Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am actively using keyfiles for non-boot partitions and files (containers?), but I am wanting to bring this into the full system with a boot partition containing my OS (Windows or Linux). However, I really like the security keyfiles offer against bruteforcing, and commonly employ 25 1MB files as keyfiles (essentially a 25 million character password). Right now, I leave the OS unencrypted but store all the important files in the container and this allows me to use Keyfiles.

I don't want to wipe and reboot if I don't have the option, and the docs fail to explicitly say whether it be available or not.

Anyone tried?

share|improve this question
    
25.1MB key files are ridiculously big. 256-512 bits of key is plenty for AES (likely the only cypher you should be using). Truecrypt includes a function for generating such a file (do not use a plain ASCII/text file). –  Chris S Jun 5 '13 at 14:01
    
To clarify, it is 25 x 1MB key files, plus a 15+ character password. I've been doing a lot of testing recently, and since I am on a Retina Mac (with all the upgrades), the encryption is nearly instantaneous. I am using a compound encryption, with one of them being AES. But the reasoning aside, is there any option to do such a thing with Truecrypt boot partitions? –  Nicholas Yost Jun 5 '13 at 14:15
    
I think you have no idea how encryption works. –  Chris S Jun 5 '13 at 14:21
    
I feel I have a good understanding, but I'd be happy to read any links you have! –  Nicholas Yost Jun 5 '13 at 14:23
add comment

1 Answer

up vote 1 down vote accepted

Yes. Follow the built-in Wizard for "Encrypt System Partition/Drive" under System.

share|improve this answer
    
Awesome. And I will have the ability to use keyfiles? –  Nicholas Yost Jun 5 '13 at 14:41
    
The keyfile would have to be on an unencrypted volume somewhere (usually a USB stick). It couldn't be on the encrypted boot volume. –  Chris S Jun 5 '13 at 15:16
    
Yes. Thanks a lot! –  Nicholas Yost Jun 5 '13 at 15:31
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.