“UbuntuHelp:TruecryptHiddenVolume”的版本间的差异
来自Ubuntu中文
小 |
小 |
||
| （未显示同一用户的7个中间版本） | |||
| 第1行： | 第1行： | ||
{{From|https://help.ubuntu.com/community/TruecryptHiddenVolume}} | {{From|https://help.ubuntu.com/community/TruecryptHiddenVolume}} | ||
{{Languages|UbuntuHelp:TruecryptHiddenVolume}} | {{Languages|UbuntuHelp:TruecryptHiddenVolume}} | ||
| − | + | #title Hidden encrypted volume with Truecrypt (command line) | |
| − | + | {|border="1" cellspacing="0" | |
| − | There is [ | + | | {i} Please refer to [[UbuntuHelp:EncryptedFilesystems|EncryptedFilesystems]] for further documentation. |
| + | |} | ||
| + | For instructions on using the new [[UbuntuHelp:TrueCrypt|TrueCrypt]] GUI, please see [[UbuntuHelp:TrueCrypt|TrueCrypt|GUI]] | ||
| + | There is [[UbuntuHelp:Security|a|lot of documentation]] on how to create an encrypted volume. However, a significant problem caused by most of the existing implementations is that the owner of the data may be forced to reveal the password used to encrypt the data. | ||
To address this, different projects exist to implement some [http://en.wikipedia.org/wiki/Steganography steganography] mechanisms, but at the time of writing, only [http://www.truecrypt.org Truecrypt] is full-featured and production quality. | To address this, different projects exist to implement some [http://en.wikipedia.org/wiki/Steganography steganography] mechanisms, but at the time of writing, only [http://www.truecrypt.org Truecrypt] is full-featured and production quality. | ||
[http://www.truecrypt.org Truecrypt] is a free open-source disk encryption software available on Ubuntu. | [http://www.truecrypt.org Truecrypt] is a free open-source disk encryption software available on Ubuntu. | ||
It offers a convenient hidden volumes management that includes protection against damages. | It offers a convenient hidden volumes management that includes protection against damages. | ||
More information is available at [http://www.truecrypt.org/hiddenvolume.php]. | More information is available at [http://www.truecrypt.org/hiddenvolume.php]. | ||
| − | This page is mostly based on the ''man page'' of ''truecrypt 4.3a'' and intents to give a short recipe to implement [http://www.truecrypt.org Truecrypt] hidden volumes on Ubuntu. | + | This page is mostly based on the ''man page'' of ''truecrypt 4.3a'' and intents to give a short recipe to implement [http://www.truecrypt.org Truecrypt] hidden volumes on Ubuntu. |
== Truecrypt hidden volumes == | == Truecrypt hidden volumes == | ||
| − | + | <ol><li>Download and install [http://www.truecrypt.org Truecrypt] | |
| − | + | </li><li>Create an outer volume (ex: on ''/dev/sdb1''):<pre><nowiki> | |
| − | </ | + | |
| − | + | ||
truecrypt --filesystem none --type normal --encryption AES --hash SHA-1 --random-source /dev/urandom -c /dev/sdb1 | truecrypt --filesystem none --type normal --encryption AES --hash SHA-1 --random-source /dev/urandom -c /dev/sdb1 | ||
| + | #In truecrypt 5.1a: | ||
| + | truecrypt --text --filesystem=none --volume-type=normal --encryption=AES --hash=SHA-1 --random-source=/dev/urandom -c /dev/sdb1 | ||
</nowiki></pre> | </nowiki></pre> | ||
| − | + | </li><li>Map the corresponding volume (ex: on ''/dev/sdb1''), but do not mount it:<pre><nowiki> | |
truecrypt /dev/sdb1 | truecrypt /dev/sdb1 | ||
| + | truecrypt --text --list #To see where was this mounted (/dev/mapper/truecrypt0 or /dev/loop0) | ||
</nowiki></pre> | </nowiki></pre> | ||
| − | + | </li><li>Format outer volume '''with FAT''':<pre><nowiki> | |
sudo mkfs.vfat /dev/mapper/truecrypt0 | sudo mkfs.vfat /dev/mapper/truecrypt0 | ||
</nowiki></pre> | </nowiki></pre> | ||
| − | + | </li><li>Dismount the volume:<pre><nowiki> | |
truecrypt -d | truecrypt -d | ||
</nowiki></pre> | </nowiki></pre> | ||
| − | + | </li><li>Create a (ex: 50M) hidden volume within the outer volume (ex: on ''/dev/sdb1''):<pre><nowiki> | |
truecrypt --filesystem none --type hidden --size 50M --encryption AES --hash SHA-1 --random-source /dev/urandom -c /dev/sdb1 | truecrypt --filesystem none --type hidden --size 50M --encryption AES --hash SHA-1 --random-source /dev/urandom -c /dev/sdb1 | ||
