Page 1 of 2

TrueCrypt in Debian

PostPosted: 2006-03-09 14:47
by mority
Since a few months there is a Linux port of the open source file and disk encryption tool TrueCrypt.
I was wondering why it didn't make it into the debian package repository so far. Is there anything I could do about this?
Unfortunately I am too busy, lame and dumb to become a package maintainer for it myself...

PostPosted: 2006-03-15 11:49
by anon
Truecrypt has invented yet another licence which I read until.
c. Phrase "Based on TrueCrypt" must be displayed by your product (if
technically feasible) or by the modified version and contained in its
documentation. Alternatively, if this product or its portion you included
in your product comprise only a minor portion of your product, phrase
"Portions of this product are based in part on TrueCrypt" may be used
instead.
Seems like an ad-clause normally deemed non-free. And with other options available I don't think you'd have much of a chance someone would package this for non-free. Would you check the full licence with debian-legal and get uptream to change the troublesome parts, you'd probably stand a much greater chance. Other than that, you could ask on their forum if someone coud build it for debian (perhaps a rebuild of the ubunbtu packages would suffice). Or just try to install the ubuntu .deb

PostPosted: 2006-04-02 11:30
by guest
Hi,

since this looks like there will be no debian port i tried to compile the sourcecode but ran into problems.
I apologize if this is the wrong place to ask such a question but google throw this on first place with the
keywords: debian truecrypt
so others may look here as well.

I have debian sarge installed with the 2.6.8-2-k7 custom kernel.
Here is a list of some installed packages which i think that may be needed:

kernel-headers-2.6.8-2
kernel-headers-2.6.8-2-k7
kernel-image-2.6.8-2-k7
kernel-kbuild-2.6-3
kernel-package
kernel-source-2.6.8
linux-kernel-headers

here is what i did:
cd /usr/src
tar xfjv kernel-source-2.6.8
ln -s kernel-source-2.6.8 linux
cd truecrypt-4.1-source-code/Linux
cp /boot/config-2.6.8-2-k7 /usr/src/linux/.config
./build.sh

build.sh then gave the following output:
Checking build requirements...
Building kernel module... In file included from /usr/src/truecrypt-4.1-source-code/Crypto/Aesopt.h:144,
from /usr/src/truecrypt-4.1-source-code/Crypto/Aescrypt.c:33:
/usr/src/truecrypt-4.1-source-code/Common/Endian.h:22:42: asm/byteorder.h: No such file or directory
make[2]: *** [/usr/src/truecrypt-4.1-source-code/Linux/Kernel/../../Crypto/Aescrypt.o] Error 1
make[1]: *** [_module_/usr/src/truecrypt-4.1-source-code/Linux/Kernel] Error 2
make: *** [truecrypt] Error 2
Error: Failed to build kernel module

Here i am stuck. Maybe i haven't linked the kernel-sources proper?
In particular this seems to be an invalid path, ending at .../truecrypt-4.1-source-code/Linux/Kernel/
make[2]: *** [/usr/src/truecrypt-4.1-source-code/Linux/Kernel/../../Crypto/Aescrypt.o] Error 1

I haven't compiled much sourcecode yet, maybe i miss something trivial?
I have tried to install both ubuntu packages (5.04, 5.10) but they fail with a wrong kernel version error.
Any help is truly appreciated.

PostPosted: 2006-06-05 09:57
by guest
The last post was for truecrypt 4.1.
As of truecrypt 4.2 the problem is solved.

PostPosted: 2008-09-27 11:52
by jaalto
See article "Using truecrypt-installer to help install Truecrypt for Debian"
at http://www.debian-administration.org/articles/506 which can help.

PostPosted: 2008-09-28 21:50
by markharding557
truecrypt ubuntu deb does work on lenny/sid.
you need to have sudo set up because it uses this to get root privledges.
Alot easier i think than installing from source

PostPosted: 2008-09-30 20:08
by jaalto
markharding557 wrote:truecrypt ubuntu deb does work on lenny/sid.


Not difficult from source either (4.3a). Unless you specifically need GUI from latest version.

1. Satisfy depends: apt-get install libncurses5-dev gcc-4.1 debhelper devscripts dpatch || apt-get -f install

2. Download installer deb: https://launchpad.net/truecrypt-installer/+download

3. Install: tc-dpkg --auto --install

Next release will contain additional utilities:

Make containers: tc-create --size 500M private.tc
Check container health and repair: tc-fsck private.tc

Truecrypt with Debian Lenny Testing

PostPosted: 2009-01-22 17:58
by ludwigbaum
In my Lenny-testing-installation (December 2009) the Ubuntu-package works well. But at first; I had to install two libraries:

libfuse2
fuse-utils

Then I had to edit the sudoers file (see sudoers manual).

PostPosted: 2009-02-02 10:33
by cb474
Am I correct in concluding that TrueCrypt cannot encrypt an entire partition with already existing data on it and keep the data? It seems like it can do this in Windows, but the option is missing in the Linux version.

And if that is the case, is my only option (if I don't want to use a container file) to move all of my data off of the partition, encrypt the partition, and then move my data back?

Re: TrueCrypt in Debian

PostPosted: 2009-05-12 16:16
by mono
I want to complete ludwigbaum... I used *.deb file for Ubuntu but my installer notice me that except libfuse2 and fuse-utils I have to install dmsetup.

Re: TrueCrypt in Debian

PostPosted: 2009-05-12 23:11
by bugsbunny
Can someone explain to me what true crypt gives you that I can't get from one of the native packages?

Re: TrueCrypt in Debian

PostPosted: 2009-05-14 12:13
by shadowking
Read the truecrypt compile manual. You needs special headers from some website. I compiled 6.0 and 6.1 months ago. They still work on my new PC

Re: TrueCrypt in Debian

PostPosted: 2009-08-06 01:46
by mdudumtoto
http://esaucairn-almuric.blogspot.com/2 ... ebian.html

has a very thorough discussion on this.
I have messed up far too many new installs to try this.

my solution? install ubuntu on your debian OS by using virtual box or vmware.

Re: TrueCrypt in Debian

PostPosted: 2009-11-04 00:21
by Polaris96
I know this thread is pretty old, but since I've been re-examining encryption, lately, and I'm kind of on the fence about truecrypt, figured I'd add this to the pot:

@bugs: TrueCrypt seems to be targeted at generating deniable encryption. It creates an encrypted dummy fs with dummy data and stores the sensitive stuff in a second fs cached steganographically into the dummy data. If it works the way they claim, it should be imperceptible to an observer.

Which sounds great, except that it appears to be based on fuse. Fuse based encryption is NORMALLY problematic because permission and titles live in unencrypted space. They may have solved this problem in truecrypt I'm not sure and will post when I know more.

I don't know of a repo package that will provide that service. If one's available, please share because I'd love to try it.

EDIT: Just learned there's a package available called TCHunt that can detect the presence of TrueCrypt volumes. So much for deniability, eh?

Re: TrueCrypt in Debian

PostPosted: 2009-11-04 10:55
by sickie
If TCHunt really works than TrueCrypt is not suitable for highly sensitive data, as TrueCrypt authors claims that hidden volumes are rally hidden but TCHunt proves them wrong - so other TC features could be just as weak as hidden volumes are.