Skip to contentSkip to conversation

TrueCrypt support ended -- "Not secure"

dm-crypt Robert Nichols 3 participants 5 messages May 28, 2014 – May 29, 2014

lore
Share & tools
lore
#2 lore raw
Quoted 20 lines · Chris Drake

Hi Robert,

That's a hoax - their domain got hijacked.

Kind Regards,
Chris Drake

Thursday, May 29, 2014, 8:49:01 AM, you wrote:

RN> Sourceforge page warns against continued use, and the latest release does not RN> permit creation of new volumes.

RN> http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/

RN> http://truecrypt.sourceforge.net/

Quoted 5 lines

_______________________________________________
dm-crypt mailing list
[email protected]
http://www.saout.de/mailman/listinfo/dm-crypt

It has been reported that the "hacked" release was certified with the official TruCrypt signing key, and compromise of that key would be even more damning. Would someone who had gained access to that key squander that power on a prank?

Signature · 2 lines
Bob Nichols     "NOSPAM" is really part of my email address.
                Do NOT delete it.
#3 lore raw

Hi Robert,

It's not the *original* key apparently, but the new one for the current release. Current rumors are that they're committing suicide for the same reasons as Lavabit - which would explain why they're pushing people over to products with NSA key escrow built in.

Kind Regards,
Chris Drake

Thursday, May 29, 2014, 12:46:19 PM, you wrote:

Quoted 20 lines · Chris Drake
Quoted 20 lines

Hi Robert,

That's a hoax - their domain got hijacked.

Kind Regards,
Chris Drake

Thursday, May 29, 2014, 8:49:01 AM, you wrote:

RN> Sourceforge page warns against continued use, and the latest release does not RN> permit creation of new volumes.

RN> http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/

RN> http://truecrypt.sourceforge.net/

Quoted 5 lines
Quoted 5 lines

_______________________________________________
dm-crypt mailing list
[email protected]
http://www.saout.de/mailman/listinfo/dm-crypt

RN> It has been reported that the "hacked" release was certified with the RN> official TruCrypt signing key, and compromise of that key would be RN> even more damning. Would someone who had gained access to that key RN> squander that power on a prank?

#4 lore raw
In reply to Robert Nichols

Give it at least a few days before jumping to conclusions. There is a number of possibilities for what happened and what is said on the page actually being true is just one of them.

Also note that the claims about valid signatures on the current, crippled binaries are shaky as the keys were apparently changed recently.

Arno

Quoted 15 lines · Robert Nichols

Sourceforge page warns against continued use, and the latest release does not permit creation of new volumes.

http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/

http://truecrypt.sourceforge.net/

Signature · 7 lines
Bob Nichols     "NOSPAM" is really part of my email address.
                Do NOT delete it.

_______________________________________________
dm-crypt mailing list
[email protected]
http://www.saout.de/mailman/listinfo/dm-crypt
Signature · 4 lines
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: [email protected]
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -  Plato