Topic: TrueCrypt | Disk Partion

[C0nw0nk]

http://www.truecrypt.org/

So in windows i create a disk partion called "F:/"

With the space F:/ i encrypt it using true crypt then store my entire server apache websites everything in that location.

But i have a question for the server to decrypt the contents and deliever it does this slow it down since my intel cpu(s) has to decrypt the AES algorithm first.

I have no idea if anyone is familure with disk encryptions here or not ?

[James Blond]

it depends which type you use. Like decrypt while mount won't make a difference. But if you decrypt your files on the fly, it will some kinda slow your server down.

I have no experience with that (TM)

[jraute]

Ok, decryption takes time and cpu-ressources, that is correct. But the normal performance of modern cpu's (i3, i5, i7, ...) handling files out of and into a truecrypt container is at a minimum of round about 100 Mbytes/s as long as the disk storage can handle that - for a normal application surely no bottleneck.
Check that your disk storage is fast enough, maybe use a ssd.

[C0nw0nk]

I have 2x 3 TB SATA3 hard drives even though my setup is my hard drives are dynamic and 1 hard drive mirrors the other so if one fails the other is still fine and no data loss.

[AdrianK_IT]

What is the bandwidth of your (upload) pipe to the internet? (Upload, 'cos that will be the max download bandwidth for clients.)

I suspect other factors might be largely irrelevant; connectivity bandwidth will be the limiting factor.

[C0nw0nk]

[AdrianK_IT]

1 GBPS (GigaBytes Per Second)? Or 1 Gbps (Gigabits per second)? Theoretical maximum, or actual?

[C0nw0nk]

1 GigaByte per second, Actual connection speed. Servers with www.OVH.co.uk, I have to have allot of bandwidth since i deal with video streams. (Media Installations)

[Jan-E]

Quote from http://truecrypt.sourceforge.net/

[C0nw0nk]

I wounder what the security issues are... I google but don't see anything nor how you would decrypt a AES algorithm anyway.

[AdrianK_IT]

Can find no reference at OVH to GigaByte per sec connection speeds. This is no surprise; it is customary to express (long distance) serial connection speeds in bits per sec, since this is how they work, one bit after another.

Need to be clear about what units one is using if one wants to monitor/calculate likely effects of encryption.

As I understnd it, your disks can chuck data at your CPU at 600 MB/s, whereas your CPU can only chuck data at your clients at 128 MB/s (limited by your bandwidth, never mind theirs!). I doubt encryption is a problem!

[C0nw0nk]

OVH http://www.ovh.co.uk/dedicated_servers/bandwidth-upgrade.xml

Either way i have no problem with truecrypt decrypting data on the fly.

[Jan-E]

http://truecrypt.ch/

[C0nw0nk]

Thanks Jan-E maybe the original developers just decided after all these years they don't want to keep maintaining a amazing bit of freeware.

[jraute]

If only one could ask the developers just one simple question "if they are keep on using their own software?" And if the answer would be yes, no one need to be doubtfully.

(This could be a question, which is probably allowed ... )

But who knows the real reasons?!

I am looking forward to see the final results from the audit, as long as nobody manipulate the result (the next doubt ...).

[C0nw0nk]

I will answer some questions that will make you doubt TrueCrypt original developers anyway even though the program was open source and on the website they claim they did not backdoor it even when goverments asked them to.

When you take the source code and compile it yourself your file sizes and outputs will be allot different to the version you download from TrueCrypt.org

Looking forward to what the audit produces and i wouldn't doubt the security anyway if you encrypt with a AES / AES Two fish serpant algorithm you are more than secure enough. Only Dictionary attacks and rainbow tables (A very big list of known and exsisting passwords) could possibly gain access to it. Decrypting it is impossible.

[jraute]

[C0nw0nk]

True i suppose but i think this is a better way for TrueCrypt to go maintained and run in a community rather than just 1 person be more updates new features

Also do you use BitLocker and i cant find anywhere but does BitLocker offer hidden partitions ? Or isit only TrueCrypt that allows us to have hidden system partitions.

[jraute]

Don't get me wrong, at the moment i still trust truecrypt and would never choose a product from microsoft, google, apple or one of the other big players - it is known that they work with the nsa and co.

the thing is, if there is some kind of weak code or whatever, how can the community get an update, a patch, support?

[C0nw0nk]

I believe it is a better way to go it will be down to one person to compile a official version as always but nothing stops us taking the source code to that updated version and compiling it ourselves.

And besides the amount of people reverse engineering that compiled file and looking for obfuscated code will soon show how trust worthy it is.