxApp::GetEventTable() const'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x30): undefined reference to `wxApp::GetEventHashTable() const'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x44): undefined reference to `wxApp::Initialize(int&, wchar_t**)'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x50): undefined reference to `wxApp::OnInitGui()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x58): undefined reference to `wxAppBase::OnExit()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x5c): undefined reference to `wxApp::CleanUp()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x64): undefined reference to `wxAppBase::Exit()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x68): undefined reference to `wxAppBase::OnInitCmdLine(wxCmdLineParser&)'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x6c): undefined reference to `wxAppBase::OnCmdLineParsed(wxCmdLineParser&)'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x88): undefined reference to `wxApp::Yield(bool)'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x8c): undefined reference to `wxApp::WakeUpIdle()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x90): undefined reference to `wxAppBase::CreateTraits()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x94): undefined reference to `wxAppBase::MainLoop()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x98): undefined reference to `wxAppBase::ExitMainLoop()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0x9c): undefined reference to `wxAppBase::Pending()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xa0): undefined reference to `wxAppBase::Dispatch()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xa4): undefined reference to `wxAppBase::ProcessIdle()'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xa8): undefined reference to `wxAppBase::SendIdleEvents(wxWindow*, wxIdleEvent&)'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xb4): undefined reference to `wxAppBase::GetTopWindow() const'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xb8): undefined reference to `wxAppBase::GetDisplayMode() const'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xc4): undefined reference to `wxAppBase::GetLayoutDirection() const'
TextUserInterface.o:(.rodata._ZTVN9TrueCrypt17TextUserInterfaceE+0xc8): undefined reference to `wxAppBase::SetActive(bool, wxWindow*)'
UserInterface.o: In function `TrueCrypt::UserInterface::UserInterface()':
UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceC2Ev+0x8): undefined reference to `wxApp::wxApp()'
UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceC2Ev+0x16c): undefined reference to `wxApp::~wxApp()'
UserInterface.o: In function `TrueCrypt::UserInterface::~UserInterface()':
UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceD0Ev+0x2c8): undefined reference to `wxApp::~wxApp()'
UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceD0Ev+0x2fc): undefined reference to `wxApp::~wxApp()'
UserInterface.o: In function `TrueCrypt::UserInterface::~UserInterface()':
UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceD1Ev+0x2c8): undefined reference to `wxApp::~wxApp()'
UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceD1Ev+0x2f4): undefined reference to `wxApp::~wxApp()'
UserInterface.o:UserInterface.cpp:(.text._ZN9TrueCrypt13UserInterfaceD2Ev+0x2c8): more undefined references to `wxApp::~wxApp()' follow
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x8): undefined reference to `wxApp::GetClassInfo() const'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x2c): undefined reference to `wxApp::GetEventTable() const'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x30): undefined reference to `wxApp::GetEventHashTable() const'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x44): undefined reference to `wxApp::Initialize(int&, wchar_t**)'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x50): undefined reference to `wxApp::OnInitGui()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x54): undefined reference to `wxAppBase::OnRun()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x58): undefined reference to `wxAppBase::OnExit()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x5c): undefined reference to `wxApp::CleanUp()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x64): undefined reference to `wxAppBase::Exit()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x68): undefined reference to `wxAppBase::OnInitCmdLine(wxCmdLineParser&)'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x6c): undefined reference to `wxAppBase::OnCmdLineParsed(wxCmdLineParser&)'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x88): undefined reference to `wxApp::Yield(bool)'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x8c): undefined reference to `wxApp::WakeUpIdle()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x90): undefined reference to `wxAppBase::CreateTraits()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x94): undefined reference to `wxAppBase::MainLoop()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x98): undefined reference to `wxAppBase::ExitMainLoop()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0x9c): undefined reference to `wxAppBase::Pending()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xa0): undefined reference to `wxAppBase::Dispatch()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xa4): undefined reference to `wxAppBase::ProcessIdle()'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xa8): undefined reference to `wxAppBase::SendIdleEvents(wxWindow*, wxIdleEvent&)'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xb4): undefined reference to `wxAppBase::GetTopWindow() const'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xb8): undefined reference to `wxAppBase::GetDisplayMode() const'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xc4): undefined reference to `wxAppBase::GetLayoutDirection() const'
UserInterface.o:(.rodata._ZTVN9TrueCrypt13UserInterfaceE+0xc8): undefined reference to `wxAppBase::SetActive(bool, wxWindow*)'
UserInterface.o:(.rodata._ZTIN9TrueCrypt13UserInterfaceE+0x8): undefined reference to `typeinfo for wxApp'
collect2: ld returned 1 exit status
make[1]: *** [truecrypt] Error 1
make: *** [all] Error 2
pi@raspberrypi:~/truecrypt-7.1a-source$

