Privacy Wiki

Steve Kinney admin at pilobilus.net
Fri Nov 20 09:06:16 PST 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/18/2015 04:48 PM, Tomas Overdrive Petru wrote:
> Dear mailing-list,
> 
> I have found just recently that I'm not aware of actual
> situation of full HD encryption and container encryption after
> extinction of TrueCrypt.

Truecrypt is not extinct.  Before its developers decided to stop
working on it, Truecrypt was considered adequately secure for
practical applications.  After its developers decided to stop
working on it, Truecrypt is considered adequately secure for
practical applications.

Nothing changed, except that if you don't have a copy of Truecrypt
you will have to find one can be verified as authentic via digital
signatures made from known good packages.  This is not hard, so if
you can not do it you should not trust /any/ cryptographic tool
until you have learned more about network security.

A recent in-depth security audit of Truecrpt found room for
improvement but no "show stoppers."  A more recent report asserts
that Truecrypt is "insecure" on Microsoft operating systems.
Examination of that claim reveals that the Microsoft operating
systems themselves, not Truecrypt, contain the security flaw in
question.  Where "security" is a major concern the use of
Microsoft products is ruled out, due to the availability of much
more secure alternatives; so this particular claim is not relevant.

Truecrypt will eventually become obsolete due to changes in the
operating systems is can be used with, as its predecessor
Scramdisk eventually became obsolete after development stopped.
It makes sense for Truecrypt users to start looking at alternative
tools now, and plan for a smooth transition away from Truecrypt at
their convenience.  Other posts in this thread mention several
candidates.

But the sky has not fallen and there is no particular reason to be
in a big hurry to dump Truecrypt right now.

:o)



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=Jl8a
-----END PGP SIGNATURE-----



More information about the cypherpunks mailing list