View previous topic :: View next topic |
Author |
Message |
Punchcutter Guru
Joined: 11 Feb 2007 Posts: 354
|
Posted: Wed Dec 07, 2016 3:03 am Post subject: Is Truecrypt gone now? |
|
|
I could have sworn that I found Truecrypt still in the Portage main tree recently, but now it seems to be gone. Has it finally been removed? |
|
Back to top |
|
|
charles17 Advocate
Joined: 02 Mar 2008 Posts: 3664
|
Posted: Wed Dec 07, 2016 5:10 am Post subject: |
|
|
But still referenced in Gentoo handbook. |
|
Back to top |
|
|
Maffblaster Developer
Joined: 01 May 2007 Posts: 70 Location: Spokane, Washington, USA
|
|
Back to top |
|
|
Maffblaster Developer
Joined: 01 May 2007 Posts: 70 Location: Spokane, Washington, USA
|
|
Back to top |
|
|
Punchcutter Guru
Joined: 11 Feb 2007 Posts: 354
|
Posted: Sun Jan 01, 2017 6:07 pm Post subject: |
|
|
Maffblaster wrote: | I would be remissed if I avoided mentioning that Truecrypt lives on in Veracrypt. |
Is it safe? |
|
Back to top |
|
|
khayyam Watchman
Joined: 07 Jun 2012 Posts: 6227 Location: Room 101
|
Posted: Sun Jan 01, 2017 8:37 pm Post subject: |
|
|
Maffblaster wrote: | I would be remissed if I avoided mentioning that Truecrypt lives on in Veracrypt. |
Maffblaster, Punchcutter ... it's probably also worth mentioning app-crypt/tc-play, "a free, pretty much fully featured and stable TrueCrypt implementation".
best ... khay |
|
Back to top |
|
|
Punchcutter Guru
Joined: 11 Feb 2007 Posts: 354
|
Posted: Mon Jan 02, 2017 2:24 am Post subject: |
|
|
Does anyone have any info or thoughts, even 2nd hand, about the trustworthiness of these projects? Any hints about whether one might be an NSA honeypot or something? If I'm gonna "invest" in one, I'd like to pick the best (ie most secure) one from the start.
How about Ciphershed? I just went to look up their site, and apparently it has been down for several days at this point. |
|
Back to top |
|
|
khayyam Watchman
Joined: 07 Jun 2012 Posts: 6227 Location: Room 101
|
Posted: Mon Jan 02, 2017 4:01 am Post subject: |
|
|
Punchcutter wrote: | Does anyone have any info or thoughts, even 2nd hand, about the trustworthiness of these projects? |
Punchcutter ... well, tc-play is written by Alex Hornung a DragonflyBSD developer. The README states:
README.md wrote: | Since tcplay uses dm-crypt (or dm_target_crypt on DragonFly) it makes full use of any available hardware encryption/decryption support once the volume has been mapped. |
... and so it's using dm-crypt, the linux kernel's CRYPTO_*, and openssl, or libressl, or gcrypt, for the hashing (pbkdf2). The code is there for review (not sure this is the case with other implimentations) and so you can probably trust it as much as you would these other components.
Punchcutter wrote: | Any hints about whether one might be an NSA honeypot or something? |
Beyond a complete audit of the code I don't think that question is answerable.
best ... khay |
|
Back to top |
|
|
Yamakuzure Advocate
Joined: 21 Jun 2006 Posts: 2280 Location: Adendorf, Germany
|
Posted: Mon Jan 02, 2017 11:18 am Post subject: |
|
|
Besides, you can mount and use all truecrypt containers and partitions using: Code: | sudo cryptsetup open --type tcrypt <container|partition> <mapper name> | This will give you /dev/mapper/<mapper name> just like Code: | truecrypt -t --filesystem=none <container|partition> | did. _________________ Important German:- "Aha" - German reaction to pretend that you are really interested while giving no f*ck.
- "Tja" - German reaction to the apocalypse, nuclear war, an alien invasion or no bread in the house.
|
|
Back to top |
|
|
irenicus09 Tux's lil' helper
Joined: 07 Jun 2013 Posts: 118
|
Posted: Tue Jan 10, 2017 4:37 pm Post subject: |
|
|
Hmm interesting topic --keep-going
I'm no crypto expert, but there's also truecrypt successor veracrypt and it has been recently audited.
https://ostif.org/the-veracrypt-audit-results/
Veracrypt version 1.19 has fixed the issues found in the audit.
tc-play seems interesting especially as it is supported by dm-crypt, but an audit would make it easier to trust.
I saw --veracrypt flag in 'man cryptsetup' so I think veracrypt encrypted container might be supported by cryptsetup, although I haven't used it. |
|
Back to top |
|
|
Yamakuzure Advocate
Joined: 21 Jun 2006 Posts: 2280 Location: Adendorf, Germany
|
Posted: Fri Jan 13, 2017 9:19 am Post subject: |
|
|
irenicus09 wrote: | Hmm interesting topic --keep-going
I'm no crypto expert, but there's also truecrypt successor veracrypt and it has been recently audited. | Actually we are doing a lot with it at my company, as we send out a lot of data on external storage and packed into truecrypt containers. veracrypt is great for creating such containers as truecrypt was. And cryptsetup can open any old truecrypt container/partition you might have. _________________ Important German:- "Aha" - German reaction to pretend that you are really interested while giving no f*ck.
- "Tja" - German reaction to the apocalypse, nuclear war, an alien invasion or no bread in the house.
|
|
Back to top |
|
|
|