Hiding keepass databases

Hiding keepass databases and truecrypt containers

see <https://security.stackexchange.com/questions/48909/hiding-keepass-databases-and-truecrypt-containers>

Change the extension of a Keepass database is possible , Keepass is still able to open its db
This an not effective way for hiding the databases.

Keepass has a specific file structure.
Simply doing a binary seatrch for it’s file-header might already void your efforts.

Is there any method to temporarily change/replace the header of Keepass files?

In theory yes, but it has it’s limits since you can’t replace the whole header without losing valuable DB info.

The “safe” header parts (which are also those that are quickly detectable) could manually be replaced using a hex-editor, or you could create a program or script that does the job automatically for you.

You’ld have to replace the “safe” header bytes of the DB-file with random bytes, and later replace those random bytes again with the expected header bytes so Keepass can read the database. So yes, it would be possible but you need to identify the whole header structure for that first.

2) In theory, yes. A Truecrypt container, considered in the abstract, is indistinguishable from random noise. In the absence of something pointing to the file and saying “this is a Truecrypt container” (eg. a recently-used files list), an attacker cannot prove that a given file is a Truecrypt container.

In practice, no. Normal people do not carry around large blocks of random data on their computers, so a large file that is statistically indistinguishable from randomness and does not have is almost certainly an encrypted file. If someone has a large random file and the Truecrypt software on their computer, it’s a good bet that the file is a Truecrypt volume.

1) I’m not familiar with OpenPuff, but in general, I distrust steganograpy. The data you’re trying to hide rarely has the same statistical properties as the data you’re hiding it in, eg. the well-known “hide the data in the low-order bits of an image” trick fails if the image has large areas of solid color (such as a cartoon) or the low bits are biased in non-random ways (as is common with digital cameras). The best place to hide a needle is not in a haystack, but in a pile of other needles

One possible way of hiding a file is saving it, where none will find it.

May be on a flashdrive hidden in your flat or on some Server on the Internet (an anonymous Webmail maybe). Make sure to securely delete it, if you need in on your hard drive temporarily.

The fact that it’s hard to hide the data is the reason why “hidden volumes” where invented. There is a Password Manager in development, that can hide stuff in your encrypted password-file.