Truecrypt compromised?
#31
Suspended
Join Date: Jul 2001
Location: Watchlisted by the prejudiced, en route to purgatory
Programs: Just Say No to Fleecing and Blacklisting
Posts: 102,077
https://opencryptoaudit.org/reports/...OCAP_final.pdf
You can try to make of that what you can.
Nowadays it seems that almost no one knows for sure what is not compromised.
One thing that we do know for sure is that encryption doesn't do a whole lot if you have weak passwords. For an idea on how to have strong passwords that are practical to remember without physical record of the password, look at the following:
https://firstlook.org/theintercept/2...rs-cant-guess/
You can try to make of that what you can.
Nowadays it seems that almost no one knows for sure what is not compromised.
One thing that we do know for sure is that encryption doesn't do a whole lot if you have weak passwords. For an idea on how to have strong passwords that are practical to remember without physical record of the password, look at the following:
https://firstlook.org/theintercept/2...rs-cant-guess/
Last edited by GUWonder; Apr 4, 2015 at 3:59 am
#32
Suspended
Join Date: Jul 2001
Location: Watchlisted by the prejudiced, en route to purgatory
Programs: Just Say No to Fleecing and Blacklisting
Posts: 102,077
#37
Suspended
Join Date: Jul 2001
Location: Watchlisted by the prejudiced, en route to purgatory
Programs: Just Say No to Fleecing and Blacklisting
Posts: 102,077
You're right:
http://www.newyorker.com/news/news-d...ncryption-tool
And the above article has some other interesting stuff too.
http://www.newyorker.com/news/news-d...ncryption-tool
And the above article has some other interesting stuff too.
#38
Suspended
Join Date: Sep 2013
Posts: 817
#39
Suspended
Join Date: Jul 2001
Location: Watchlisted by the prejudiced, en route to purgatory
Programs: Just Say No to Fleecing and Blacklisting
Posts: 102,077
http://www.zdnet.com/article/veracry...ritical-flaws/
Note that some flaws in TrueCrypt were actually fixed with/by/for VeraCrypt.
#40
Join Date: Aug 2009
Location: DCA
Programs: DL Diamond, HH Diamond, Avis First
Posts: 555
VeraCrypt has some critical vulnerabilities. It will be interesting to see how quickly all of those identified (at this point) get fixed.
http://www.zdnet.com/article/veracry...ritical-flaws/
Note that some flaws in TrueCrypt were actually fixed with/by/for VeraCrypt.
http://www.zdnet.com/article/veracry...ritical-flaws/
Note that some flaws in TrueCrypt were actually fixed with/by/for VeraCrypt.
If anything, the fact that VeraCrypt is being audited is a good thing. TrueCrypt went years without an audit. Having critical crypto projects regularly audited is the only way to have any confidence in its security.







