Veracrypt for Raspbian

[R0cket]

Hi as truecrypt is discontinued.

Does anyone know how to compile Veracrypt for Raspbian?

[wared-fr]

Hi,

I wrote a how to article about VeraCrypt on the Raspberry Pi : http://howto.wared.fr/raspberry-pi-arch ... veracrypt/.

You need ArchLinux ARM but i'm sure that it would be adaptable to other distributions.

I hope that it can help

Wared

[dhsc19]

I just successfully compiled Veracrypt 1.23 on Raspbian Stretch. Wanted to share this in case it might be helpful to someone else.

Download the UNIX tar bzip2 source from https://www.veracrypt.fr/en/Downloads.html

The dependencies to install:

sudo apt install make gcc pkg-config libwxgtk3.0 libfuse-dev

Extract the source files and go into the VeraCrypt_1.23/src directory

Run:

sudo make

Near the end of the make process there should be some "linking veracrypt" message. Following that I got some GTK related failure message, but when I checked inside the VeraCrypt_1.23/src/Main directory the veracrypt binary was there and I was able to run it from the command line. It seems that there is always some GTK failure message that shows up when running from command line, but I was able to successfully mount my encrypted files.

The "make install" does not work, so I manually copied the veracrypt binary to the /usr/local/bin directory.

The GUI is working, too. But, I found that having the GUI do the administrative elevation would fail. So, I start it with "sudo veracrypt" and I was able to mount successfully through the GUI.

[DirkS]

Run:

sudo make

[snip]

The "make install" does not work, so I manually copied the veracrypt binary to the /usr/local/bin directory.

The normal procedure is to run

Code: Select all

make

to compile/link etc your source. That normally does not need admin permissions.
To move it to the end location you use

Code: Select all

sudo make install

because you *do* need these additional rights.

[antoiner]

thank you for all those previous posts. I have been able to follow your hint and to compile a working version of veracrypt on a Raspberry pi 3 B+ today!

[drmullins]

According to an old post mounting [ a Veracrypt volume ] takes forever (!):

https://randomgooby.wordpress.com/2015/ ... erry-pi-2/

I wonder if any of you who have compiled possibly more recent versions of Veracrypt can advise how long does it take to mount a container on a Raspberry Pi 3 B or B+ ?

Thanks

[echmain]

If I recall...

Veracrypt is based off Truecrypt. And Truecrypt did not store the encryption algorithm used when creating the container.

Because of that, when you attempt to open a container it must try each one of its algorithms until the correct one is found.

FWIW, even on my Core i7 there’s a noticeable delay when opening a Veracrypt container.

[drmullins]

Thanks for thoughts

I compiled Veracrypt 1.23 and tried it

Veracrypt is easier to compile than Truecrypt 7.1a which I have been using on Pi B2 B3 and B3+ for last 3.5 years on a daily basis.

Truecrypt containers open very quickly

The first Veracrypt container that I created took more than 2 minutes to open !

After a bit of investigation I found that Veracrypt has a 'new' PIM parameter (Personal Iterations Multiplier ) whose value can be set to trade-off level of security against speed of opening, I created a new container with a setting of PIM=1 and this opened in about 5 seconds which I think is just about acceptable.

I think the recommendation is that a low PIM value is safe provided that a long password eg 20 characters is used.

[rbscebu]

I am trying to install VeraCrypt with a GUI on my RPi4B 4GB using Raspian Buster. I downloaded VeraCrypt 1.24 Source (UNIX tar bzip2) into my Downloads directory, extracted the files to ~/Downloads/VeraCrypt_1.24 and installed dependencies with:

Code: Select all

sudo apt install make gcc pkg-config libwxgtk3.0 libfuse-dev

I then cd to ~/Downloads/VeraCrypt_1.24/src and complied VeraCrypt using:

Code: Select all

sudo make

During the compiling process I received warnings about items being deprecated but everything appeared to progress with the last message reading:

Code: Select all

Linking veracrypt

Still in ~/Downloads/VeraCrypt_1.24/src I tried:

Code: Select all

sudo make install

and got the following errors:

Code: Select all

mkdir: missing operand
Try 'mkdir --help' for more information.
make[1]: *** [Main.make:257: install] Error 1
make: ** [Makefile:485: install] Error 2

Where do I go from here?

[B.Goode]

See https://www.raspberrypi.org/forums/view ... 5#p1426321

The bit where it says "make install" does not work...

[rbscebu]

See https://www.raspberrypi.org/forums/view ... 5#p1426321

The bit where it says "make install" does not work...

Yes, I read that-

The "make install" does not work, so I manually copied the veracrypt binary to the /usr/local/bin directory.

The GUI is working, too. But, I found that having the GUI do the administrative elevation would fail. So, I start it with "sudo veracrypt" and I was able to mount successfully through the GUI.

What file(s) is/are "the veracrypt binary"?

After I copy "the veracrypt binary" to /usr/local/bin/ how do I get the GUI to work?

[unixlunix]

What file(s) is/are "the veracrypt binary"?

~/Downloads/[extracted veracrypt folder]/src/Setup/Linux/usr/bin

After I copy "the veracrypt binary" to /usr/local/bin/ how do I get the GUI to work?

Just start in LXTerminal with: veracrypt

[rbscebu]

Thank you unixlunix.

I copied my ~/Downloads/VeraCrypt_1.24/ directory with all the extracted files to /usr/local/bin/. I then used Menu>Preferences>Main Menu Editor>System Tools>New Item to make an entry in System Tools to start Veracrypt via the main menu. For this entry I used the command:

Code: Select all

/usr/local/bin/VeraCrypt_1.24/src/Setup/Linux/usr/bin/veracrypt

I appears to me to be a rather messy way to do it. I would have preferred to have the relevant VedraCrypt files located somewhere such that the main menu entry command only had to be:

Code: Select all

veracrypt

At least what I have now is working for me.

[hippocritical]

I tried for hours to get 1.24 hotfix-1 working... without any success.

1.24 (one step older, without hotfix-1) worked flawlessly.

Seems that there is a bug in the most recent version of veracrypt.

[DougieLawson]

Code: Select all

Compiling jitterentropy-base.c
In file included from ../Crypto/jitterentropy.h:47,
                 from ../Crypto/jitterentropy-base.c:67:
../Crypto/jitterentropy-base.c: In function ‘jent_loop_shuffle’:
../Crypto/jitterentropy-base-user.h:94:2: error: impossible constraint in ‘asm’
  asm volatile("rdtsc" : EAX_EDX_RET(val, low, high));
  ^~~
make[1]: *** [/tmp/Vera/src/Build/Include/Makefile.inc:25: ../Crypto/jitterentropy-base.o0] Error 1
make: *** [Makefile:422: all] Error 2

Ah, it fails because it includes embedded X86_64 assembler code.

You'll have to complain to the nice folks who wrote it.

[VeraCrypt Team]

VeraCrypt Team here. We have already fixed this issue in master on October 28th after it has been reported to us by Linux Mageia maintainers.
Here is the commit with the fix: https://github.com/veracrypt/VeraCrypt/ ... 5ac7d0b94a

You can use it as patch for 1.24-Hotfix1 source code in order to make the build succeed.

Cheers,

[raspiUSE3]

Does anyone else have performance problems with VeraCrypt mounted containers?
I have a fraction of the write speed compared with the direct write speed.
What mount options do you use?
Is that slow down caused by lack of Hardware-AES?