Block Device Encryption - VeraCrypt - Revision history

NKirnbauer: fixed "Pages using deprecated source tags"

2024-09-03T10:05:17Z

fixed "Pages using deprecated source tags"

← Older revision		Revision as of 10:05, 3 September 2024
Line 3:		Line 3:
	== TL;DR ==		== TL;DR ==

	<~~source~~ lang="bash"># Install (https://www.veracrypt.fr/en/Downloads.html)		<syntaxhighlight lang="bash"># Install (https://www.veracrypt.fr/en/Downloads.html)
	sudo dpkg -i $DEB_PACKAGE		sudo dpkg -i $DEB_PACKAGE

Line 19:		Line 19:
	# USE IT.		# USE IT.
	veracrypt -h		veracrypt -h
	</~~source~~>		</syntaxhighlight>
	== Prerequisites ==		== Prerequisites ==

Line 29:		Line 29:
	This section downloads the the veracrypt package, verify its integrity and finally installs it. Get the download link for the appropriate System from <code>https://www.veracrypt.fr/en/Downloads.html</code> and copy the download link to the variable in the variable <code>DEB_PACKAGE_HREF</code>. For all unsupported Linux-based OS, proceed to the next section "build from source".		This section downloads the the veracrypt package, verify its integrity and finally installs it. Get the download link for the appropriate System from <code>https://www.veracrypt.fr/en/Downloads.html</code> and copy the download link to the variable in the variable <code>DEB_PACKAGE_HREF</code>. For all unsupported Linux-based OS, proceed to the next section "build from source".

	<~~source~~ lang="bash"># CHANGE THIS VARIABLE TO THE DESIRED VERSION AND DISTRO		<syntaxhighlight lang="bash"># CHANGE THIS VARIABLE TO THE DESIRED VERSION AND DISTRO
	# Here: VeraCrypt Console 1.24u7 for Ubuntu 20.04 (amd64)		# Here: VeraCrypt Console 1.24u7 for Ubuntu 20.04 (amd64)
	DEB_PACKAGE_HREF="https://launchpad.net/veracrypt/trunk/1.24-update7/+download/veracrypt-console-1.24-Update7-Ubuntu-20.04-amd64.deb"		DEB_PACKAGE_HREF="https://launchpad.net/veracrypt/trunk/1.24-update7/+download/veracrypt-console-1.24-Update7-Ubuntu-20.04-amd64.deb"
Line 60:		Line 60:
	# Install the veracrypt package		# Install the veracrypt package
	sudo dpkg -i $DEB_PACKAGE		sudo dpkg -i $DEB_PACKAGE
	</~~source~~>		</syntaxhighlight>
	=== Build from source ===		=== Build from source ===

	<~~source~~ lang="bash"># Required packages (Adapt to the OS specific package manager)		<syntaxhighlight lang="bash"># Required packages (Adapt to the OS specific package manager)
	sudo apt update && sudo apt install yasm make gcc pkg-config fuse libfuse-dev		sudo apt update && sudo apt install yasm make gcc pkg-config fuse libfuse-dev

Line 79:		Line 79:
	# Test		# Test
	veracrypt --version# Here: VeraCrypt 1.24-Update7		veracrypt --version# Here: VeraCrypt 1.24-Update7
	</~~source~~>		</syntaxhighlight>
	== Procedure ==		== Procedure ==

Line 100:		Line 100:
	The outter container will be configured using a basic <code>{AES, SHA256, Password}</code> configuration and size of 25MB, for the sake of an example. Any parameters may be adapted as needed while using the <code>-c</code> flag, and are elaborated sufficiently in the interactive prompt. The <code>-h</code> flag may be used to access the help for further information. Note that Veracrypt volume sizes are indicated in KiB, MiB, GiB or TiB.		The outter container will be configured using a basic <code>{AES, SHA256, Password}</code> configuration and size of 25MB, for the sake of an example. Any parameters may be adapted as needed while using the <code>-c</code> flag, and are elaborated sufficiently in the interactive prompt. The <code>-h</code> flag may be used to access the help for further information. Note that Veracrypt volume sizes are indicated in KiB, MiB, GiB or TiB.

