Contents
Where are the keyfiles stored in TrueCrypt?
TrueCrypt can directly use keyfiles stored on a security token or smart card that complies with the PKCS #11 (2.0 or later) standard and that allows the user to store a file (data object) on the token/card. To use such files as TrueCrypt keyfiles, click Add Token Files (in the keyfile dialog window).
How to set default password path in TrueCrypt?
This function uses the TrueCrypt Random Number Generator. Note that the resulting file size is always 64 bytes (i.e., 512 bits), which is also the maximum possible TrueCrypt password length. Use this function to set default keyfiles and/or default keyfile search paths.
Do you need PKCS # 11 for TrueCrypt?
In order to allow TrueCrypt to access a security token or smart card, you need to install a PKCS #11 (2.0 or later) software library for the token or smart card first. Such a library may be supplied with the device or it may be available for download from the website of the vendor or other third parties.
How is access to a keyfile protected on a smart card?
Access to a keyfile stored on a security token or smart card is typically protected by PIN codes, which can be entered either using a hardware PIN pad or via the TrueCrypt GUI. It can also be protected by other means, such as fingerprint readers.
How to re-encrypt a volume with no password?
Drag the corresponding file/folder icons to the keyfile dialog window or to the password entry dialog. This function allows you to re-encrypt a volume header with a header encryption key derived from any number of keyfiles (with or without a password), or no keyfiles at all.
Can a keyfile be used for system encryption?
Note: Keyfiles are currently not supported for system encryption. WARNING: If you lose a keyfile or if any bit of its first 1024 kilobytes changes, it will be impossible to mount volumes that use the keyfile!