Truecrypt password automation for system encryption

[superguy]

Hi

I was wondering if it was possible to make a script of some sort, that would go on a USB that would automaticlly enter the password

[Sparda]

http://www.yubico.com/products/yubikey/

The other option would be to use a key file on a memory stick, however: Note: Keyfiles are currently not supported for system encryption.

[3w`Sparky]

why automate the password , does that not defeat the purpose of encryption ?

I use keyfiles for our USB HDD's the key for the drive being backed up live on the others drive, so the data can only be recovered if both myself and the guy with the other drive are in agreement.

[Sparda]

why automate the password , does that not defeat the purpose of encryption ?

Really only if you save the unencrypted key on the same device it is securing. If you keep it on a memory stick that's only plugged in when it's required then that's ok, still not ideal as it could be cloned easily.

A yubikey (setup for use with truecrypt) could be cloned easily enough, so it's ok. What you can do if you want to make it even harder is to use the yubikey and a regular password. That is to say, turn the computer on, when truecrypt wants your password, type a password you know, then use the yubikey.

[IOSys]

No, you can't do that ..

What you can do is boot the TC rescue-disk from a flash-drive via grub4dos or just use the rescue-CD itself.

Wipe the first track containing the TC-bootloader (and the encrypted key) from your HDD . Every TC bootloader is unique, even with a blank password, so effectively this would be like using the TC bootloader as a keyfile .

If you don't have it, the 'puter won't boot into any OS ..

Have a look here for more info : http://grub4dos.sourceforge.net/wiki/index.php/Mr