Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My laptop has a 250GB hard drive, and I currently use it to do a lot. I have Windows 7, Ubuntu 11.10, and BackTrack 5 on it, but I'd like to switch it up and add more security.

What I aim to do is have full disk encryption with TrueCrypt, along with making BackTrack a hidden operating system. Theoretically, the process I see is this: Boot up the laptop, it asks for a password. I can type in the decoy password, then it would forward me to GRUB so I can choose to boot Windows or Ubuntu, then everything acts as normal. When I boot the laptop, I could also put in the hidden OS password, then that would boot up BackTrack. Most guides I've seen basically just do one decoy OS and one hidden OS, so I'm not 100% sure really how to go about it.

Also, whenever I get this up and running, how possible would it be to change around some OS's? For example, if I wanted to replace Ubuntu with something like Arch Linux. Would I be able to do that, or would that break encryption somewhere?

Thank you so much for everthing!

share|improve this question
@SachinShekhar - For my purposes, full disk encryption would suffice well enough. – Chiggins Feb 6 '12 at 16:36
@SachinShekhar If you you use a decent CPU with AES acceleration it is only a minor performance impact, I use it here. – user4711 Feb 21 '12 at 10:00
What prevents the sectors containing the hidden OS from being corrupted by the operation of the "decoy" OS? You can't prevent the OS from allocating disk space during normal operation -- or do you propose to have all filesystems mounted read-only in the decoy? – Fran May 8 '12 at 17:44
@Fran TrueCrypt has an extensive list of security considerations and other precautions to follow so that the integrity of a hidden volume is protected. – Iszi Jul 26 '12 at 16:42
@Sachin Shekhar - Cold boot attacks don't render full disk encryption useless, it only provides a window of attack to a person with physical access while the machine is on, or shortly after it has been turned off. Further, most new processors allow you to store the keys on the processor thus greatly mitigating cold boot attacks. (Search for TRESOR) – davidgo Jun 26 '13 at 7:54

TrueCrypt full-disk encryption currently only works with Windows, so it's not possible as of right now.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .