Author Topic: TrueCrypt port  (Read 16373 times)

miturbide

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 1154
    • View Profile
    • OS2World
TrueCrypt port
« on: 2007.05.17, 04:10:01 »
Supporting thread for the TrueCrypt port bounty. The original and old bounty thread can be found here.

Martín Itúrbide
OS2World.com NewsMaster
Open Source Advocate

Skype - martiniturbide
Google Talk - martiniturbide@gmail.com

kimhav

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 990
    • View Profile
    • My Blog!
Re: TrueCrypt port
« Reply #1 on: 2007.08.03, 18:31:51 »
Just wondering, but what about the linux source available for TrueCrypt, can they be used at all to at least get a running CLI version of TrueCrypt under OS2? I'm ref. as well to the old thread.

Andi710

  • Jr. Member
  • **
  • Posts: 71
    • View Profile
Re: TrueCrypt port
« Reply #2 on: 2007.11.06, 06:18:19 »
What I really have in mind is a IFS or a Netdrive plugin. Neither of which need a GUI. Just some config files would work IMHO.

kimhav

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 990
    • View Profile
    • My Blog!
Re: TrueCrypt port
« Reply #3 on: 2007.11.07, 23:44:38 »
I can support that; GUI would come 2nd just to get this ported to OS2 or as an command line based apps.

magog

  • Jr. Member
  • **
  • Posts: 90
    • View Profile
    • Personal Homepage (Ports, Development,...)
Re: TrueCrypt port
« Reply #4 on: 2007.11.15, 03:17:21 »
I can support that; GUI would come 2nd just to get this ported to OS2 or as an command line based apps.

Yes, command line is good enough.

Rant mode...
With all the new and shiny "terrorist laws" in germany (it's most likely the same in other countries) that are used to restrict the personal rights of every person living in this country it's time to take counteractive measures.
There are more people struck by lightning and dying than by a terrorist attack here in Germany.
Since at least 2 years the government follows the Orwell book story by spying on their people and trying to control them.
The latest addition is this new law/act (not yet signed by Mr. Koehler the Federal President - but I have no doubt that he will do it) about the storage of communication data:
Quote
According to plans of the German parties CDU, CSU and SPD, from 2008 onwards it will be possible to trace who has contacted whom via telephone, mobile phone or e-mail for a period of six months. In the case of mobile calls or text messages via mobile phone, the user's location will also be logged. Anonymising services will be prohibited.

People from germany can help to take legal action against the latest attempt by signing the list PLUS sending a letter (this is important) to the lawyer taking this to the Federal Constitutional Court (Bunderverfassungsgericht). This possibility ends on 19th November so do it NOW!
Here is the link (english, french,... languages can be selected at the top right corner):
http://www.vorratsdatenspeicherung.de/

Sorry for this stuff but I'm really annoyed (I have a stronger word for it but this has to be enough) by all the stuff that has been done lately by the political representatives in Berlin.
Regards,
Juergen
*** Java Movie Database - http://www.jmdb.de/

warpcafe

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 746
  • Failure is not an option.
    • View Profile
Re: TrueCrypt port
« Reply #5 on: 2007.11.15, 12:06:55 »
Hi Jürgen,

I fully agree with you and your feelings about what's going on in our country.
You see, I think it's quite unlikely that there will be a "federal trojan" compatible with eCS|OS2. :-)
One more reason to not run Windows, Linux (or Mac - are they on their radar too?).

Although I actually have nothing to hide to the law enforcement agencies, I somehow still want to decide at least whether or not my data (digitalized documents, ideas...) are available to them or not, that's why I want an easy way of storing data in a secured way, e.g. TrueCrypt.
It's like if they question me and I decide to not say anything: I "hide information". The same should be possible to me in matters of electronic information - even if I can get jailed for hiding it: I don't want to always hide it, I just want to have a CHOICE to do it if I want!
(Recht auf informationelle Selbstbestimmung, et.al.)

