Obviously, in case of full disk encryption, the bootloader needs to be able to do decryption. If not, the disk would be unbootable.
Sure, the text now trivially identifies the disk as 'truecrypt', but even without that text in, it would not be hard to detect a specific bootloader with signatures...
If one wants deniable encryption you need to use something else than full disk encryption, such as steganography or hidden volumes.
It is a backdoor. Knowing you use disk encryption is not the same amount of infos as knowing that you use FalseCrypt. Read this: http://www.schneier.com/essay-331.html.
7 comments
[ 4.1 ms ] story [ 24.5 ms ] threadObviously, in case of full disk encryption, the bootloader needs to be able to do decryption. If not, the disk would be unbootable.
Sure, the text now trivially identifies the disk as 'truecrypt', but even without that text in, it would not be hard to detect a specific bootloader with signatures...
If one wants deniable encryption you need to use something else than full disk encryption, such as steganography or hidden volumes.
You have no idea. Your pants.