TrueCrypt v7.0 Released

[Arthur]

From thier website...

 

We are pleased to announce the release of TrueCrypt 7.0. Among the new features are hardware-accelerated AES, support for devices that use sector sizes other than 512 bytes, ability to configure a volume to be automatically mounted whenever its host device gets connected to the computer, favorites organizer, and more.

 

 

Download / More Info

 

New features:

 

• Hardware-accelerated AES (for more information, see the chapter Hardware Acceleration).
   
  
• Note: If you want to disable hardware acceleration, select Settings > Performance and disable the option 'Accelerate AES encryption/decryption by using the AES instructions of the processor'.
   
  
• A volume can now be configured to be automatically mounted whenever its host device gets connected to the computer (provided that the correct password and/or keyfiles are supplied). (Windows)
   
  
• Note: For example, if you have a TrueCrypt container on a USB flash drive and you want to configure TrueCrypt to mount it automatically whenever you insert the USB flash drive into the USB port, follow these steps: 1. Mount the volume. 2. Right-click the mounted volume in the drive list in the main TrueCrypt window and select 'Add to Favorites'. 3. The Favorites Organizer window should appear. In it, enable the option 'Mount selected volume when its host device gets connected' and click OK.
   
  
• Also note that TrueCrypt will not prompt you for a password if you have enabled caching of the pre-boot authentication password (Settings > 'System Encryption') and the volume uses the same password as the system partition/drive. The same applies to cached non-system volume passwords.
   
  
• Partition/device-hosted volumes can now be created on drives that use a sector size of 4096, 2048, or 1024 bytes (Windows, Linux). Note: Previously only file-hosted volumes were supported on such drives.
   
  
• Favorite Volumes Organizer (Favorites > 'Organize Favorite Volumes' or 'Organize System Favorite Volumes'), which allows you to set various options for each favorite volume. For example, any of them can be mounted upon logon, as read-only or removable medium, can be assigned a special label (which is shown within the user interface instead of the volume path), excluded from hotkey mount, etc. The order in which favorite volumes are displayed in the Favorites Organizer window can be changed and it is the order in which the volumes are mounted (e.g. when Windows starts or by pressing the 'Mount Favorite Volumes' hotkey). For more information, see the chapters Favorite Volumes and System Favorite Volumes. (Windows)
   
  
• The Favorites menu now contains a list of your non-system favorite volumes. When you select a volume from the list, you are asked for its password (and/or keyfiles) (unless it is cached) and if it is correct, the volume is mounted. (Windows)
  

 

Security improvements:

 

• In response to our public complaint regarding the missing API for encryption of Windows hibernation files, Microsoft began providing a public API for encryption of hibernation files on Windows Vista and later versions of Windows (for more information, see the section TrueCrypt 5.1a in this version history). Starting with this version 7.0, TrueCrypt uses this API to encrypt hibernation and crash dump files in a safe documented way. (Windows 7/Vista/2008/2008R2)
   
  
• Note: As Windows XP and Windows 2003 do not provide any API for encryption of hibernation files, TrueCrypt has to modify undocumented components of Windows XP/2003 in order to allow users to encrypt hibernation files. Therefore, TrueCrypt cannot guarantee that Windows XP/2003 hibernation files will always be encrypted. Therefore, if you use Windows XP/2003 and want the hibernation file to be safely encrypted, we strongly recommend that you upgrade to Windows Vista or later and to TrueCrypt 7.0 or later. For more information, see the section Hibernation File.
  

 

Improvements:

 

• Many minor improvements. (Windows, Mac OS X, and Linux)
  

 

Bug fixes:

 

• Minor bug fixes. (Windows, Mac OS X, and Linux)
  

 

Removed features:

 

• TrueCrypt no longer supports device-hosted volumes located on floppy disks. Note: You can still create file-hosted TrueCrypt volumes on floppy disks.
  

[Scouser1946]

We are trying to set TrueCrypt up so that as soon as any member of staff plugs their encrypted USB device into the network PC's on site or their Staff laptops they immediately get the password screen and subsequently get the explorer screen for the drive. This works using the preferences when the volume is set up and it is always the same user who is logged in. We want to set up the encrypted drives ourselves and then just let staff plug them in and get the password screen, anyone got any ideas? We are running a RMConnect 3 network and version 7.0 of TrueCrypt.

[Arthur]

We use USB Drive Letter Manager to do exactly what you have described with TrueCrypt. I'll update this thread with the details later today.

