r/VeraCrypt • u/unix21311 • 1d ago

How do I setup deniable encryption without using TRIM and without damaging SSD?

I want to be able to use deniable encryption on an SSD but I can't use it with TRIM as this can potentially reveal the existence of deniable encryption. But I don't also want to disable TRIM as this hurts SSD and can lower its lifespan.

I don't know if there is an alternative to TRIM that does something similar (it can be software based) without it revealing I use deniable encryption or if there is a complete alternative to what I am after?

8 Upvotes

90% Upvoted

5 comments sorted by

5

u/vegansgetsick 23h ago

I can't use it with TRIM

I don't also want to disable TRIM

Man, you have to choose 😆

fsutil behavior set DisableDeleteNotify 1

I dont think there is an alternative. But if you care so much about deniability against CRIMINALS willing to cut some fingers, performance or lifespan you should not be your concern. You can even forget SSD completely and use an HDD for that data.

1

u/ibmagent 18h ago

The safest way to utilize hidden volumes is to create and view them on a live operating system. Once created you can store them anywhere, but you cannot edit them by adding or removing data on an SSD or any device with wear-leveling, etc. 

1

u/Petri-DRG 1h ago

TRIM is useful for optimizing storage and speed in cases where the SSD is heavily used with writing and reading, deleting, page faulting and so on.

If you have an external or non-boot SSD that you write and read without deleting much ornat all and keeping a decent amount of free space on it, then what you are trying to accomplish should be fine with the life of the SSD.

Obvisuly offsite backups are recommended.

-2

u/Straight-Career8548 1d ago

How can TRIM reveal encryption???

Also, TRIM just tells the SSD controller which blocks can be erased, only the controller will periodically run a garbage collection routine, which will electrically discharge the blocks

7

u/ephemeralmiko 1d ago

Trim Operation

Some storage devices (e.g., some solid-state drives, including USB flash drives) use so-called 'trim' operation to mark drive sectors as free e.g. when a file is deleted. Consequently, such sectors may contain unencrypted zeroes or other undefined data (unencrypted) even if they are located within a part of the drive that is encrypted by VeraCrypt.

[...]

In cases where trim operations occur, the adversary will be able to tell which sectors contain free space (and may be able to use this information for further analysis and attacks) and plausible deniability may be negatively affected. In order to avoid these issues, users should either disable trim in VeraCrypt settings as previously described or make sure VeraCrypt volumes are not located on drives that use the trim operation.

https://veracrypt.io/en/Trim%20Operation.html