Questions -> FAQ -> extract the hashes from TrueCrypt volumes

[kiara]

Hello

i want to extract the hashes from TrueCrypt USB-volumes and in the FAQ is written:

3.2. in case of a physical disk you need to copy the last 512 bytes of the *first logical volume*.

FAQ

And i found:

....or, and this is what you acctually want to do, just dd the first 512 bytes of the encrypted partition to a seperate file.....

TrueCrypted non-system drives

What is now correct? The first or the last 512 bytes?

The USB-Stick has no hidden partition. True Crypt 7.0a.

Thank you
Magier

look for one of my post i joined a link that perhaps will guide u on how to do so