Hacker News Reader

Comment by dmix | Hacker News Reader

LUKS/dmcrypt is an excellent fully open source alternative to Truecrypt.

http://code.google.com/p/cryptsetup/

Exactly; I don't see why people have such a hard-on for TrueCrypt when you get LUKS out of the box on a Debian install. It's a no-brainer.

I can send them to Windows and Mac users. Even non-technical types seem to be able to open transcript volumes.

While blowing my cover a little, here's an anecdote about LUKSfs-encrypted drives:

I was arrested sometime in early 2011 (let out after 7 hours without charges, which was a fun story in itself). In my pocket, they found two USB sticks. one was a Linux Mint LiveUSB. The other USB stick was encrypted via LUKS. The police could have booted of the LiveUSB, and then inserted the second USB to decrypt it. if they had decided to force me to divulge my password, they would have found all sorts of incriminating things to keep me for longer.

However, this did not happen; when inserted in the police's Windows PC's, they merely popped up a "This drive is not formatted. would you like to format it now?" message. Naturally, they clicked "no" and gave me back the stick. I owe a part of my freedom to Microsoft's and my local Police's devotion to the Windows OS.

TL;DR - LUKS not working in Windows OS is a feature, not a bug.

To that I add that I specified that Debian offered LUKS at install; if you're going with whole disk encryption and doing enough in Linux to care about it, you won't care about being able to read that partition in other OSes, especially ones you don't have the source code to.

Anyone had luck compiling this on OSX?

it doesn't support hidden volumes (deniable).

Reply on news.ycombinator.com