CAZine: issue 3, September 2009

CAZine: issue 3, September 2009

Recommended software

TrueCrypt Version 6.2 Tutorial and Review

By: Beta Tr Witch doktA

Copyright 2009 TrueCrypt Foundation

OK, I’m going to walk you through the setup and usage of TrueCrypt, an excellent and free encryption program that allows you to secure your data through the use of different encryption algorithms such as AES, Serpent, and Twofish. And I will be providing a few cool tech tips about the program along the way.

First off, TrueCrypt is free and open source, written in C, C++, and assembly code, and the source is available from TrueCrypt.org. I have been using it since the beginning of the year, and so far I haven’t found any bugs or security exploits in it. TrueCrypt has many modes of operation such as drive/partition encryption, operating system encryption, hidden operating system, hidden partition, and of course, the ability to make a virtual encrypted drive contained within a file. There are many different combinations that you can use to secure your system, for example having two copies of Vista installed, one for all your basic computer usage, which would be your decoy operating system, and then another copy used for storing all of your uberleet haxor files, torrented files, and various text files containing sensitive data. But for the purposes of time, space, and user-friendliness, I will only be covering the basics. So here we go, I hope you enjoy, and give me a little leeway here, cuz I haven’t written an article in awhle, and this is my first software review.

Setting up TrueCrypt

First you will need to download the installer from http://www.truecrypt.org and run the TrueCrypt Setup 6.2.exe file. If you don’t know how to do this, then I suggest you start off with something a little more simple, like umm finding the power button on your PC!

OK, after you run it, a window will open and you have to accept the EULA, click accept.

Two options will be available: Install and Extract. The Extract Mode decompresses the files to a folder on your hard drive and lets you run the program without it modifying the registry, and you can also copy the folder to removable media to use it in traveler mode on other computers. For now just select the Install option and click Next because it is most applicable to what we are going to be doing.

Then you have to setup to folder dialog which is self explanatory click Install.

After a restore point is created, the program installs and asks you if you want to run a tutorial, click no, and then finish, as it is not what we are looking for here.

Configuring TrueCrypt

By: Beta 2Lt Witch doktA

OK after you install TrueCrypt, run the TrueCrypt.exe file from either your desktop, or C:\ProgramFiles\TrueCrypt\TrueCrypt.exe.

The main interface opens up and I begin the tutorial. What we are going to be doing today is encrypting the entire operating system, making a rescue disk for it, and setting up a spoofing system in the bootloader to make someone who gets ahold of your PC think that there is no operating system installed on it, sure they may reformat the hard drive or something, but let’s face it, it is better than them finding out that you have a hard drive full of well let’s just say, “unsavory items”, not to mention passwords and other sensitive personal data.

OK right now we could take the easy (and therefore less secure) route and make an encrypted folder on the hard drive, but so can any other encryption program out there.

What makes TrueCrypt such a remarkable program is that it encrypts/decrypts exclusively in RAM, that way you don’t have to wait 4 hours while your 500GB hard drive decrypts, trust me it’s NOT fun, I’ve been there.

OK as Gotti would say, let’s get back 2 da basics, Click the System menu in the toolbar and select Encrypt System Partition/Drive. You get two options, Normal and Hidden. Hidden is for the extremely paranoid, if you are in a position to have to use Hidden mode (being forced to decrypt your OS by someone), well you need to man up and take your beating and laugh in his kraut face about it!

So select Normal mode if you aren’t expecting Nazi generals (or the feds….)to be beating your decryption password out of you for hours, cuz they can’t crack it.

We will select the Encrypt the Windows system partition here because. I have a WinXP/Vista/Ubuntu system set up in tri-boot, and therefore can’t step you through the whole drive process, although I suggest after learning the program, you go back and select this option later.

Now select which option is most appropriate to your setup, either single or multi boot.

I’m assuming you have a single boot system set up, so select it and click Next.

OK, now the fun stuff starts happening, you will now have to select which algorithm you will use to encrypt with. Now take the Dokta’s advice and select the AES-Twofish-Serpent Algorithm, it is a “cascade” type, which means that it will first encrypt with the Serpent algo, then encrypt with Twofish, and finally with AES.

Select which hash algorithm to use, it is like a key to the encryption in layman’s terms, I’m not going to go into full technical details on this, but select RIPEMD-160 cause we don’t want one that was developed by the NSA, and whirlpool isn’t supported by system encryption ;). Finally click the test button to make sure everything will work out, you don’t want to encrypt your OS only to find out that your system is for some reason incompatible with the algos. In the test window, select Auto-Test All for each algo, and click close.

Finally, select a password, by the way I strongly suggest you use an extremely secure password consisting of alpha/numeric/symbols.

So enter your password (and don’t hide it under your keyboard), and click next.

Then comes the random data generator screen, you will probably notice all the hex numbers mutating and stuff in the current pool content box, these numbers are generated based on all kinds of stuff, like your network packets, mouse movements, time and date, processor usage, I could go on and on, anyway move your mouse around the screen randomly for at least 30 seconds, the idea here is to get a completely random encryption key, don’t move it in circles or lines, try to use diagonals, arcs, and draw stuff, it will be much more secure, when you are done playing, click next.

This screen shows parts of your Header and Master keys, click next.

Now you have to make a rescue disk just in case the boot loader or keys get damaged or infected by something, or if Windows gets damaged, you can completely decrypt before Windows starts so you can repair it.

The rescue disk tool will save the files in .iso format on your hard drive.

Select where you want to put the .iso of the rescue disk and click next.

Now you need to use a program to burn the .iso to a disk, for those of you who aren’t software pirates and stuff, then I suggest you download ImgBurn and use that. It is free and a lot faster than Nero, (for me anyway).

After you have successfully burned your rescue disk, click next.

Follow the remaining onscreen instructions to encrypt and wait for it to finish, or you can use your computer as normal while you wait, although it will take a little longer, you can even shut down and reboot!

Now you will have to enter the correct password every time you boot, and without it, if you have followed all of my advice every step of the way, lets face it, you would die of old age before someone could crack your system!

I give this program 4 shrunken heads out of 5 for reliability, interface, options, and most of all protection. It is an excellent program that I would recommend to anyone.

This article was written to explain some of the basics of TrueCrypt, and of course to get you interested in getting it for yourself. I remind you that it is completely free from www.truecrypt.org, and one of the best encryption programs that are out there today, definitely the best I’ve ever used anyway! There is also an extensive help file included with the program including a full technical rundown so please check that out as well. I hope this tutorial/review has helped you in at least some very small way, if it has then I guess I didn’t write this in vain.

May CyberArmy Rise Again!!

VN:F [1.7.9_1023]
Rating: 10.0/10 (1 vote cast)
CAZine: issue 3, September 200910.0101

Pages: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

About the Author