[fpc-other] disk "glasses"

Jonas Maebe jonas.maebe at elis.ugent.be
Wed Aug 13 11:19:37 CEST 2014


On 13 Aug 2014, at 07:56, Torsten Bonde Christiansen wrote:

> Btw. a little information regarding TrueCrypt:
>
> http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/

Given that no explanation was given regarding what exactly the  
supposed problems were, and given the fact that the independent audit  
of the last known good TrueCrypt source code (the one before that  
message was posted) until now has not found any issues (although  
they're by no means finished yet: http://istruecryptauditedyet.com/ ),  
it's quite possible that this whole episode was mainly FUD that the  
developers were forced to spread in one way or another.

Afaik the only known weakness is that if someone can get physical  
access to the computer while it's turned on and manage to dump its  
complete memory contents, they can recover the decryption key.


Jonas


More information about the fpc-other mailing list