	<~~source~~ lang="bash">veracrypt -c		<syntaxhighlight lang="bash">veracrypt -c
	</~~source~~>		</syntaxhighlight>

	Via interactive text user interface (-t, --text):		Via interactive text user interface (-t, --text):
Line 121:		Line 121:
	After creating the outter container, an inner hidden container can be added. The hidden container will be configured using s sophisticated <code>{AES(Twofish), SHA512, {Password, custom PIM, Keyfile}}</code> configuration and size of 5MB, for the sake of an example. Note that Veracrypt volume sizes are indicated in KiB, MiB, GiB or TiB.		After creating the outter container, an inner hidden container can be added. The hidden container will be configured using s sophisticated <code>{AES(Twofish), SHA512, {Password, custom PIM, Keyfile}}</code> configuration and size of 5MB, for the sake of an example. Note that Veracrypt volume sizes are indicated in KiB, MiB, GiB or TiB.

	<~~source~~ lang="bash">$ veracrypt -c</~~source~~>		<syntaxhighlight lang="bash">$ veracrypt -c</syntaxhighlight>

	Via interactive text user interface (-t, --text):		Via interactive text user interface (-t, --text):
Line 142:		Line 142:
	Simply mount VeraCrypt container via text user interface <code>-t, --text</code>, which is enabled by default. Or mount in a single command referencing to <code>-h</code>.		Simply mount VeraCrypt container via text user interface <code>-t, --text</code>, which is enabled by default. Or mount in a single command referencing to <code>-h</code>.

	<~~source~~ lang="bash">veracrypt $ENC_CONTAINER_FILE $MOUNT_POINT		<syntaxhighlight lang="bash">veracrypt $ENC_CONTAINER_FILE $MOUNT_POINT
	</~~source~~>		</syntaxhighlight>
	==== Example: Mount FILENAME.hc outter container ====		==== Example: Mount FILENAME.hc outter container ====

Line 164:		Line 164:
	=== List Mounted Container ===		=== List Mounted Container ===

	<~~source~~ lang="bash">veracrypt -l		<syntaxhighlight lang="bash">veracrypt -l
	</~~source~~>		</syntaxhighlight>
	=== Dismount Container ===		=== Dismount Container ===

	<~~source~~ lang="bash"># Specific		<syntaxhighlight lang="bash"># Specific
	veracrypt -d $MOUNTPOINT		veracrypt -d $MOUNTPOINT
	# All		# All
	veracrypt -d		veracrypt -d
	</~~source~~>		</syntaxhighlight>
	== References ==		== References ==

Ikramer at 18:28, 12 March 2024

2024-03-12T18:28:07Z

← Older revision		Revision as of 18:28, 12 March 2024
Line 180:		Line 180:

	[[Category:Documentation]]		[[Category:Documentation]]
			[[Category:Basics]]

JPDoe at 21:56, 15 October 2020

2020-10-15T21:56:25Z

← Older revision		Revision as of 21:56, 15 October 2020
Line 144:		Line 144:
	<source lang="bash">veracrypt $ENC_CONTAINER_FILE $MOUNT_POINT		<source lang="bash">veracrypt $ENC_CONTAINER_FILE $MOUNT_POINT
	</source>		</source>
	==== Example: Mount ~~KYTPMET_UE01~~.hc outter container ====		==== Example: Mount FILENAME.hc outter container ====

	Via interactive text user interface (-t, --text):		Via interactive text user interface (-t, --text):
Line 153:		Line 153:
	Protect hidden volume? [No]: [ENTER]</nowiki>		Protect hidden volume? [No]: [ENTER]</nowiki>

	==== Example: Mount ~~KYTPMET_UE01~~.hc hidden container ====		==== Example: Mount FILENAME.hc hidden container ====

	Via interactive text user interface (-t, --text):		Via interactive text user interface (-t, --text):

JPDoe: Minor: Added to Category Documentations

2020-09-17T17:09:46Z

Minor: Added to Category Documentations

← Older revision		Revision as of 17:09, 17 September 2020
Line 178:		Line 178:
	* https://www.veracrypt.fr/en/Downloads.html		* https://www.veracrypt.fr/en/Downloads.html
	* https://www.veracrypt.fr/en/Digital%20Signatures.html		* https://www.veracrypt.fr/en/Digital%20Signatures.html

			[[Category:Documentation]]

JPDoe: Created page with "This document describes how to create, mount and dismount a virtual encrypted disk with hidden container using VeraCrypt for Linux from the terminal. == TL;DR ==
2020-09-17T16:53:13Z

Created page with "This document describes how to create, mount and dismount a virtual encrypted disk with hidden container using VeraCrypt for Linux from the terminal. == TL;DR == <source lan..."

New page
This document describes how to create, mount and dismount a virtual encrypted disk with hidden container using VeraCrypt for Linux from the terminal.