no luck for me too

I am using Debian image.

Is the compile for wx going ok? And did you clean any bad installs?

no and yes

(I know the questions are stupid but just to confirm)
You:
Downloaded the sources
for wx you ./configure (that ran for forever)
(Configured wxWidgets 2.8.12 for `armv6l-unknown-linux-gnu')
make (runs for twice as long)
(mine is still going but I think the next steps were: - I will check again the morning)
Are things working up to this point?

export PKCS11_INC=/home/pi/crypto <this should be the directory of the headers you downloaded

then in truecrypt dir
make WX_ROOT=/home/pi/wx/ wxbuild <directory to wx
make WXSTATIC=1

I'm doing this, but will work for a headless station?

These are the steps that I took to compile the application without a gui.

• Get the truecrypt source from http://www.truecrypt.org/downloads2 and download the “Mac OS X / Linux (.tar.gz)” file and save it to a directory.
  
• Get the wxWidgets from http://prdownloads.sourceforge.net/wxwindows/wxWidgets-2.8.12.tar.gz. You will need this even if you are not planning to run a GUI.
  
• You also need the fuze development libraries which you can install in Raspbian using
  

  Code: Select all

  aptitude install libfuse-dev

  
  
• You need to get the RSA Security Inc. PKCS #11 Cryptographic Token Interface (Cryptoki) 2.20 header files
  

  Code: Select all

  wget ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/*.h

To compile the application do as suggested above. The wxbuild took me 23m21.490s and the make of TrueCrypt itself took 51m29.737s

Code: Select all

$ export PKCS11_INC=/usr/local/src/truecrypt/pkcs/
$ make NOGUI=1 WX_ROOT=/usr/src/wxWidgets wxbuild
$ make NOGUI=1 WXSTATIC=1
$ sudo cp -v Make/truecrypt /usr/local/bin/

You can then run it using the following command.

Code: Select all

truecrypt -t -k "" --protect-hidden=no /tmp/test.truecrypt /tmp/key/ -v -m=nokernelcrypto

When trying a large partition on my 3TB USB drive I get this:

Code: Select all

Error: Error: The drive uses a sector size other than 512 bytes.

Due to limitations of components available on your platform, partition/device-hosted volumes on the drive can only be mounted using kernel cryptographic services.

Possible solutions:
- Enable use of the kernel cryptographic services (Preferences > System Integration).
- Use a drive with 512-byte sectors.
- Create a file-hosted volume (container) on the drive.

I'm using XBian and tried to build the dm kernel modules following this howto: http://elinux.org/RPi_Kernel_Compilation
But there doesn't seem to be any dm support at all?

I get the error "Error: mount: you must specify the filesystem type", and when I try specifying it manually it fails with "Error: mount: wrong fs type, bad option, ...".

How did you create the volume? I created one in the boot partition for testing using the following command:

Code: Select all

./truecrypt -t --create /boot/truecrypt-test.img --password=1234 --size=10485760 --volume-type=normal --encryption=AES --hash=Whirlpool --filesystem=vfat -k "" --random-source=/dev/urandom

This image works without problems when mounted from the TrueCrypt GUI in Windows 7.

