Nek0's Blog

Goodbye Truecrypt

Posted on by nek0 in english, crypto

Maybe som of you will remember, that I once mourned the parting of the truecrypt project. It was the best tool at hand i had to generate encrypted file containers.

I continued to use the software even after the death of its underlying project. Even the audit didn’t reveal any critical vulnerabilities. But albeit the thorough search the auditors overlooked two major security bugs in the software, which became buplic just recently.

This sparked another attempt to find an alternative for truecrypt, which I gladly found in veracrypt. Veracrypt is based on the original code of truecrypt, but under the apache license. They fixed the vulenrabilities pretty quickly after they became public.

The whole user interface reminds me strongly of truecrypt, but they overhauled the encryption and hash functions and the container generations. This means, that veracrypt containers are not compatible with truecrypt, but truecrypt containers can still be mounted in veracrypt, because of a builtin “legacy mode”.

flattr this!

If you see this, something is wrong