Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[ScriptWolf]

So with true crypt now disbanded has anyone got any decent alternatives for it?

[Levi]

I haven't seen anything that really looks as good yet.  Honestly I'd just keep using the previous version if you still have the installer.

[miauw62]

Well, apparently bitlocker is good if you can stand giving M$ money.

[Dr Feelgood]

DiskCryptor

https://diskcryptor.net/wiki/Main_Page

[Vattic]

Not exactly alternatives, but the auditing people say they might continue the project and there are others doing the same.

[Tellemurius]

Well, apparently bitlocker is good if you can stand giving M$ money.

Unless you are like me and have access to either Windows 7 Ultimate or Windows 8 Pro, you will not get Bitlocker.

[Levi]

Not exactly alternatives, but the auditing people say they might continue the project and there are others doing the same.

Oh, that is good to know!

[ScriptWolf]

Hmm I might have to dig up a older version of true crypt the only thing I'm worried about is the message saying that all versions of truecrypt were unsafe.

Ehhh bit locker made by microsoft I would say that is very very likely that there is a back door into it. How is diskcryptor anyway ?

[Tellemurius]

Diskcryptor doesn't/can't encrypt the main system drive due to limitations (it can render your drive unbootable) but other than that it should be fine.

If Bitlocker had a backdoor, I would go kill Microsoft since they never been able to unlocked 6 hard drives I gave them.
Again, Bitlocker is only available to Enterprise or Ultimate editions of 7 and the Pro Edition of 8 so very few people have access to it. Difference between Bitlocker and Truecrypt is Bitlocker can encrypt the system drive and has access to a Trusted Platform Module on the motherboard to check secured authentication (Truecrypt refused to use the TPM but i don't have the reasons why). For evidence of a backdoor is explained in this article. Microsoft engineers said themselves if you really wanted to get into encrypted drives then use cold boot attacks or similar methods to pull the private key. This doesn't just effect Bitlocker, it effects all encryption methods.

[Levi]

If Bitlocker had a backdoor, I would go kill Microsoft since they never been able to unlocked 6 hard drives I gave them.

Dood, that is because you asked Microsoft.  You should have just sent the NSA a quick email, they would have helped you with that right quick. 

----

Non-open source security software makes me paranoid.  Microsoft is just as at risk of NSL letters as every other company in the US, so I'd avoid any commercial US encryption software.

[foil]

Id keep using Truecrypt until there is a gaping security bug found.

  The site says MAY contain bugs, not that it definetly does and with the source code available to the public for years i think any serious issue would have been found by now.

[Tellemurius]

If Bitlocker had a backdoor, I would go kill Microsoft since they never been able to unlocked 6 hard drives I gave them.

Dood, that is because you asked Microsoft.  You should have just sent the NSA a quick email, they would have helped you with that right quick. 

----

Non-open source security software makes me paranoid.  Microsoft is just as at risk of NSL letters as every other company in the US, so I'd avoid any commercial US encryption software.

Nothing says you can't look at their code, you can ask for an audit of their code just under a NDA.

[miauw62]

Id keep using Truecrypt until there is a gaping security bug found.

  The site says MAY contain bugs, not that it definetly does and with the source code available to the public for years i think any serious issue would have been found by now.

The OpenSSL source code was available to the public for years too.

[foil]

True but i think it depends on the value of data you are trying to keep safe.

If its nuclear weapons plans or pedo porn you are trying to hide from the Gov then they will probably have other means to get into your computer via man in middle attacks or etc etc.  For things like a collection of your logins, passwords or banking details, to keep them safe from random script kiddies or if computer is stolen i think 3 rounds of truecrypt encryption should be safe enough.

Part 1 of the Truecrypt audit is out now and is quite interesting to read.

"Finally, iSEC found no evidence of backdoors or otherwise intentionally malicious code in the assessed areas. The vulnerabilities described later in this document all appear to be unintentional, introduced as the result of bugs rather than malice."

https://opencryptoaudit.org/reports/iSec_Final_Open_Crypto_Audit_Project_TrueCrypt_Security_Assessment.pdf