5 ms·
At the risk of getting downvoted for this, I urged caution against VeraCrypt in the past, because of the ties the company of its developer (IDRIX) has with the
by jonathanstrange 7y ago
At the risk of getting downvoted for this, I urged caution against VeraCrypt in the past, because of the ties the company of its developer (IDRIX) has with the French government, lack of a history in cryptography before he took over VeraCrypt, and the overall possibility of nearness to the French security apparatus. People say that you can audit the code and compile it on your own, but who does that? Who checks the binaries?
To me with my overly vivid imagination, the fast forking of TrueCrypt to VeraCrypt looked like a hasty power grab by DGSE. Pure speculation, though.
- chii 7y agowhat do you suggest as an encryption tool for full-drive encryption?
- iofiiiiiiiii 7y agoBitLocker is great, especially as it can also take advantage of a TPM to protect against evil maid attacks . In contrast, VeraCrypt developers did not seem to understand what a TPM is when I tried to discuss the topic with them.
- chii 7y agodubious - i would not trust bitlocker as it is not open source, and you cannot have it audited.
- degski 7y agoDGSE is not your opponent, they use rubber-hose decryption, works every time.