== TL;DR ==

<source lang="bash"># Install (https://www.veracrypt.fr/en/Downloads.html)
sudo dpkg -i $DEB_PACKAGE

# Create encrypted volume (interactive)
veracrypt -c
# Mount encrypted volume (interactive)
veracrypt $ENC_FILE $MOUNT_POINT
# List mounted volumes
veracrypt -l
# Unmount a specific Veracrypt volumes
veracrypt -d $ENC_FILE
# Unmount all Veracrypt volumes
veracrypt -d

# USE IT.
veracrypt -h
</source>
== Prerequisites ==

* Linux-based Operating System (Here: Ubuntu 20.04 LTS)
* VeraCrypt Console (Installation notes below) (Here: VeraCrypt 1.24-update7)

=== Install pre-build binary ===

This section downloads the the veracrypt package, verify its integrity and finally installs it. Get the download link for the appropriate System from <code>https://www.veracrypt.fr/en/Downloads.html</code> and copy the download link to the variable in the variable <code>DEB_PACKAGE_HREF</code>. For all unsupported Linux-based OS, proceed to the next section "build from source".

<source lang="bash"># CHANGE THIS VARIABLE TO THE DESIRED VERSION AND DISTRO
# Here: VeraCrypt Console 1.24u7 for Ubuntu 20.04 (amd64)
DEB_PACKAGE_HREF="https://launchpad.net/veracrypt/trunk/1.24-update7/+download/veracrypt-console-1.24-Update7-Ubuntu-20.04-amd64.deb"

# Helper variables used in the following for a better overview
# Simply copy paste this block to the terminal
SIG_DEB_PACKAGE_HREF=$DEB_PACKAGE_HREF".sig"
PGP_PUBLIC_KEY_HREF="https://www.idrix.fr/VeraCrypt/VeraCrypt_PGP_public_key.asc"
# Reference to the local file names
LOCAL_PATH="/var/tmp/"
DEB_PACKAGE=$LOCAL_PATH${DEB_PACKAGE_HREF##/}
SIG_DEB_PACKAGE=$LOCAL_PATH${SIG_DEB_PACKAGE_HREF##/}
PGP_PUBLIC_KEY=$LOCAL_PATH${PGP_PUBLIC_KEY_HREF##/}
# VeraCrypt PGP public key RSA fingerprint
FINGERPRINT="5069A233D55A0EEB174A5FC3821ACD02680D16DE"

# Download the necessary files
wget $DEB_PACKAGE_HREF -O $DEB_PACKAGE
wget $SIG_DEB_PACKAGE_HREF -O $SIG_DEB_PACKAGE
wget $PGP_PUBLIC_KEY_HREF -O $PGP_PUBLIC_KEY

# Verify PGP Signature
gpg --import --import-options show-only $PGP_PUBLIC_KEY | grep $FINGERPRINT
# Only continue if the $PGP_PUBLIC_KEY matches the static $FINGERPRINT.
# Else, someone tries to trick you.
gpg --import $PGP_PUBLIC_KEY
gpg --verify $SIG_DEB_PACKAGE $DEB_PACKAGE
# Only continue if the $SIG_DEB_PACKAGE verfies the $DEB_PACKAGE's integrity

# Install the veracrypt package
sudo dpkg -i $DEB_PACKAGE
</source>
=== Build from source ===

<source lang="bash"># Required packages (Adapt to the OS specific package manager)
sudo apt update && sudo apt install yasm make gcc pkg-config fuse libfuse-dev

# Download source code
git clone https://github.com/veracrypt/VeraCrypt /var/tmp/VeraCrypt
# Won't build without this library eventhough the NOGUI bit is set
git clone https://github.com/wxWidgets/wxWidgets /var/tmp/VeraCrypt/src/wxWidgets
git -C /var/tmp/VeraCrypt/src/wxWidgets/ submodule update --init 3rdparty/catch

# Build and link
make WXSTATIC=1 WX_ROOT=/var/tmp/VeraCrypt/src/wxWidgets/ wxbuild -C /var/tmp/VeraCrypt/src/
make WXSTATIC=1 -C /var/tmp/VeraCrypt/src/
sudo mv /var/tmp/VeraCrypt/src/Main/varacrypt /usr/bin/

# Test
veracrypt --version# Here: VeraCrypt 1.24-Update7
</source>
== Procedure ==

<div style="border: 1px solid #31708f; background-color: #d9edf7; color: #31708f; padding: 5px 10px; margin-bottom: 5px; text-align: justify"><b><u>VeraCrypt 1.24 Parameters</u></b>:

