debian truecrypt 加密工具

Posted on Posted in 安全
Tips: 本文创建于2013年11月6日,已超过 2 年,内容或图片可能已经失效!

系统环境:Debian GNU/Linux 7.1 (wheezy)

一、下载truecrypt

truecrypt 网址:http://www.truecrypt.org/downloads

点击下载 truecrypt-7.1a-linux-x64.tar.gz

二、解压包

tar zxvf truecrypt-7.1a-linux-x64.tar.gz  //解压之后是个可执行文件
truecrypt-7.1a-setup-x64

三、运行这个可执行文件

./truecrypt-7.1a-setup-x64
TrueCrypt 7.1a Setup
____________________


Installation options:

 1) Install truecrypt_7.1a_amd64.tar.gz
 2) Extract package file truecrypt_7.1a_amd64.tar.gz and place it to /tmp

To select, enter 1 or 2: 1  //选择1安装

Before you can use, extract, or install TrueCrypt, you must accept the
terms of the TrueCrypt License.

Press Enter to display the license terms...

Press Enter or space bar to see the rest of the license.


TrueCrypt License Version 3.0

Software distributed under this license is distributed on an "AS
IS" BASIS WITHOUT WARRANTIES OF ANY KIND. THE AUTHORS AND
DISTRIBUTORS OF THE SOFTWARE DISCLAIM ANY LIABILITY. ANYONE WHO
USES, COPIES, MODIFIES, OR (RE)DISTRIBUTES ANY PART OF THE
SOFTWARE IS, BY SUCH ACTION(S), ACCEPTING AND AGREEING TO BE
BOUND BY ALL TERMS AND CONDITIONS OF THIS LICENSE. IF YOU DO NOT

Do you accept and agree to be bound by the license terms? (yes/no): yes   //yes同意

Requirements for Running TrueCrypt:
-----------------------------------

 - FUSE library and tools
 - device mapper tools

Press Enter to continue...

Uninstalling TrueCrypt:
-----------------------

To uninstall TrueCrypt, please run 'truecrypt-uninstall.sh'.
//出现以下字样安装成功
Installing package...
usr/bin/truecrypt
usr/bin/truecrypt-uninstall.sh
usr/share/applications/truecrypt.desktop
usr/share/pixmaps/truecrypt.xpm
usr/share/truecrypt/doc/License.txt
usr/share/truecrypt/doc/TrueCrypt User Guide.pdf

Press Enter to exit...

四、创建加密文件

mkdir truecrypt
truecrypt --create-keyfile ./truecrypt/key.txt
Please type at least 320 randomly chosen characters and then press Enter:   //随便输入320个字符
Characters remaining: 78
Characters remaining: 19

Keyfile has been successfully created.

我这出现个问题,创建key文件的时候,提示缺少库(.so)文件。

解决:把相同系列的系统库文件拷贝到当前系统下。

五、加密分区

如果盘符空间很大,加密分区会消耗很时间,这时可以用linux screen

screen可以参考 http://liuhonghe.me/linux-screen.html

truecrypt -c /dev/sdb1   //sdb1要加密的分区
Volume type:
 1) Normal
 2) Hidden
Select [1]: 1   //选择1

Encryption algorithm:
 1) AES
 2) Serpent
 3) Twofish
 4) AES-Twofish
 5) AES-Twofish-Serpent
 6) Serpent-AES
 7) Serpent-Twofish-AES
 8) Twofish-Serpent
Select [1]: 1   //选择1

Hash algorithm:
 1) RIPEMD-160
 2) SHA-512
 3) Whirlpool
Select [1]: 2   //选择2

Filesystem:
 1) None
 2) FAT
 3) Linux Ext2
 4) Linux Ext3
 5) Linux Ext4
Select [2]: 5  //最好选择你系统相同的分区

Enter password:    //输入密码,一定要记住
Re-enter password:

Enter keyfile path [none]: /root/truecrypt/key.txt   //输入key文件路径
Enter keyfile path [finish]:

Please type at least 320 randomly chosen characters and then press Enter:  //随便输入 320个字符
Characters remaining: 204
Characters remaining: 80
Characters remaining: 20


Done:   0.459%  Speed:  173 MB/s  Left: 3 hours   //我的是2T的盘,时间比较长
The TrueCrypt volume has been successfully created.

六、挂载分区

mkdir /sdb1    //建立个目录
truecrypt /dev/sdb1    //选择要挂载的分区
Enter mount directory [default]: /sdb1    //输入目录
Enter password for /dev/sdb1:         //输入加密分区时的密码
Enter keyfile [none]: /root/truecrypt/key.txt    //选择加密文件路径
Enter keyfile [finish]:     //回车
Protect hidden volume (if any)? (y=Yes/n=No) [No]: n  //选择NO

df查看分区

七、卸载分区

root@localhost:/# umount /sdb1/
root@localhost:/# truecrypt -d /dev/sdb
» 转载请注明来源:若我若鱼 » debian truecrypt 加密工具

Leave a Reply

Your email address will not be published. Required fields are marked *

5 × 2 =