Is TrueCrypt truly safe?

Posted by Alfred on Super User See other posts from Super User or by Alfred
Published on 2010-07-15T20:16:19Z Indexed on 2011/02/13 7:27 UTC
Read the original article Hit count: 502

Filed under:

encryption

|

truecrypt

Hi.

I have been using TrueCrypt for a long time now. However, someone pointed me to a link that described the problems with the license.

IANAL and so it really didn't make much sense to me, however I wanted my encryption software to be open source - not because I could hack into it but because I could trust it.

Some of the issues with it I have noticed:

There is no VCS for the source code. Is this OK?
There are no change logs.
The forums are a bad place to be. They ban even if you ask a genuine question.
Who really owns TrueCrypt?
There were some reports of tinkering with the md5 checksums.

To be honest, the only reason why I used TrueCrypt was because it was open source. But however, somethings are just not right.

Has anyone ever validated the security of TrueCrypt? Should I really be worried? Yes I am paranoid; if I use an encryption software, I trust it with all my life.

If all my concerns are genuine, is there any other open source alternative to TrueCrypt?

© Super User or respective owner

Related posts about encryption

SQL SERVER – History of SQL Server Database Encryption

as seen on SQL Authority - Search for 'SQL Authority'
I recently met Michael Coles and Rodeney Landrum the author of one of the kind book Expert SQL Server 2008 Encryption at SQLPASS in Seattle. During the conversation we ended up how Microsoft is evolving encryption technology. The same discussion lead to talking about history of encryption tools in… >>> More
Encryption is hard: AES encryption to Hex

as seen on Stack Overflow - Search for 'Stack Overflow'
So, I've got an app at work that encrypts a string using ColdFusion. ColdFusion's bulit-in encryption helpers make it pretty simple: encrypt('string_to_encrypt','key','AES','HEX') What I'm trying to do is use Ruby to create the same encrypted string as this ColdFusion script is creating. Unfortunately… >>> More
Confused about encryption with public and private keys (which to use for encryption)

as seen on Stack Overflow - Search for 'Stack Overflow'
I am making a licensing system when clients ask my server for a license and I send them a license if they are permitted to have one. On my current system I encrypt the license using a single private key and have the public key embedded into the client application that they use to decrypt the license… >>> More
Encryption Product Keys : Public and Private key encryption

as seen on Stack Overflow - Search for 'Stack Overflow'
I need to generate and validate product keys and have been thinking about using a public/private key system. I generate our product keys based on a client name (which could be a variable length string) a 6 digit serial number. It would be good if the product key would be of a manageable length… >>> More
Software tools to automatically decrypt a file, whose encryption algorithm (and/or encryption keys)

as seen on Stack Overflow - Search for 'Stack Overflow'
I have an idea for encryption that I could program fairly easily to encrypt some local text file. Given that my approach is novel, and does not use any of the industry standard encryption techniques, would I be able to test the strength of my encryption using 'cracker' apps or suchlike? Or do all… >>> More

Related posts about truecrypt

Formatting a truecrypt volume on windows: Truecrypt failed to obtain administrator privileges

as seen on Super User - Search for 'Super User'
Following shaneselman's advice (http://www.hanselman.com/blog/TheComputerBackupRuleOfThree.aspx), I'm setting up a 2TB external drive as a backup, and encrypting it using TrueCrypt. This is under Windows 7. (I've used TrueCrypt before, but not since XP days.) I installed TrueCrypt with default options… >>> More
TrueCrypt drive letter not available

as seen on Super User - Search for 'Super User'
With c# or a batch file I mount a trueCrypt volume located at A:\volumeTrueCrypt.tc With c# I do: static void Main(string[] args) { var p = Process.Start( fileName:@"C:\Program Files\TrueCrypt\TrueCrypt.exe", arguments:@"/v a:\volumetruecrypt.tc /lw /a /p truecrypt" ); … >>> More
How can I re-open the TrueCrypt window after it's been closed?

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I installed TrueCrypt 7.1 Standard 64-bit on a fresh install of Ubuntu 11.10 64-bit. After finding the application in the dash I dragged it's icon onto the Unity launcher. I then clicked that icon and TrueCrypt's main window opened. I mounted my encrypted file/volume and then closed the window to… >>> More
Mounting a TrueCrypt volume over FTP

as seen on Super User - Search for 'Super User'
Is it possible to mount a TrueCrypt volume file over FTP? Here's how TrueCrypt works with a local file: User inputs path to volume file, enters password TrueCrypt verifies that the password is correct (probably by decrypting the very first part of the volume file?) TrueCrypt reads the directory… >>> More
How to resize truecrypt file ?

as seen on Super User - Search for 'Super User'
Hi, How does one resize a TrueCrypt file ? Michael >>> More