'''Volume types''':<br />
['''1'''] Normal ['''2'''] Hidden

'''Encryption Algorithms''':<br />
['''1'''] AES ['''2'''] Serpent ['''3'''] Twofish ['''4'''] Camellia ['''5'''] Kuznyechik ['''6'''] AES(Twofish) ['''7'''] AES(Twofish(Serpent)) ['''8'''] Camellia(Kuznyechik) ['''9'''] Camellia(Serpent) ['''10'''] Kuznyechik(AES) ['''11'''] Kuznyechik(Serpent(Camellia)) ['''12'''] Kuznyechik(Twofish) ['''13'''] Serpent(AES) ['''14'''] Serpent(Twofish(AES)) ['''15'''] Twofish(Serpent)

'''Hash Algorithms''':<br />
['''1'''] SHA-512 ['''2'''] Whirlpool ['''3'''] SHA-256 ['''4'''] Streebog

'''Filesystems''':<br />
['''1'''] None ['''2'''] FAT ['''3'''] Linux Ext2 ['''4'''] Linux Ext3 ['''5'''] Linux Ext4 ['''6'''] NTFS ['''7'''] exFAT ['''8'''] Btrfs</div>

=== Create outter container ===

The outter container will be configured using a basic <code>{AES, SHA256, Password}</code> configuration and size of 25MB, for the sake of an example. Any parameters may be adapted as needed while using the <code>-c</code> flag, and are elaborated sufficiently in the interactive prompt. The <code>-h</code> flag may be used to access the help for further information. Note that Veracrypt volume sizes are indicated in KiB, MiB, GiB or TiB.

<source lang="bash">veracrypt -c
</source>

Via interactive text user interface (-t, --text):
<nowiki>
Volume type: 1
Volume path: FILENAME.hc
Volume size (sizeK/size[M]/sizeG): 24414K
Encryption Algorithm: 1
Hash algorithm: 3
Filesystem: 2
Password: OUTTER_PW
PIM: [ENTER]
Enter keyfile path [none]: [ENTER]
Type at least 320 randomly chosen characters and then press Enter: [ENTER]
</nowiki>

=== Add hidden container ===

After creating the outter container, an inner hidden container can be added. The hidden container will be configured using s sophisticated <code>{AES(Twofish), SHA512, {Password, custom PIM, Keyfile}}</code> configuration and size of 5MB, for the sake of an example. Note that Veracrypt volume sizes are indicated in KiB, MiB, GiB or TiB.

<source lang="bash">$ veracrypt -c</source>

Via interactive text user interface (-t, --text):
<nowiki>
Volume type: 2
Volume path: FILENAME.hc
Hidden volume size (sizeK/size[M]/sizeG): 3883K
Encryption Algorithm: 6
Hash algorithm: 1
Filesystem: 2
Password: HIDDEN_PW
PIM: 50000
Keyfile path [none]: ./Example_Keyfile.png
Keyfile path [finish]: [ENTER]
Type at least 320 randomly chosen characters and then press Enter: [ENTER]
</nowiki>

=== Mount container ===

Simply mount VeraCrypt container via text user interface <code>-t, --text</code>, which is enabled by default. Or mount in a single command referencing to <code>-h</code>.

<source lang="bash">veracrypt $ENC_CONTAINER_FILE $MOUNT_POINT
</source>
==== Example: Mount KYTPMET_UE01.hc outter container ====

Via interactive text user interface (-t, --text):
<nowiki>
Password: OUTTER_PW
PIM: [ENTER]
Keyfile [none]: [ENTER]
Protect hidden volume? [No]: [ENTER]</nowiki>

==== Example: Mount KYTPMET_UE01.hc hidden container ====

Via interactive text user interface (-t, --text):
<nowiki>
Password: HIDDEN_PW
PIM: 50000
Keyfile [none]: Keyfile.png
Protect hidden volume? [No]: [ENTER]</nowiki>

=== List Mounted Container ===

<source lang="bash">veracrypt -l
</source>
=== Dismount Container ===

<source lang="bash"># Specific
veracrypt -d $MOUNTPOINT
# All
veracrypt -d
</source>
== References ==

https://github.com/veracrypt/VeraCrypt
* https://www.veracrypt.fr/en/Downloads.html
* https://www.veracrypt.fr/en/Digital%20Signatures.html