--- truecrypt/linux/cli/man/truecrypt.1 2018/04/24 16:44:07 1.1.1.2 +++ truecrypt/linux/cli/man/truecrypt.1 2018/04/24 16:45:04 1.1.1.3 @@ -1,5 +1,5 @@ .\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.35. -.TH TRUECRYPT "1" "November 2005" "truecrypt 4.1" "User Commands" +.TH TRUECRYPT "1" "April 2006" "truecrypt 4.2" "User Commands" .SH NAME truecrypt - manage TrueCrypt volumes .SH SYNOPSIS @@ -7,9 +7,21 @@ truecrypt - manage TrueCrypt volumes [\fIOPTIONS\fR] \fIVOLUME_PATH \fR[\fIMOUNT_DIRECTORY\fR] .br .B truecrypt +[\fIOPTIONS\fR] \fI-c | --create | -C | --change \fR[\fIVOLUME_PATH\fR] +.br +.B truecrypt [\fIOPTIONS\fR] \fI-d | --dismount | -l | --list \fR[\fIMAPPED_VOLUME\fR] .br .B truecrypt +[\fIOPTIONS\fR] \fI--backup-headers | --restore-header FILE \fR[\fIVOLUME\fR] +.br +.B truecrypt +[\fIOPTIONS\fR] \fI--properties \fR[\fIVOLUME_PATH\fR] +.br +.B truecrypt +\fI--keyfile-create FILE\fR +.br +.B truecrypt \fI-h | --help | --test | -V | --version\fR .SH DESCRIPTION Manages encrypted TrueCrypt volumes, which can be mapped as virtual block @@ -22,8 +34,41 @@ VOLUME_PATH [MOUNT_DIRECTORY] .IP Open a TrueCrypt volume specified by VOLUME_PATH and map it as a block device /dev/mapper/truecryptN. N is the first available device number if not -otherwise specified with \fB\-\-device\-number\fR. The filesystem of the mapped volume -is mounted at MOUNT_DIRECTORY if specified. +otherwise specified with \fB\-N\fR. To map a hidden volume, specify its password +and/or keyfiles (the outer volume cannot be mapped at the same time). +Filesystem of the mapped volume is mounted at MOUNT_DIRECTORY if specified. +See also options \fB\-\-display\-password\fR, \fB\-\-filesystem\fR, \fB\-k\fR, \fB\-M\fR, \fB\-p\fR, \fB\-P\fR, +\fB\-\-password\-tries\fR, \fB\-r\fR, \fB\-u\fR, \fB\-\-update\-time\fR. +.PP +\fB\-\-backup\-headers\fR BACKUP_FILE [VOLUME_PATH] +.IP +Backup headers of a volume specified by VOLUME_PATH to a file BACKUP_FILE. +Volume path is requested from user if not specified on command line. Both +normal/outer and hidden volume headers are stored in the backup file even +if there is no hidden volume within the volume (to preserve plausible +deniability). When restoring the volume header, it is possible to select +which header is to be restored. Note that this command drops effective user +ID. See also \fB\-\-restore\-header\fR. +.PP +\fB\-c\fR, \fB\-\-create\fR [VOLUME_PATH] +.IP +Create a new volume. Most options are requested from user if not specified +on command line. Hidden volume can be created only in an existing file or +device. Size of the hidden volume should not exceed the free space of the +filesystem on the outer volume. Hidden volume protection (see option \fB\-P\fR) +should be used to update the outer volume contents after the hidden volume +is created. Note that this command drops effective user ID. +See also options \fB\-\-cluster\fR, \fB\-\-disable\-progress\fR, \fB\-\-display\-keys\fR, +\fB\-\-encryption\fR, \fB\-k\fR, \fB\-\-filesystem\fR, \fB\-\-hash\fR, \fB\-p\fR, \fB\-\-quick\fR, \fB\-\-size\fR, \fB\-\-type\fR. Note +that passing some of the options may affect plausible deniability. See option +\fB\-p\fR for more information. +.PP +\fB\-C\fR, \fB\-\-change\fR [VOLUME_PATH] +.IP +Change a password and/or keyfile(s) of a volume. Volume path and passwords are +requested from user if not specified on command line. PKCS\-5 PRF HMAC hash +algorithm can be changed with option \fB\-\-hash\fR. See also options \fB\-k\fR, +\fB\-\-keyfile\-add\fR, \fB\-p\fR, \fB\-v\fR. .PP \fB\-d\fR, \fB\-\-dismount\fR [MAPPED_VOLUME] .IP @@ -31,6 +76,10 @@ Dismount and unmap mapped volumes. If MA volumes are dismounted and unmapped. See below for a description of MAPPED_VOLUME. .PP +\fB\-h\fR, \fB\-\-help\fR +.IP +Display help information. +.PP \fB\-l\fR, \fB\-\-list\fR [MAPPED_VOLUME] .IP Display a list of mapped volumes. If MAPPED_VOLUME is not specified, all @@ -38,6 +87,31 @@ volumes are listed. By default, the list device name pairs. A more detailed list can be enabled by verbose output option (\fB\-v\fR). See below for a description of MAPPED_VOLUME. .PP +\fB\-\-keyfile\-create\fR FILE +.IP +Create a new keyfile using the random number generator. FILE argument specifies +the output file. Note that this command drops effective user ID. +.PP +\fB\-\-properties\fR [VOLUME_PATH] +.IP +Display properties of a volume specified by VOLUME_PATH. +.PP +\fB\-\-restore\-header\fR BACKUP_FILE [VOLUME_PATH] +.IP +Restore header of a volume specified by VOLUME_PATH from a file BACKUP_FILE. +Volume path is requested from user if not specified on command line. +Type of the restored volume header (normal/hidden) is requested from user if +not specified with \fB\-\-type\fR. Note that this command drops effective user ID. +See also \fB\-\-backup\-headers\fR. +.PP +\fB\-\-test\fR +.IP +Test all internal algorithms used in the process of encryption and decryption. +.PP +\fB\-V\fR, \fB\-\-version\fR +.IP +Display version information. +.PP MAPPED_VOLUME .IP Specifies a mapped or mounted volume. One of the following forms can be used: @@ -50,40 +124,66 @@ Specifies a mapped or mounted volume. On .IP 4) Device name of the mapped volume. .PP -\fB\-\-device\-number\fR N +\fB\-\-cluster\fR SIZE .IP -Use device number N when mapping a volume as a block device -/dev/mapper/truecryptN. Default is the first available device. +Use specified cluster size when creating a new volume. SIZE defines the number +of sectors per cluster. +.PP +\fB\-\-disable\-progress\fR +.IP +Disable display of progress information during creation of a new volume. +.PP +\fB\-\-display\-keys\fR +.IP +Display encryption keys generated during creation of a new volume. .PP \fB\-\-display\-password\fR .IP Display password characters while typing. .PP +\fB\-\-encryption\fR EA +.IP +Use specified encryption algorithm when creating a new volume. +.PP \fB\-\-filesystem\fR TYPE .IP Filesystem type to mount. The TYPE argument is passed to mount(8) command -with option \fB\-t\fR. Default type is 'auto'. +with option \fB\-t\fR. Default type is 'auto'. When creating a new volume, this +option specifies the filesystem to be created on the new volume. .PP -\fB\-h\fR, \fB\-\-help\fR +\fB\-\-hash\fR HASH .IP -Display help information. +Use specified hash algorithm when creating a new volume or changing password +and/or keyfiles. .PP \fB\-k\fR, \fB\-\-keyfile\fR FILE | DIRECTORY .IP -Use specified keyfile to open a volume to be mapped. When a directory is -specified, all files inside it will be used (non\-recursively). Additional -keyfiles can be specified with multiple \fB\-k\fR options. See also option \fB\-K\fR. +Use specified keyfile to open a volume to be mapped (or when changing password +and/or keyfiles). When a directory is specified, all files inside it will be +used (non\-recursively). Additional keyfiles can be specified with multiple \fB\-k\fR +options. See also option \fB\-K\fR. .PP \fB\-K\fR, \fB\-\-keyfile\-protected\fR FILE | DIRECTORY .IP Use specified keyfile to open a hidden volume to be protected. See also options \fB\-k\fR and \fB\-P\fR. .PP -\fB\-\-mount\-options\fR OPTIONS +\fB\-\-keyfile\-add\fR FILE | DIRECTORY +.IP +Add specified keyfile to a volume when changing its password and/or keyfiles. +This option must be also used to keep all previous keyfiles asigned to a +volume. See EXAMPLES for more information. +.PP +\fB\-M\fR, \fB\-\-mount\-options\fR OPTIONS .IP Filesystem mount options. The OPTIONS argument is passed to mount(8) command with option \fB\-o\fR. .PP +\fB\-N\fR, \fB\-\-device\-number\fR N +.IP +Use device number N when mapping a volume as a block device +/dev/mapper/truecryptN. Default is the first available device. +.PP \fB\-p\fR, \fB\-\-password\fR PASSWORD .IP Use specified password to open a volume. Additional passwords can be @@ -102,22 +202,42 @@ Default is to prompt three times. Write\-protect a hidden volume when mapping an outer volume. Before mapping the outer volume, the user will be prompted for a password to open the hidden volume. The size and position of the hidden volume is then determined and the -outer volume is mounted with all sectors belonging to the hidden volume +outer volume is mapped with all sectors belonging to the hidden volume protected against write