I got the same problems: Encrypted dualboot (windows, kubuntu 10.04) ist
not possible (damaged tc loader).

I searched the internet, but there is no workaround.

But there are interesting informations about the truecrypt loader (see
links below): Sector 0 contains truecrypt loader, secotrs 1-62 contain
truecrypt resident boot-time decryptor (two mirrored copies), sectors 63
and 64 contain mirrored truecrypt system volume header. This header is
encrypted and contains keys for system volume decryption.

http://martin.hinner.info/fs/truecrypt/
http://www.wilderssecurity.com/showthread.php?t=274342

So, you need more to backup than the first 512 bytes (as usually
mentioned in public manuals). If I copy back the previously saved
truecrypt.mbr (dd if=/truecrypt.mbr of0=/dev/sda count=1 bs=512), I get
the same error as if I chainload tc-loader with grub2.

May it be that installing grub2 (grub-install /dev/sda) deletes more
than the first 512 bytes only? So that the loader of truecrypt can load
itself (program code) but not the header-files?

To get around this problem, we need to backup the volume header and the
MBR. Then we setup grub2 such that depending on the user selection (Win
oder Kubuntu), it restores the truecrypt volume header, activates that
partition and chainloads the TrueCrypt MBR to continue the boot process
with pre-boot authentication.

-- 
Grub2 doesn't chainload truecrypt loader correctly
https://bugs.launchpad.net/bugs/484102
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to