I'm having the same problem unfortunately. I've tried ext3, ext4 and NTFS.

[Mon Nov 26 01:33:47 2012] FAT-fs (loop1): invalid media value (0xb0)
[Mon Nov 26 01:33:47 2012] FAT-fs (loop1): Can't find a valid FAT filesystem
[Mon Nov 26 01:33:47 2012] NTFS-fs warning (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum.
[Mon Nov 26 01:33:47 2012] NTFS-fs error (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid.
[Mon Nov 26 01:33:47 2012] NTFS-fs error (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[Mon Nov 26 01:33:47 2012] NTFS-fs error (device loop1): ntfs_fill_super(): Not an NTFS volume.
[Mon Nov 26 01:36:06 2012] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[Mon Nov 26 01:40:45 2012] EXT4-fs (loop1): VFS: Can't find ext4 filesystem

For everyone having trouble mounting their formatted containers, create the volume with NO filesystem. After that's done, mount the file with --filesystem=none, which will merely create a /dev/loop1 device. After that, use the common filesystem formatting tool for your desired filesystem (e.g. mkfs.ext4 /dev/loop1). After that, you should be able to mount it fine.

Thanks to everyone in this thread for helping me get this all working!

For everyone having trouble mounting their formatted containers, create the volume with NO filesystem. After that's done, mount the file with --filesystem=none, which will merely create a /dev/loop1 device. After that, use the common filesystem formatting tool for your desired filesystem (e.g. mkfs.ext4 /dev/loop1). After that, you should be able to mount it fine.

Thanks to everyone in this thread for helping me get this all working!

How do I know what the /dev/loop# number is? Is there a way to list the "active" loop devices or something like that?

Thanks.

Mounting doesn't seem to work for me.
After I enter the password, it hangs on the password input and nothing happens.

Code: Select all

/media$ truecrypt -t -k "" --protect-hidden=no -v -m=nokernelcrypto /dev/sda1 /media/truecrypt1/

If I kill the input (strg+x) there is an empty truecrypt1 and if I try to mount it again using truecrypt, it says it's already mounted.
The device is a complete encrypted extern hdd with NTFS (formatted in Windows, truecrypt).

For everyone having trouble mounting their formatted containers, create the volume with NO filesystem. After that's done, mount the file with --filesystem=none, which will merely create a /dev/loop1 device. After that, use the common filesystem formatting tool for your desired filesystem (e.g. mkfs.ext4 /dev/loop1). After that, you should be able to mount it fine.

Thanks to everyone in this thread for helping me get this all working!

How do I know what the /dev/loop# number is? Is there a way to list the "active" loop devices or something like that?

Thanks.

Sorry for the late reply, but you can use "df -h" to see the active loops.

Sorry for the late reply, but you can use "df -h" to see the active loops.

But still very helpful. Thank you very much

Hi all, i have done doing exactly what you ppl say, but i cant find my compiled truecrypt, please help.