The problem for me on the other hand is that THEY cannot guarantee that once they have sneaked around my data by their spyware tools, THEY might have a security leak, leading to my data (at their systems) being published or misused by a 3rd party. Also, every backdoor which THEY use can possibly used by anybody else as well, if he knows how to open it. That is why I feel really sceptical about their ideas.

And as usual: Politicians have an idea and come up with a law without having consulted at least ONE professional who knows what the impacts are (and who knows what he is talking about, contrary to them). Our politicians have a habit of putting good ideas into bad laws because they didn't "review" the bullshit by an expert (see "Scheinselbständigkeit" stuff in 1998...)
If they were to get professional IT consulting, they would have dropped that idea a long time ago...

regards,
Thomas
"It is not worth an intelligent man's time to be in the majority.
By definition, there are already enough people to do that"
- G.H. Hardy

magog

  • Jr. Member
  • **
  • Posts: 90
    • View Profile
    • Personal Homepage (Ports, Development,...)
Re: TrueCrypt port
« Reply #6 on: 2007.11.15, 15:30:13 »
Until last year I had this tiny hardware encryption solution (Abit Secure IDE) based on eNova's X-Wall chip but it was only simple 64-Bit DES encryption that's not save any more and it was only for EIDE.
eNova now has an AES-based X-Wall encryption chip for SATA (X-Wall MX) but so far there doesn't seem to be a simple PCB you can directly attach to your SATA drive like it was possible with the old Abit Secure IDE solution with the DES encryption.
You can't even get the RAID Controllers here in germany that are equipped with this controller.
http://www.enovatech.com/

Maybe there are other hardware based solutions available.
Regards,
Juergen
*** Java Movie Database - http://www.jmdb.de/

warpcafe

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 746
  • Failure is not an option.
    • View Profile
Re: TrueCrypt port
« Reply #7 on: 2007.11.15, 23:25:19 »
Hi,

well there's still the Bulk Data Encryption hard disks... as you might know, as you posted in the thread
http://www.os2world.com/component/option,com_smf/Itemid,63/topic,462.0/
:-)

No idea however WHAT encryption standard it uses... a safe one I hope. ;-)

Regards,
Thomas
"It is not worth an intelligent man's time to be in the majority.
By definition, there are already enough people to do that"
- G.H. Hardy

The Blue Warper

  • Full Member
  • ***
  • Posts: 116
    • View Profile
Re: TrueCrypt port
« Reply #8 on: 2007.11.16, 13:56:34 »
Hi!

Don't know if any of you already knows about that, but this URL might possibly come useful to someone:

http://people.cs.uu.nl/eelco/aefs/

It's an AEFS-based IFS, though I fear it may be a bit outdated nowadays.  But sources are available, so one could manage to update it to a more current encryption technology level.
I installed it once many years ago on my old PC, and it worked well.  So well that I couldn't get back again some files which I encrypted 'cause I later forgot the password I had set!  Luckily they were just files I created for test purposes only, so no real loss occurred...

Hope this may help.

P.S. - There's a review of this IFS on VOICE:

http://www.os2voice.org/vnl/past_issues/VNL0504H/vnewsf2.htm

which is where I first know about AEFS.

RobertM

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2034
    • View Profile
    • A.I.BuiltPC - using OS/2 Warp Server & eComStation for Custom Web and Database Solutions
Re: TrueCrypt port
« Reply #9 on: 2007.11.16, 19:54:12 »
Well, here's a couple questions to add to this thread.

(1) How difficult would it be to implement a VFS on an existing file system?

(2) How difficult would it be to implement something that essentially "superclassed" an existing file system to interact with that file system (a) before the write stage and (b) after the read stage to essentially apply the encryption before the actual write, and decrypt after the read?

Just thoughts... don't know how feasible they are... but if one or both methods worked, it might cut development time down to create a mechanism that allowed using TrueCrypt (or for that matter any encryption method) as an intermediary between reads and writes to achieve the goal.

