Encryption: Bitlocker / Filevault and VeraCrypt together?

Am I investigating ways to make the best encryption settings? What do you think about using TPM / Bitlocker or T2 / Bitlocker native encryptions to fully encrypt a secondary drive and then use Veracrypt to encrypt the disk and mount it? The boot drive would be a TPM / T2 system encrypted with a PIN and password, with the secondary units "automatically unlocked."

Or does all this make no sense beyond a single pass? It seems that the secondary units do not benefit from TPM / T2, so it denies the PIN and leaves only the password defined by the operating system. In this method, they would have to decrypt the drive, and then still have another encrypted drive. Or maybe it should be a container inside the encrypted drive?

Assumptions: passwords are long and secure, and both are different.

Encryption: How to recover unreadable files in the standard VeraCrypt container mounted?

My hard drive had 3 partitions C, D and E, and I formatted everything on drive E and extended the size of drive D using Easeus Partition Master by adding drive E to D. So now the size of partition D is 500.5 GB , then I created a new 500 GB standard encrypted VeraCrypt container on drive D. The remaining space (unencrypted space) on drive D is 500 MB. Now there is only one unit C and D since I expanded the size of unit D using the Easeus partition master by combining unit E with D!

Before formatting and extending the partition from E to D, I copied all data on drive E to an external Western Digital 4TB drive but there was a 50 GB VeraCrypt file container on that drive (E DRIVE) that I marked as hidden from Windows Explorer to prevent other users from deleting it. I forgot that there was that container of VeraCrypt files on drive E and it was not copied to the external drive since it was hidden for Windows Explorer.

Does making a standard 500 GB encrypted VeraCrypt drive in drive D overwrite drive D that has a size of 500 GB?

I also used Kerish Doctor to prevent the VeraCrypt file container from being accidentally deleted, today I found that 50 GB VeraCrypt file container in the C: ProgramData Kerish Products Kerish Doctor Restore folder and copied it to an external drive and mounted it Successfully driving using VeraCrypt, but only 3 or 4 files of 500 files are readable (they are mostly videos, photos)

The file extension in which Kerish Doctor saved the file to prevent deletion is found in .rst IN the C: ProgramData Kerish Products Kerish Doctor Restore folder.

How do I recover all or most of the data on that unit? See the attached photo, this is what most of the files on that drive look like and are damaged

enter the description of the image here

And opening any of those files gave me the following error in the attached photo!

enter the description of the image here

Using veracrypt that installed in the system unit

Is it correct for me to encrypt the system unit when veracrypt is installed in the system unit?

The Veracrypt boot loader is not displayed after running the bootrec commands during the restart of Windows 8.1

The symptoms and the process are described below:

I have full disk encryption on all drives, including the system drive.

Do not decrypt any drive before trying to reset (reinstall completely, without saving data) my Windows 8.1 operating system with the original CD. I realize that's why I'm probably in the situation I'm in. The answers in this thread led to this decision.

The first obstacle was when I started with the Windows installation CD and tried to reset, the error message was:

"Unable to restart your PC. A required disk partition is missing."

I searched Google and tried to solve this by fixing the master boot record (MBR) using the following commands. The response / feedback is listed below each command:

bootrec / fixmbr

The operation was completed successfully

bootrec / fixboot

The operation was completed successfully

attrib C: Boot BCD -h -r -s

Route not found – C: Boot

bootrec / rebuildbcd

Scanning all disks for Windows installations
Total of Windows installations identified: 0
The operation was completed successfully

Then, it seems that because the disks are encrypted I can not restore the master boot record. It is not recognizing my file system or my installation (see & # 39; more information & # 39; below).

Then I will turn on my computer and decrypt the hard drive. I can not access the veracrypt boot loader. When I turn on my PC, the blinking underline cursor appears, a line goes down and then it keeps flashing, no matter how long I leave my PC or what keys I press. My password is not requested, the veracrypt boot loader does not appear on the screen.

At this point, I can not access the veracrypt boot loader, nor can I see how to do a full reinstallation of Windows using the installation disk.

It seems that I have blocked out of my PC without being able to recover it or perform a reinstallation.

More information:

I created a veracrypt recovery USB drive from the Veracrypt.iso rescue disk I had on a USB drive. I created it using unetbootin on a mac. When I try to boot my PC with this disk, I see the same problem with the veracrypt boot loader: the underscore cursor flashes on a line and then nothing else happens, no matter how much I leave it.

I can see all my volumes and disks using DISKPART on the command line. I can see the two partitions in the SSD of my system (partition of the system of 350 MB + rest of the disk) and my disk that is not of the system that has 1 partition. They are listed as Fs: RAW. I suppose this is due to the fact that they are encrypted?

I tried to use

chkdsk / f

on my system drive but it is write protected. I was able to disable write protection on my storage disk using

SHOOTING> clear disk attributes read-only

but this attribute could not be deactivated in the unit of my system.

I do not want to keep any data on the hard drive, I just want to do a full reinstallation using the original Windows 8.1 disk. I want to erase it completely, I do not need to keep any partition, etc. Installation completely clean. Any suggestions are welcome, thanks.

debian – iscsi + veracrypt + zfs

I own an old NAS (Buffalo TeraStation Pro II) with four Samsung HD502IJ SATA drives of 500 GB. On the NAS I installed Debian 9.

The NAS is quite old and consumes a lot of power since it has no hard drive connected. Therefore, I plan to use it only as a server to store backup copies, which will be disconnected from power most of the time (to save the backup copies).
This is a domestic configuration and it is about using spare hardware for the security of additional data. Therefore, I'm not planning to put a lot of money into it (I can not solder ECC ram on the old NAS anyway …).

As the NAS is quite limited in terms of calculation and memory capacity (ARM; Marvell Orion; 128 MB of RAM)[http://buffalo.nas-central.org/wiki/Category:TerastationProV2 ], I can not run ZFS directly on it, but I still want to use the ZFS snapshot capabilities for my backups.
I'd like to use disk encryption, but that's not the most important thing since the device is protected at home and the data is more like family photos, nothing critical that someone will intentionally try to steal.

My current plan would be:

  • NAS: 3 partitions on each disk: SWAP (~ 512 MB), RAID1 with Debian (~ 10 GB), the rest is shared through iSCSI.

  • PC running backups: connect to the 4 iSCSI destinations, decrypt them with veracrypt and mount them as a ZFS group (RAID Z1) to store backup copies.

The parameters that I plan to use:

  • The GZIP-9 compression as speed is not important (http://nex7.blogspot.com/2013/03/readme1st.html recommends the opposite when it comes to speed, but it also says if I'm going to use GZIP the speed of level 9 it's not much slower than GZIP-1 and compression is better)

  • ashift = 12 (for the correct alignment, I hope it is still true if the device is a veracrypt …)

My questions:

  1. It is always said that ZFS should see the disks as directly as possible, so you can optimize them. ISCSI, or more importantly, veracrypt, does it hide any important disk parameter of ZFS?

  2. To work with iSCSI and ZFS, would you recommend using LUKS instead of veracrypt?

  3. What would you think about doing the encryption on the NAS itself (before sharing iSCSI) instead of on the client PC?

  4. When viewing the configuration (and the hardware), do you have any other recommendations about additional parameters?

Help with the system encryption Veracrypt – Superuser

I had a system encrypted with veracrypt. I cloned a partition on the disk to another unit and tried to decipher it with Veracrypt.
It does not work.

Any idea why? Does Veracrypt need to decipher the volume name?

I have the password I do not have the volume name.

ubuntu – Why does Veracrypt show 2 partitions created?

I cleaned my Samsung 850 Evo 1TB SSD and only used veracrypt to complete the disk encryption with it. I also have another hard drive with which I have done this.

The HDD is sdb, and the EVO is sdc. The results resemble the following.

enter the description of the image here

For some reason, there are 2 partitions created for the Samsung SSD. When I want to mount sdb I use the command sudo veracrypt --mount / dev / sdb1, but when I want to mount sdc, I omit the drive letter and use the command sudo veracrypt --mount / dev / sdc, and the unit is assembled successfully. The df command even recognizes that the mount veracrypt has its total 1 TB of space.

So, why do I see 2 very large partitions created for this device?

Using veracrypt for Ubuntu installed on Nexus 7

I know that it is possible to install Ubuntu on Nexus 7, but does it mean that I can encrypt my data with veracrypt that I can install on this device?

encryption – Brute forcing the Veracrypt header with THC Hydra

Some of your previous responses have not been well received and you are in danger of being blocked.

Please pay close attention to the following guide:

  • Please make sure answer the question. Provide details and share your research!

But avoid

  • Ask for help, clarifications or respond to other answers.
  • Make statements based on opinion; Support them with references or personal experience.

For more information, see our tips on how to write excellent answers.