For TrueCrypt Users.

Page 1 of 3 123 LastLast

    For TrueCrypt Users.


    Posted: 28 May 2014
    If anyone is trying to contact TrueCrypt and wondering why there is no response or you are getting a re-direct to the TrueCrypt| SourceForge repository when trying to visit their site:

    WARNING: Using TrueCrypt is not secure as it may contain unfixed security issues

    This page exists only to help migrate existing data encrypted by TrueCrypt.

    TrueCrypt| SourceForge repository
    Whither TrueCrypt?
    Posted on May 28, 2014 by Steve Gibson

    My guess is that the TrueCrypt self-takedown
    is going to turn out to be legitimate.

    We know NOTHING about the developers behind TrueCrypt.

    Research Professor Matthew Green, Johns Hopkins Cryptographer who recently helped to launch the TrueCrypt Audit, is currently as clueless as anyone. But his recent tweets indicate that he has come to the same conclusion that I have:......

    More: Whither TrueCrypt? | Steve (GRC) Gibson's Blog
    Risk Assessment/Security & Hacktivism

    “TrueCrypt is not secure,” official SourceForge page abruptly warns
    :
    Support for decade-old crypto program pulled, touching off Internet firestorm.

    May 28 2014, 4:48pm EST

    One of the official webpages for the widely used TrueCrypt encryption program says that development has abruptly ended and warns users of the decade-old tool that it isn't safe to use.

    TrueCrypt is not secure, official SourceForge page abruptly warns | Ars Technica
    TrueCrypt, the popular open-source encryption program, on Wednesday unexpectedly recommended that users drop its product and shift to Microsoft's Bitlocker.

    TrueCrypt now encouraging users to use Microsoft's Bitlocker | PCWorld
    Anak's Avatar Posted By: Anak
    28 May 2014



  1. Posts : 4,776
    Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
       #1

    Extracting Truecrypt passwords


    I wonder if they're worried about methods like these:

    Forensic tool to decrypt TrueCrypt, Bitlocker and PGP containers and disks released | gHacks Technology News

    I've known about those issues for a long time so on my machine hibernation is disabled, page file is cleared each shutdown and memory dumps are deleted and overwritten. Truecrypt is set to never cache passwords.

    Or are they suggesting a built in backdoor?

    I don't think that I'd trust Bitlocker as an alternative unless it could be 100% guaranteed that there are no backdoors!

    Now I'm left wondering what encryption method to use for sensitive personal files.
      My Computer


  2. Posts : 3
    Windows 7 64 bit
       #2

    I'm sticking with 7.1a for the time being.

    Now I start my search for a replacement product.
      My Computer


  3. Posts : 6
    Windows 7 Home Premium x64
       #3

    The fact that the web page is telling people to use BitLocker (BitLocker!!!) of all things is a very clear sign that one of two things happened:

    1.) They were hacked and somehow lost control of absolutely all their data, keys, certificates, etc. The hackers are doing it for the lulz of TrueCrypt recommending BitLocker, for all intents and purposes their "opposite."

    2.) The US government made an ultimatum to give them a backdoor. Instead they shut down and by recommending BitLocker they are letting everyone who is familiar with TrueCrypt and BitLocer know that something really bizarre just happened and to make our own conclusions. They can't explain what happened because they have been told they would go to prison, as we learned from Lavabit.

    It's inconceivable that they just quit the project out of the blue and recommended BitLocker without any logical reason or explanation.

    Try to find a cached version of www.truecrypt.org. I sure can't find one. Getting errors on the Google cached version and Archive.org. I don't claim that I use those tools often, but I've never seen errors like that for heavily trafficked web sites.
      My Computer


  4. Posts : 24,479
    Windows 7 Ultimate X64 SP1
       #4

    It sounds like a Homeland "Security" gambit to further the lack or privacy to individuals in the name of anti-whatever plans.

    I suppose Bit Locker could be used, if I remember it takes a piece of hardware, Trusted Platform Module (TPM) to work.
      My Computer


  5. Posts : 757
    Win10 Pro 64-bit
       #5

    essaytee said:
    I'm sticking with 7.1a for the time being.

    Now I start my search for a replacement product.
    I agree. I've used TC since ±2008 and I have trusted it. But if it's been compromised, that's an extremely disturbing development. I am not happy. BitLocker is being touted as an alternative, but I strongly suspect Microsoft-U.S. Government backdoor, behind-the-scenes collaboration. EDIT: Besides, BitLocker is only available for Ultimate and Enterprise. That leaves us Professional and Home users out in the cold.
    Last edited by OvenMaster; 29 May 2014 at 22:00.
      My Computer


  6. Posts : 6
    Windows 7 Home Premium x64
       #6

    Fortunately there doesn't seem to be any reason to believe that any 7.1a exe installed weeks or months ago would have anything fishy going on with it, and the crypto audit report just concluded that it has no critical flaws and no backdoor. Unfortunately they didn't put an md5 of the .exes they analyzed (only for the source code), so it's hard to know if a copy downloaded today is the same as the ones audited. Hopefully some "known good" copies will be mirrored. The scrubbing of truecrypt.org from the main website caches is creepy (if ml that is in fact what happened). The site had excellent tutorials and documentation - who knows if anyone bothered to save a copy of the site.
      My Computer


  7. Posts : 19,384
    Windows 10 Pro x64 ; Xubuntu x64
       #7

    How to securely download (and check) Truecrypt 7.1a:
    akselvoll.net: How to securely download TrueCrypt 7.1a

    For those of you that still wish to encrypt data containers using it:
    TRUECRYPT - Encrypt Data Folders
      My Computer


  8. Posts : 24,479
    Windows 7 Ultimate X64 SP1
       #8

    Colin the link in your tut under Installation seems to be dead. I tried it a few times and get a "This Page Cannot be displayed..." error.
      My Computer


  9. Posts : 19,384
    Windows 10 Pro x64 ; Xubuntu x64
       #9

    Britton30 said:
    Colin the link in your tut under Installation seems to be dead. I tried it a few times and get a "This Page Cannot be displayed..." error.
    My mistake, I mistyped the location. Fixed.
      My Computer


 
Page 1 of 3 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 20:38.
Find Us