GNU GRUB - Bugs: bug #33229, Truecrypt System Volume Header...
You are not allowed to post comments on this tracker with your current authentication level.
bug #33229: Truecrypt System Volume Header gets overwritten
Submitter: | Patrick <p55> | ||
Submitted: | Wed 04 May 2011 04:13:34 PM UTC | ||
Category: | Disk & Partition | Severity: | Major |
Priority: | 5 - Normal | Item Group: | Action Request |
Status: | None | Privacy: | Public |
Assigned to: | None | Originator Name: | Patrick55 |
Open/Closed: | Open | Release: | other |
Release: | Reproducibility: | Every Time | |
Planned Release: | 2.03+ |
Jump to the original submission
Sun 03 Nov 2013 02:28:45 AM UTC, comment #9: |
Vladimir Serbinenko <phcoder>![]() |
Wed 11 May 2011 03:26:02 PM UTC, comment #8: Postponing until after 1.99 since (a) patch is for outdated version (b) (most important) changes to this code are dangerous and error-prone. |
Vladimir Serbinenko <phcoder>![]() |
Wed 04 May 2011 08:47:32 PM UTC, comment #7: @Vladimir
|
Patrick <p55> |
Wed 04 May 2011 08:36:05 PM UTC, comment #6: Patch tested, works fine for me.
|
Patrick <p55> |
Wed 04 May 2011 07:15:56 PM UTC, comment #5: Thanks for the reply Vladimir.
|
Patrick <p55> |
Wed 04 May 2011 06:00:49 PM UTC, comment #4: if truecrypt bootloader is in MBR then the user explicitely requested us to replace it. So such check is redundant. |
Vladimir Serbinenko <phcoder>![]() |
Wed 04 May 2011 04:54:08 PM UTC, comment #3: I didn't find a solution yet. The existence of the truecrypt header would be very probably if the truecrypt bootloader was installed in the mbr. This would be easy to detect... I think this would make sense to check for it's signature in the mbr (in an area not used by grub, right in the first few bytes, there is the string "TrueCrypt"). I'm going to try it that way. |
Patrick <p55> |
Wed 04 May 2011 04:29:45 PM UTC, comment #2: I consider this a bug in truecrypt. mbr gap is for usage exclusively by bootloader, not for storing keys. (Having TrueCrypt bootloader there is another story). Also the sector 62 is pretty loved by boot viruses and some malwarelike DRMware (e.g. FlexLM). MBR gap isn't for valuable data but only for system code.
|
Vladimir Serbinenko <phcoder>![]() |
Wed 04 May 2011 04:20:42 PM UTC, comment #1: Oh. :-) 5 minutes after reporting I realize that the infrastructure is even already there. Impressive. Sadly the truecrypt header has no identifyable signature. It's 512 bytes of random data. (The first 64 bytes are random salt and the rest is encrypted with a key derived from that salt and a password the user is asked to enter...)
|
Patrick <p55> |
Wed 04 May 2011 04:13:34 PM UTC, original submission:
Truecrypt System Volume Header gets overwritten when you install grub on the master boot record of a hard disk with windows 7 installed and truecrypt full system disk encryption set up.
|
Patrick <p55> |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Going through this, this patch probably doesn't work for following reason:
When you install GRUBfor the first time it works since it correctly detects the truecrypt loader, however on second install there is no truecrypt loader to detect, so volume header gets nuked.