[Scouser1946]

So far we have tried all the options in TrueCrypt so that the encrypted USB drives are recognised by the workstation and the Password prompt screen is displayed, including adding the drive letter to Favourites, using the Traveller version and creating a Setting MSI to distribute to the workstations that contains the preference setting we thought would enable us to achieve the minimal staff intervention required. Have looked at the USB Drive Letter Management documentation and it looks as if it should work if we can manage to sort out the necessary details for the .ini file - would it be possible to see a copy of the files you use to set it up as a model. Edited July 7, 2011 by Scouser1946
Supply more detail

[Arthur]

Here is the .ini file we use. If you have any questions, just ask.

 

[b][settings][/b]
NoMediaNoLetter=1
DeviceDesc=%FriendlyName% (%DiskSize% / %FsName% / %UsbSerial%)
SetDeviceDesc=2

DismountOnSleep=1
FightU3Bug=1
OptimizeUsbDrivesForSpeed=0
UsbWriteCacheEnable=0

AutoRunInf=7
AutoRunInfIcon=7
AutoRunInfLabel=7
AutorunInfRestricted=1
AutoRunKey=SecretKey
AutoRunOnLogon=1
;Delay=2000
LogFile="%TEMP%\USBDLM.log"
LogLevel=3
WriteDebugInfo=0
WriteLogFile=0

[b][balloonTips][/b]
Enabled=1
Timeout=6000
RoundSize=1
ShowSize=1
ShowTrueCrypt=1
SuppressWindowsBalloons=1

Text_drives=drives
Text_partitions=partitions
Text_media=media
Text_cddvd=CD/DVD
Text_mounted_to=Connected to
Text_and=and

[b][OnBalloonClick][/b]
Open=%SystemRoot%\Explorer.exe %root%
OpenStyle=max

[b][OnBalloonRClick][/b]
Open=%SystemRoot%\Explorer.exe %root%
OpenStyle=max


[b][DriveLetters][/b]
Letters=F,G,H,I,J,O,B

[b][DriveLetters10][/b]
DeviceType=U3
DriveType=CDROM
Letter=-

[b][DriveLetters20][/b]
DeviceID1=USBSTOR\CDROM&VEN_WD&PROD_VIRTUAL_CD_070A
DeviceID2=USBSTOR\OTHER&VEN_WD&PROD_SES_DEVICE
Letter=-

[b][DriveLetters30][/b]
BusType=USB
DriveType=REMOVABLE
Letter=-
MaxVolumeSize=15MB

[b][Driveletters40][/b]
DeviceType=BitLocker
Letter=-

[b][DriveLetters50][/b]
DeviceType1=TrueCrypt
DeviceType2=ReadSharingViolation
Letter=-

[b][NetworkLetters][/b]
Letters=K,L,M,N,P,Q,R,S,T,V,W,X
; Drive letters that shouldn't be used for new local drives (i.e. network and subst drives)


[b][Explorer10][/b]
BusType=USB
DefaultLabel=%FriendlyName%
VolumeLabel=-


[b][OnArrival][/b]
Open=%SystemRoot%\Explorer.exe %root%
OpenStyle=max

[b][OnArrival30][/b]
DeviceType=TrueCrypt
Open="%ProgramFiles%\TrueCrypt\TrueCrypt.exe" /q background /cache n /history n /mountoption removable /mountoption timestamp /auto /volume %PartitionName%

[b][OnArrival35][/b]
DeviceType=TrueCryptVolume
Open=%SystemRoot%\Explorer.exe %root%
OpenStyle=max

[b][OnArrival40][/b]
FileExists=%drive%\Encrypted\Encrypted.tc
Open="%ProgramFiles%\TrueCrypt\TrueCrypt.exe" /q background /cache n /history n /mountoption removable /mountoption timestamp /auto /volume "%drive%\Encrypted\Encrypted.tc"

[Scouser1946]

Many thanks for that, I have created msi's to distribute TrueCrypt and USBDLM so we will try the ini out during the course of the day once we have got the variables sorted out and the most effective locations for the various components finalised - will certainly let you know how it goes or if we have any questions.

[Scouser1946]

Ended up creating one msi to install TrueCrypt, one to install USBDLM and a final one to copy the ini file into the USBDLM folder in C:\Program Files - whole thing seems to work fine - hard to be sure untill the install is site wide, which will be done during the Summer hols - once again many thanks to Arthur.