1

Context

I want to encrypt my entire OS according to this tutorial, which involves a decoy OS and a hidden one.

The problem I have with this setup is that the bootloader could be compromised with a password stealing one.

Question

Does anyone of you know;

  • How to remove any bootloader on the disk.

  • How to place the TrueCrypt one on an optical disk, so that it is harder to compromise.

1 Answer 1

1

I don't put the bootloader on optical media, instead I checksum the bootloader from optical media and chainload it to verify it is not tampered with. Boot loader copy/removal can be done with dd from a linux live distro.

MagicISO is a gui that support copy/backup of boot sectors and burning to optical media, but I haven't tried it with the truecrypt loader

4
  • Thank you for the reply and the suggestion of MagicISO. But if I were to remove the boot sectors of the disk what should I use?
    – Duijf
    Dec 4, 2010 at 15:59
  • Repair to a standard 7 bootsector, install truecrypt bootsector, copy to iso/usb/sdcard, then remove...i think there's a trucrypt bootcd floating around Dec 4, 2010 at 16:13
  • i couldn't find it atm, but i'm a linux freak so it isn't horribly pertinent to me. I do manual mounting of crypted disks at offsets inside ext2 volumes to bypass the "identifiable header" problem Dec 4, 2010 at 16:19
  • Well thank you very much for your troubles. I'll look into your suggestions.
    – Duijf
    Dec 4, 2010 at 18:39

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .