[kwlug-disc] Truecrypt

[Darcy Casselman]

Ars provides a rundown of the various more probably theories flying around
right now:

http://arstechnica.com/security/2014/05/bombshell-truecrypt-advisory-backdoor-hack-hoax-none-of-the-above/#p3


On Thu, May 29, 2014 at 12:42 PM, Bob Jonkman <bjonkman at sobac.com> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Khalid wrote:
> > As for alternatives, seems that LUKS is backward compatible with
> TruCrypt.
>
> I don't think so. There's tool called tcplay that provides a
> TrueCrypt-like API to an encrypted storage volume that uses LUKS. I'm
> not sure if you can substitute it for TrueCrypt, but I don't think
> it's a drop-in replacement (ie. if TrueCrypt itself works with LUKS,
> or if tcplay  reads TrueCrypt containers or volumes directly).
> https://github.com/bwalex/tc-play (via
>
> http://grugq.tumblr.com/post/60464139008/alternative-truecrypt-implementations
> )
>
>
> There's lots of conspiracy tin-foil-hattery at
> https://news.ycombinator.com/item?id=7812133 which is a lot of fun to
> read, theories ranging from a simple Website hack (unlikely,
> considering the provenance of the signing keys) to a revelation that
> Edward Snowden is the TrueCrypt author.
>
> But a more reasonable discussion is by Runa Sandvik at
>
> http://www.forbes.com/sites/runasandvik/2014/05/28/encryption-tool-endorsed-by-snowden-abruptly-shuts-down/
>
> - --Bob.
>
>
>
> On 14-05-29 11:05 AM, Khalid Baheyeldin wrote:
> > Other people are speculating that Hector Monsegur (Sabu), the
> > hacker that was freed by the Feds after he cooperated, was a
> > contributor to TruCrypt, and that was one obstacle they always
> > faced (decrypting encrypted volumes), so there it goes once he was
> > out.
> >
> > As for alternatives, seems that LUKS is backward compatible with
> > TruCrypt.
> >
> > https://code.google.com/p/cryptsetup/
> >
> >
> >
> > On Thu, May 29, 2014 at 10:20 AM, Khalid Baheyeldin <kb at 2bits.com>
> > wrote:
> >
> >> Many theories floating around ...
> >>
> >> With secret court orders no one can be sure of anything ...
> >>
> >> But there are other possibilities.
> >>
> >> See the comments here (change to threshold 3 or 4 to limit to the
> >> highest rated ones)
> >>
> >> http://soylentnews.org/article.pl?sid=14/05/29/0243223
> >>
> >>
> >> On Thu, May 29, 2014 at 10:16 AM, Chris Irwin
> >> <chris at chrisirwin.ca> wrote:
> >>
> >>> I wanted to see what everybody's thoughts are about the
> >>> truecrypt "annoucement" yesterday.
> >>>
> >>> Quoted from their website:
> >>>
> >>>> WARNING: Using TrueCrypt is not secure as it may contain
> >>>> unfixed
> >>> security issues
> >>>>
> >>>> This page exists only to help migrate existing data encrypted
> >>>> by
> >>> TrueCrypt.
> >>>>
> >>>> The development of TrueCrypt was ended in 5/2014 after
> >>>> Microsoft
> >>> terminated support of Windows XP. Windows 8/7/Vista and later
> >>> offer integrated support for encrypted disks and virtual disk
> >>> images. Such integrated support is also available on other
> >>> platforms (click here for more information). You should migrate
> >>> any data encrypted by TrueCrypt to encrypted disks or virtual
> >>> disk images supported on your platform.
> >>>
> >>> There is discussion on slashdot, hacker news, and many other
> >>> sites. So far, there is no consensus on what is going on?
> >>> Half-hearted compliance with a US NSL? Dead-man switch
> >>> prematurely activating?
> >>>
> >>> Does anybody else have thoughts or insights?
> >>>
> >>> I'm a dmcrypt user personally, but I know several folks on the
> >>> list use truecrypt.
> >>>
> >>> -- Chris Irwin <chris at chrisirwin.ca>
> >>>
> >>> _______________________________________________ kwlug-disc
> >>> mailing list kwlug-disc at kwlug.org
> >>> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
> >>>
> >>>
> >>
> >>
> >> -- Khalid M. Baheyeldin 2bits.com, Inc. Fast Reliable Drupal
> >> Drupal optimization, development, customization and consulting.
> >> Simplicity is prerequisite for reliability. --  Edsger
> >> W.Dijkstra Simplicity is the ultimate sophistication. --
> >> Leonardo da Vinci For every complex problem, there is an answer
> >> that is clear, simple, and wrong." -- H.L. Mencken
> >>
> >
> >
> >
> >
> >
> > _______________________________________________ kwlug-disc mailing
> > list kwlug-disc at kwlug.org
> > http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
> >
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Ensure confidentiality, authenticity, non-repudiability
>
> iEYEARECAAYFAlOHY3IACgkQuRKJsNLM5erKZgCg37mBIS1hH3iXENU5hLyXJ/8g
> RMoAnA0m4xqz+PZhqlNKh1U2moFGKkZn
> =22Qu
> -----END PGP SIGNATURE-----
>
>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20140529/6c94e15d/attachment.htm>