Code: Select all

pi@raspberrypi /temp2/truecrypt-7.1a-source $ sudo make NOGUI=1 WX_ROOT=/temp2/wxWidgets-2.8.12 wxbuild
Configuring wxWidgets library...
Building wxWidgets library...
In file included from /temp2/wxWidgets-2.8.12/include/wx/memory.h:16:0,
                 from /temp2/wxWidgets-2.8.12/include/wx/object.h:20,
                 from /temp2/wxWidgets-2.8.12/include/wx/wx.h:16,
                 from /temp2/wxWidgets-2.8.12/include/wx/wxprec.h:68:
/temp2/wxWidgets-2.8.12/include/wx/string.h:1205:7: note: the mangling of âva_listâ has changed in GCC 4.4
/temp2/wxWidgets-2.8.12/src/common/log.cpp:87:6: note: the mangling of âva_listâ has changed in GCC 4.4
/temp2/wxWidgets-2.8.12/src/common/string.cpp:84:39: warning: âwxEmptyStringâ initialized and declared âexternâ [enabled by default]
In file included from /temp2/wxWidgets-2.8.12/include/wx/debug.h:22:0,
                 from /temp2/wxWidgets-2.8.12/include/wx/defs.h:521,
                 from /temp2/wxWidgets-2.8.12/include/wx/wxprec.h:13:
/temp2/wxWidgets-2.8.12/include/wx/wxchar.h: In member function âint wxString::PrintfV(const wxChar*, va_list)â:
/temp2/wxWidgets-2.8.12/include/wx/wxchar.h:1080:9: note: the mangling of âva_listâ has changed in GCC 4.4
/temp2/wxWidgets-2.8.12/src/common/wxchar.cpp:1713:5: note: the mangling of âva_listâ has changed in GCC 4.4
In file included from /temp2/wxWidgets-2.8.12/include/wx/memory.h:16:0,
                 from /temp2/wxWidgets-2.8.12/include/wx/object.h:20,
                 from /temp2/wxWidgets-2.8.12/include/wx/wx.h:16,
                 from /temp2/wxWidgets-2.8.12/include/wx/wxprec.h:68:
/temp2/wxWidgets-2.8.12/include/wx/string.h:1205:7: note: the mangling of âva_listâ has changed in GCC 4.4
In file included from /temp2/wxWidgets-2.8.12/include/wx/memory.h:16:0,
                 from /temp2/wxWidgets-2.8.12/include/wx/object.h:20,
                 from /temp2/wxWidgets-2.8.12/include/wx/wx.h:16,
                 from /temp2/wxWidgets-2.8.12/include/wx/wxprec.h:68:
/temp2/wxWidgets-2.8.12/include/wx/string.h:1205:7: note: the mangling of âva_listâ has changed in GCC 4.4
pi@raspberrypi /temp2/truecrypt-7.1a-source $ sudo make NOGUI=1 WXSTATIC=1
Compiling Application.cpp
Compiling CommandLineInterface.cpp
Compiling FavoriteVolume.cpp
Compiling LanguageStrings.cpp
Compiling StringFormatter.cpp
Compiling TextUserInterface.cpp
TextUserInterface.cpp: In member function âvirtual void TrueCrypt::TextUserInterface::RestoreVolumeHeaders(TrueCrypt::SharedPtr<TrueCrypt::VolumePath>) constâ:
TextUserInterface.cpp:1374:11: warning: variable âheaderSizeâ set but not used [-Wunused-but-set-variable]
Compiling UserInterface.cpp
Compiling UserPreferences.cpp
Compiling Xml.cpp
Compiling Main.cpp
Compiling Resources.cpp
Linking truecrypt
pi@raspberrypi /temp2/truecrypt-7.1a-source $ ls
Boot    Core        ct-kip.h  License.html   Main      otp-pkcs11.h  pkcs11t-consolidated-d1.h  pkcs-11v2-20a3.h  Release    wxrelease
Build   Crypto      Driver    License.txt    Makefile  pkcs11f.h     pkcs11t.h                  Platform          Resources
Common  cryptoki.h  Format    License.txt.h  Mount     pkcs11.h      pkcs-11v2-20a3d3.h         Readme.txt        Volume
pi@raspberrypi /temp2/truecrypt-7.1a-source $


You guys do know you can also just download the guy's compiled binary here: http://reinhard-seiler.blogspot.co.at/2 ... e-for.html

After hours of trying to get it compiled, it appears there was some inconsistency using the latest version of PKCS11 preventing me from successfully doing make WXSTATIC=1 in the truecrypt sources directory. I returned to the same article we've all been using (http://reinhard-seiler.blogspot.com/201 ... ry-pi.html) and found the discrete "you can download them here" link which is a link to download the binary (already compiled) version.

To mount my encrypted drive, I now run the following (bypasses the device-mapper error):

Code: Select all

sudo ./truecrypt -m=nokernelcrypto /dev/sda1 /media/somemountpoint/