[kwlug-disc] Truecrypt

[Bob Jonkman]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Khalid wrote:
> As for alternatives, seems that LUKS is backward compatible with
TruCrypt.

I don't think so. There's tool called tcplay that provides a
TrueCrypt-like API to an encrypted storage volume that uses LUKS. I'm
not sure if you can substitute it for TrueCrypt, but I don't think
it's a drop-in replacement (ie. if TrueCrypt itself works with LUKS,
or if tcplay  reads TrueCrypt containers or volumes directly).
https://github.com/bwalex/tc-play (via
http://grugq.tumblr.com/post/60464139008/alternative-truecrypt-implementations
)


There's lots of conspiracy tin-foil-hattery at
https://news.ycombinator.com/item?id=7812133 which is a lot of fun to
read, theories ranging from a simple Website hack (unlikely,
considering the provenance of the signing keys) to a revelation that
Edward Snowden is the TrueCrypt author.

But a more reasonable discussion is by Runa Sandvik at
http://www.forbes.com/sites/runasandvik/2014/05/28/encryption-tool-endorsed-by-snowden-abruptly-shuts-down/

- --Bob.



On 14-05-29 11:05 AM, Khalid Baheyeldin wrote:
> Other people are speculating that Hector Monsegur (Sabu), the
> hacker that was freed by the Feds after he cooperated, was a
> contributor to TruCrypt, and that was one obstacle they always
> faced (decrypting encrypted volumes), so there it goes once he was
> out.
> 
> As for alternatives, seems that LUKS is backward compatible with
> TruCrypt.
> 
> https://code.google.com/p/cryptsetup/
> 
> 
> 
> On Thu, May 29, 2014 at 10:20 AM, Khalid Baheyeldin <kb at 2bits.com>
> wrote:
> 
>> Many theories floating around ...
>> 
>> With secret court orders no one can be sure of anything ...
>> 
>> But there are other possibilities.
>> 
>> See the comments here (change to threshold 3 or 4 to limit to the
>> highest rated ones)
>> 
>> http://soylentnews.org/article.pl?sid=14/05/29/0243223
>> 
>> 
>> On Thu, May 29, 2014 at 10:16 AM, Chris Irwin
>> <chris at chrisirwin.ca> wrote:
>> 
>>> I wanted to see what everybody's thoughts are about the
>>> truecrypt "annoucement" yesterday.
>>> 
>>> Quoted from their website:
>>> 
>>>> WARNING: Using TrueCrypt is not secure as it may contain
>>>> unfixed
>>> security issues
>>>> 
>>>> This page exists only to help migrate existing data encrypted
>>>> by
>>> TrueCrypt.
>>>> 
>>>> The development of TrueCrypt was ended in 5/2014 after
>>>> Microsoft
>>> terminated support of Windows XP. Windows 8/7/Vista and later
>>> offer integrated support for encrypted disks and virtual disk
>>> images. Such integrated support is also available on other
>>> platforms (click here for more information). You should migrate
>>> any data encrypted by TrueCrypt to encrypted disks or virtual
>>> disk images supported on your platform.
>>> 
>>> There is discussion on slashdot, hacker news, and many other
>>> sites. So far, there is no consensus on what is going on?
>>> Half-hearted compliance with a US NSL? Dead-man switch
>>> prematurely activating?
>>> 
>>> Does anybody else have thoughts or insights?
>>> 
>>> I'm a dmcrypt user personally, but I know several folks on the
>>> list use truecrypt.
>>> 
>>> -- Chris Irwin <chris at chrisirwin.ca>
>>> 
>>> _______________________________________________ kwlug-disc
>>> mailing list kwlug-disc at kwlug.org 
>>> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>>> 
>>> 
>> 
>> 
>> -- Khalid M. Baheyeldin 2bits.com, Inc. Fast Reliable Drupal 
>> Drupal optimization, development, customization and consulting. 
>> Simplicity is prerequisite for reliability. --  Edsger
>> W.Dijkstra Simplicity is the ultimate sophistication. --
>> Leonardo da Vinci For every complex problem, there is an answer
>> that is clear, simple, and wrong." -- H.L. Mencken
>> 
> 
> 
> 
> 
> 
> _______________________________________________ kwlug-disc mailing
> list kwlug-disc at kwlug.org 
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Ensure confidentiality, authenticity, non-repudiability

iEYEARECAAYFAlOHY3IACgkQuRKJsNLM5erKZgCg37mBIS1hH3iXENU5hLyXJ/8g
RMoAnA0m4xqz+PZhqlNKh1U2moFGKkZn
=22Qu
-----END PGP SIGNATURE-----