Is it possible to make truecrypt 100% portable by using vmware thinapp?

Question

truecrypt and other OTFE cryptosystems require an extremely low level device driver to be running in the background for encryption/decryption operations.for this reason, one needs admin rights(atleast once i.e. the first time one wants to run truecrypt).

i was wondering if its possible to use vmware thinapp to truly portabilize truecrypt.vmware thinapp virtualises the filesystem and registry(but i dont think it can virtualize a kernel level device driver)

is it possible by some other virtualization product in the citrix xenapp family or the microsoft virtualization software family or by any other vendor offering virtualization solutions for enterprise-level-server-based-computing?

is what am trying to do somehow possible?

EDIT:i forgot to mention that plausible deniability is the major requirement in my case...also,i might have fallen into xy problem trap: https://meta.stackexchange.com/questions/66377/what-is-the-xy-problem

my original requirement is: OTFE encryption+plausible deniability+no admin privs

Answer 1

I do not think it is possible to do this from inside the windows enviorment, however if you are able to boot to a USB drive or a boot CD you may be able to use something like true crypt talks about in their FAQ and then create a hidden partition in your true crypt container.

I live in a country that violates basic human rights of its people. Is it possible to use TrueCrypt without leaving any 'traces' on unencrypted Windows?

Yes. This can be achieved by running TrueCrypt in portable mode under BartPE or in a similar environment. BartPE stands for "Bart's Preinstalled Environment", which is essentially the Windows operating system prepared in a way that it can be entirely stored on and booted from a CD/DVD (registry, temporary files, etc., are stored in RAM – hard drive is not used at all and does not even have to be present). The freeware Bart's PE Builder can transform a Windows XP installation CD into a BartPE CD. Note that you do not even need any special TrueCrypt plug-in for BartPE. Follow these steps:

• Create a BartPE CD and boot it. (Note: You must perform each of the following steps from within BartPE.

• Download the TrueCrypt self-extracting package to the RAM disk (which BartPE automatically creates).

Note: If the adversary can intercept data you send or receive over the Internet and you need to prevent the adversary from knowing you downloaded TrueCrypt, consider downloading it via I2P, Tor, or a similar anonymizing network.

• Verify the digital signatures of the downloaded file (see this section of the documentation for more information).

• Run the downloaded file, and select Extract (instead of Install) on the second page of the TrueCrypt Setup wizard. Extract the contents to the RAM disk.

• Run the file TrueCrypt.exe from the RAM disk.

Note: You may also want to consider creating a hidden operating system (see the section Hidden Operating System in the documentation). See also the chapter Plausible Deniability.