operations. When a write to the protected area is prevented, the whole volume is switched to read\-only mode. Verbose list command (\fB\-vl\fR) can be used to query the state of the hidden volume protection. Warning message is displayed when a volume switched to read\-only is being dismounted. See also option \fB\-r\fR. .PP +\fB\-\-quick\fR +.IP +Use quick format when creating a new volume. This option can be used only +when creating a device\-hosted volume. Quick format is always used when +creating a hidden volume. +.PP \fB\-r\fR, \fB\-\-read\-only\fR .IP -Map and/or mount a volume as read\-only. Write operations to the volume may not +Map and mount a volume as read\-only. Write operations to the volume may not fail immediately due to the write buffering performed by the system, but the physical write will still be prevented. .PP -\fB\-\-test\fR +\fB\-\-size\fR SIZE .IP -Test all internal algorithms used in the process of encryption and decryption. +Use specified size when creating a new volume. SIZE is defined as number of +bytes or, when a size suffix K/M/G is used, Kilobytes/Megabytes/Gigabytes. +Note that size must be a multiple of 512 bytes. +.PP +\fB\-\-type\fR TYPE +.IP +Use specified volume type when creating a new volume or restoring a volume +header. TYPE can be 'normal' or 'hidden'. +.PP +\fB\-u\fR, \fB\-\-user\-mount\fR +.IP +Set default user and group ID of the filesystem being mounted to the user and +group ID of the parent process. Some filesystems (like FAT) do not support +user permissions and, therefore, it is necessary to supply a default user and +group ID to the system when mounting such filesystems. .PP \fB\-\-update\-time\fR .IP @@ -129,15 +249,17 @@ a volume is unmapped or after a keyfile .IP Enable verbose output. Multiple \fB\-v\fR options can be specified to increase the level of verbosity. -.PP -\fB\-V\fR, \fB\-\-version\fR -.IP -Display version information. .SH EXAMPLES truecrypt /root/volume.tc /mnt/tc .IP -Map a volume /root/volume.tc and mount its filesystem at /mnt/tc. +Map a volume /root/volume.tc and mount its filesystem at directory /mnt/tc. +.PP +truecrypt \fB\-u\fR /dev/hda2 /mnt/tc +.IP +Map a volume /dev/hda2 (first ATA disk, primary partition 2) and mount its +filesystem at /mnt/tc. Default user\-id is set, which is useful when mounting +a filesystem like FAT under a non\-admin user account. .PP truecrypt \fB\-d\fR .IP @@ -155,7 +277,7 @@ truecrypt \fB\-vl\fR .IP Display a detailed list of all mapped volumes. .PP -truecrypt \fB\-\-device\-number\fR=\fI1\fR /dev/hdc1 && mkfs /dev/mapper/truecrypt1 +truecrypt \fB\-N\fR 1 /dev/hdc1 && mkfs /dev/mapper/truecrypt1 .IP Map a volume /dev/hdc1 and create a new filesystem on it. .PP @@ -168,6 +290,31 @@ truecrypt \fB\-p\fR "" \fB\-p\fR "" \fB\ Map outer volume ./volume.tc and protect hidden volume within it. The outer volume is opened with keyfiles ./key1 and ./key2 and the hidden volume with ./key_hidden. Passwords for both volumes are empty. +.PP +truecrypt \fB\-c\fR +.IP +Create a new volume. +.PP +truecrypt \fB\-k\fR keyfile \fB\-\-size\fR 10M \fB\-\-encryption\fR AES \fB\-\-hash\fR SHA\-1 \fB\-c\fR vol.tc +.IP +Create a new volume. Options which are not specified on command line are +requested from the user. +.PP +truecrypt \fB\-\-type\fR normal \fB\-c\fR volume.tc && truecrypt \fB\-\-type\fR hidden \fB\-c\fR volume.tc +.IP +Create a new volume and then create a hidden volume inside it. +.PP +truecrypt \fB\-\-keyfile\-add\fR keyfile \fB\-C\fR volume.tc +.IP +Change password and add a new keyfile to volume. +.PP +truecrypt \fB\-k\fR keyfile \fB\-C\fR volume.tc +.IP +Change password and remove a keyfile from volume. +.PP +truecrypt \fB\-k\fR keyfile \fB\-\-keyfile\-add\fR keyfile \fB\-C\fR volume.tc +.IP +Change password and keep previous keyfile. .SH DIAGNOSTICS Exit status .B 0 @@ -179,7 +326,7 @@ is returned. Kernel module reports error .SH "REPORTING BUGS" Report bugs at . .SH COPYRIGHT -Copyright \(co 2004-2005 TrueCrypt Foundation. All Rights Reserved. +Copyright \(co 2004-2006 TrueCrypt Foundation. All Rights Reserved. .br Copyright \(co 1998-2000 Paul Le Roux. All Rights Reserved. .br