3 ms·
Are you using truecrypt? Isn't that a dead project with security issues?
by dutchbrit 11y ago
Are you using truecrypt? Isn't that a dead project with security issues?
- Kadin 11y agoIt's a forked project with leadership-drama issues, but several ongoing audits haven't turned up any serious security issues. The original anonymous maintainers apparently tried to kill it, for reasons that aren't clear, by saying that it's insecure. It seems to have been a red herring, and their suggestions of alternatives were comically bad. Lots of people are still using the last Truecrypt release, or one of the several forks that have sprung up that have attempted to improve upon it in various ways (sometimes in incompatible ways, though). Hopefully the situation will stabilize with one clear winner in the future.
- sarciszewski 11y agoNo, they are not using truecrypt. They're using SJCL for AES-GCM and OpenPGP for public-key encryption.