TrueCrypt partition or not?

Question

I'm getting a new external HDD and am considering using TrueCrypt to secure it, as I work on many commercial projects and like to have the peace of mind when I travel.

It's a 2TB HDD and I have two options.

1. Create a TrueCrypt volume that nearly fills the drive.
2. Encrypt the entire drive partition.

What are the pros/cons of each? Keep in mind that this is more than a backup drive, it will be used as an extension of existing HD space on my laptop.

Is one method more resilient to corruption than the other? Especially partition encryption, is it likely that the partition could be altered by a computer that didn't have TrueCrypt and didn't "understand" it (if it was inadvertently connected to a different computer)?

How resilient is it to a system crash while writing? NTFS, being a journaling system has fairly good integrity by itself, but how does TrueCrypt's encryption factor in?

Data safety is more important than raw security, but encryption is a must.

Solution 1

If "Data safety is more important", then I would create multiple TC volumes on top of the 2 TB NTFS file system and then only mount what you need when you need it. If one of these files somehow gets corrupted, then you have minimized the damage compared to encrypting the whole drive or creating one large TC file. Plus, it will be easier to make backups.

I have used this method for years for remote backups with both large & small TC volume sizes. I have never experienced any form of file system corruption when using TC.

Solution 2

In your position I would probably go for encrypting the whole partition. Check out my response to Does an external hard drive need to have partitions?

When you plug in a drive that does not contain a reconcilable file system to a new system there is the slim chance that it could be overwritten.. but then again a large encrypted file on the drive could also be deleted.

Comments

[Moab]

NTFS self healing can delete a corrupt file and you will not know it happened util you look for that file, chances are rare, but few know about this enhancement in Windows 7 and NTFS...windows7hacker.com/index.php/2010/07/…

[jhcaiced]

To me, the partition approach appears to be more secure, less risk that the TC file get deleted by accident or a virus, also you can have multiple partitions and have some unencrypted for non sensitive files.

[jhcaiced]

AFAIK, neither Windows or Linux will "format" an unknown partition without your intervention, so it seems unlikely that the partition table gets corrupted.