Silk Road forums

EDIT:
I did some more thinking and if I'm going to go through all of the trouble of modifying the header, I should really just go for the master key. If I copy the master key data, store it somewhere else and then overwrite the data on the TC container with random data, the TC container wil be unopenable. Only a full crack of the encryption scheme would do the trick.

I decided to go for the first 131072bytes of the TrueCrypt container (the whole header). I have successfully cut the header off and pasted it back on. There was no loss of data. When the header was cut off, TC could not decrypt the container.

Additionally, I tried creating two containers with different passwords and put container1's header on to container2 and vice versa. Container1's password then was accepted by container2. However, since the data in container2 was encrypted with a different key than that which was included in container1's header, the data was not decrypted and TC returned an error stating that a filesystem had to be specified.

This brought up some interesting ideas.

If no filesystem is specified during the creation of a TC container, the empty space will be filled with random data. To a third party, this random data is indistinguishable from encrypted data.

Let's say we have two TC containers, tcc1 and tcc2.
The passwords and master keys are wholly different from each other.
tcc1 contains encrypted data. It's pw is: USEFUL
tcc2 contains only useless, random data. it's pw is: CRAP
When the pw USEFUL is used on tcc1, the data is decrypted, the filesystem is mounted and the data contained can be used as needed.
When the pw CRAP is used on tcc2, TC tries to decrypt the data, but since there is no filesystem or any usable data, an error returns stating that a filesystem must be specified.

Now if we replace tcc1's header with tcc2's header, tcc1 will now be decrypted with the pw CRAP. TrueCrypt will accept this pw and believe that it is correct, however when the data is decrypted, the master key will be incorrect and so the data will appear to be useless, random data. TC will return an error stating that a filesystem must be specified. We know that there actually is good data stored there, but TC doesn't. It bcomes hidden by attaching the wrong header.

If we do the same thing for tcc2, it will be decrypted using the pw USEFUL. Again, TC will accept the pw and believe it to be correct. Since the data appears to be random (and actually is this time) the same error will return stating that a filesytem must be scpecified.

I see this method as another layer of deniability and/or secrecy.
Say I have some old hdd's laying around. I want to overwrite the old data on them. The data is mainly some freaky porn that I used to be in to but now I'm not and I don't want my wife to see it one day and think that I'm still in to that stuff. So I use TrueCrypt to make the whole drive into a TC volume. When it asks for a password to use, I just mash the keyboard a few times because I don't need to rememebr what I enter. I'm just trying to overwrite old data. So I continue with the wizard and when it asks what filesystem I want, I specify 'None'. Again, I do this because I am just using TC to overwrite old data. At the end of the process I have a hdd filled with random data and a TC header on the front. If the correct pw was ever somehow enetered, TC would return an error stating that a filesystem must be specified.

Now let's say I take a hdd and use TC to turn the whole thing into an encrypted volume but this time I actually want to store my SR and BTC info on it. I go through the volume creation process, remember the pw I enter and specify a filesystem. Now I have a useable TC volume where I keep my secret data. If I put a different header on there, then it would be impossible to tell whether this drive has real data or if it's just another old hdd that I have laying around.

There are a few other variations on this, but you get the idea.

First off, thanks to all for this thread. I am NewFish here, and a little confused bout pgp. Can someone send me a quick msg and I will respond. Wanted to work it out here b4 I place my first order.
thanks

Someone was jailed in U.K.for 9 months if memory serves, for not revealing their encryption key. There was no "reasonable beyond doubt" and they jailed him on suspicion and not proof. (Glad I don't live U.K..) And as suggested above, corrupt cops (most of them are) will assault a suspect into revealing it. (Which is why everyone hates them so much.)