disk encryption; hidden containers

[Duane Hill]

On Fri, 18 Jul 2008, Greg Larkin wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Chad Perrin wrote:
> | On Fri, Jul 18, 2008 at 10:01:54PM +0100, RW wrote:
> |> On Fri, 18 Jul 2008 21:06:57 +0100
> |> RW <fbsd06 at mlists.homeunix.com> wrote:
> |>
> |>> On Fri, 18 Jul 2008 09:56:24 -0600
> |>> Chad Perrin <perrin at apotheon.com> wrote:
> |>>
> |>>> My preliminary searches on the subject suggest that neither GBDE nor
> |>>> GELI encryption offers hidden volume/container capabilities.
> |>> Are you talking about steganography?
> |> Sorry, I guess you're talking about volumes hidden in the unused space
> |> on a filesystem. I don't think there's anything. I'm not sure
> |> what the status of truecrypt is, I've heard some talk about it running
> |> on freebsd eventually.
> |>
> |> It would be a start for geli to be able to encrypt its metadata.
> |
> | So, are those basically my choices -- either wait for GBDE or GELI to
> | acquire that capability, or write it myself (which is not something I'm
> | prepared to do right now)?  Bummer.
> |
> | Well . . . or wait for something else like TrueCrypt to get ported to
> | FreeBSD, I suppose.
> |
>
> Hi Chad,
>
> There is a beta version of the TrueCrypt 5.1a port out there.  See:
> http://lists.freebsd.org/pipermail/freebsd-ports/2008-May/048432.html.
>
> I tried it in a VMware virtual machine a couple of months ago and it
> hung pretty consistently when copying files into the container.  It's
> entirely possible that the problem was related to the virtual
> environment, so YMMV.

What VMWare version were you using and what OS and version hosted the VM?

I only ask as I have been searching for this myself.

Currently, I am using a commercial product under Linux and Windoes called 
BestCrypt by Jetico (http://www.jetico.com).

I have VMware installed currently under Windoes Vista. VMware version is 
6.0.4-93057. I haven't had any issues thus far running a number of FreeBSD 
guest OSes.

If your version is less than what I'm running, I would be willing to 
install and test.

-d