</nowiki></pre> | </nowiki></pre> | ||
| − | + | </li><li>Map the corresponding hidden volume (ex: on ''/dev/sdb1''), but do not mount it:<pre><nowiki> | |
truecrypt /dev/sdb1 # (use the hidden password) | truecrypt /dev/sdb1 # (use the hidden password) | ||
</nowiki></pre> | </nowiki></pre> | ||
| − | + | </li><li>Format the hidden volume with a filesystem recognised by ''mount(8)'':<pre><nowiki> | |
sudo mkfs.xfs /dev/mapper/truecrypt0 | sudo mkfs.xfs /dev/mapper/truecrypt0 | ||
</nowiki></pre> | </nowiki></pre> | ||
| − | + | </li><li>Dismount the hidden volume:<pre><nowiki> | |
truecrypt -d | truecrypt -d | ||
</nowiki></pre> | </nowiki></pre> | ||
| − | + | </li><li>Mount the outer volume (ex: ''/dev/sdb1'' on ''/mnt/tc'') with the hidden volume protected:<pre><nowiki> | |
truecrypt -P /dev/sdb1 /mnt/tc | truecrypt -P /dev/sdb1 /mnt/tc | ||
</nowiki></pre> | </nowiki></pre> | ||
| − | + | </li><li>Copy files to the outer volume:<pre><nowiki> | |
cp outer_volume_file.txt /mnt/tc | cp outer_volume_file.txt /mnt/tc | ||
</nowiki></pre> | </nowiki></pre> | ||
| − | + | </li><li>Dismount the outer volume:<pre><nowiki> | |
truecrypt -d | truecrypt -d | ||
</nowiki></pre> | </nowiki></pre> | ||
| − | + | </li><li>Mount either volume (ex: ''/dev/sdb1'' on ''/mnt/tc'') and enjoy:<pre><nowiki> | |
truecrypt /dev/sdb1 /mnt/tc # (use the password relevant to the volume you want to mount) | truecrypt /dev/sdb1 /mnt/tc # (use the password relevant to the volume you want to mount) | ||
| − | </nowiki></pre> | + | </nowiki></pre></li></ol> |
| + | |||
[[category:UbuntuHelp]] | [[category:UbuntuHelp]] | ||
2009年5月18日 (一) 17:57的最新版本
 |
点击翻译: |
English |
请不要直接编辑翻译本页，本页将定期与来源同步。 |
- title Hidden encrypted volume with Truecrypt (command line)
| {i} Please refer to EncryptedFilesystems for further documentation. |
For instructions on using the new TrueCrypt GUI, please see TrueCrypt|GUI There is a|lot of documentation on how to create an encrypted volume. However, a significant problem caused by most of the existing implementations is that the owner of the data may be forced to reveal the password used to encrypt the data. To address this, different projects exist to implement some steganography mechanisms, but at the time of writing, only Truecrypt is full-featured and production quality. Truecrypt is a free open-source disk encryption software available on Ubuntu. It offers a convenient hidden volumes management that includes protection against damages. More information is available at [1]. This page is mostly based on the man page of truecrypt 4.3a and intents to give a short recipe to implement Truecrypt hidden volumes on Ubuntu.
- Download and install Truecrypt
- Create an outer volume (ex: on /dev/sdb1):
truecrypt --filesystem none --type normal --encryption AES --hash SHA-1 --random-source /dev/urandom -c /dev/sdb1 #In truecrypt 5.1a: truecrypt --text --filesystem=none --volume-type=normal --encryption=AES --hash=SHA-1 --random-source=/dev/urandom -c /dev/sdb1
- Map the corresponding volume (ex: on /dev/sdb1), but do not mount it:
truecrypt /dev/sdb1 truecrypt --text --list #To see where was this mounted (/dev/mapper/truecrypt0 or /dev/loop0)
- Format outer volume with FAT:
sudo mkfs.vfat /dev/mapper/truecrypt0
- Dismount the volume:
truecrypt -d
- Create a (ex: 50M) hidden volume within the outer volume (ex: on /dev/sdb1):
truecrypt --filesystem none --type hidden --size 50M --encryption AES --hash SHA-1 --random-source /dev/urandom -c /dev/sdb1
- Map the corresponding hidden volume (ex: on /dev/sdb1), but do not mount it:
truecrypt /dev/sdb1 # (use the hidden password)
- Format the hidden volume with a filesystem recognised by mount(8):
sudo mkfs.xfs /dev/mapper/truecrypt0
- Dismount the hidden volume:
truecrypt -d
- Mount the outer volume (ex: /dev/sdb1 on /mnt/tc) with the hidden volume protected:
truecrypt -P /dev/sdb1 /mnt/tc
- Copy files to the outer volume:
cp outer_volume_file.txt /mnt/tc
- Dismount the outer volume:
truecrypt -d
- Mount either volume (ex: /dev/sdb1 on /mnt/tc) and enjoy:
truecrypt /dev/sdb1 /mnt/tc # (use the password relevant to the volume you want to mount)