-Robert
|
|
Kirk's 5 Year Mission Continues at:
Star Trek New Voyages
|
|


wpswizard

  • Newbie
  • *
  • Posts: 4
    • View Profile
Re: TrueCrypt port
« Reply #10 on: 2008.02.03, 12:45:04 »
Hi!

Don't know if any of you already knows about that, but this URL might possibly come useful to someone:

http://people.cs.uu.nl/eelco/aefs/

It's an AEFS-based IFS, though I fear it may be a bit outdated nowadays.  But sources are available, so one could manage to update it to a more current encryption technology level.


It's certainly not outdated with regard to encryption technology. AES is the current industry standard for block encryption. If you think it's outdated you are probably a mathematician working in the cryptanalysis department of the NSA and just invented a secret algorithm to break strong encryption.

The OS/2 implementation probably has some problems wrt security. But that's more an OS/2 kernel problem (e.g. no safe memory areas). But if someone placed a trojan on your OS/2 system to use security holes of OS/2 to read your encrypted data you probably should seek for cover to make sure you won't vanish to some hidden area somewhere in asia or Guantanamo...

BTW there is now a linux port of AEFS as can be seen on the page.

    Regards Chris

Andi710

  • Jr. Member
  • **
  • Posts: 71
    • View Profile
Re: TrueCrypt port
« Reply #11 on: 2008.12.01, 00:05:33 »
Did anybody even start working on this bounty? If there is no interest at all in it, can it be closed and the funds diverted to other, more promising projects? (I am one of the sponsors and would like to see my money go to active bounties)

warpcafe

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 746
  • Failure is not an option.
    • View Profile
Re: TrueCrypt port
« Reply #12 on: 2008.12.01, 22:00:32 »
Hi all,

Did anybody even start working on this bounty? If there is no interest at all in it, can it be closed and the funds diverted to other, more promising projects? (I am one of the sponsors and would like to see my money go to active bounties)

Good point.
I was the one starting the bounty, and I think it's a general question to the bounty managers (and I think we already had this discussion...?): What are we supposed to do if nothing happens on an open bounty for *quite some* time?
- Shall the money go into a "pot" (for general increase of all other bounties)
- or should the sponsors be asked where to shift the money to?

Cheers,
Thomas
"It is not worth an intelligent man's time to be in the majority.
By definition, there are already enough people to do that"
- G.H. Hardy

chennecke

  • Full Member
  • ***
  • Posts: 122
    • View Profile
Re: TrueCrypt port
« Reply #13 on: 2008.12.02, 13:30:33 »
Did anybody even start working on this bounty? If there is no interest at all in it, can it be closed and the funds diverted to other, more promising projects? (I am one of the sponsors and would like to see my money go to active bounties)

Good point.
I was the one starting the bounty, and I think it's a general question to the bounty managers (and I think we already had this discussion...?): What are we supposed to do if nothing happens on an open bounty for *quite some* time?
- Shall the money go into a "pot" (for general increase of all other bounties)
- or should the sponsors be asked where to shift the money to?

Clearly the second. Everything else would be embezzlement. If people donate money for a specific purpose, you cannot rededicate it without their consent. The suboptimal handling of bounties in the past has led to me withdrawing a bounty. Please make sure that others don't feel the need to do the same.

I see two possible solutions for avoiding the hassle of getting everyone's answer:

1. Update the bounty rules and add a rule that donations for a bounty will be rededicated after a certain time. However, this leaves the question who decides what project they get re-assigned to and by which criteria.

2. Change the way bounties are handled so the money isn't drawn from the donor immediately. Then you can just delete the commitments and there will be no fees for transferring the money back to the donor.
« Last Edit: 2008.12.02, 13:40:09 by chennecke »

kimhav

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 990
    • View Profile
    • My Blog!
Re: TrueCrypt port
« Reply #14 on: 2008.12.02, 20:41:15 »
Agree with the input that we need to change the current rules that applies. So I'm open for input on how we should change the current rules; do suggest that we use a new thread for this discussion.