4 ms·

> As Truecrypt got no further releases the software is still vulnerable for all those weaknesses. [...] > The BSI knew all that. [...] > The results were comm

> As Truecrypt got no further releases the software is still vulnerable for all those weaknesses. [...] > The BSI knew all that. [...] > The results were communicated to the Truecrypt foundation, however the Truecrypt developers didn't consider them to be relevant. BSI furthermore says that the results were not intended to be published. This is looking pretty terrible for Truecrypt. It means they ignored a vulnerability report and kept the vulnerabilities around for five years.

blattimwind 7y ago
Truecrypt has been abandoned for ~seven years or so.
- yorwba 7y ago
  Development was continued by the VeraCrypt project. Hopefully they fixed the vulnerabilities that TrueCrypt didn't.
- chmod775 7y ago
  This was in 2010. Truecrypt wouldn't be 'deprecated' for like five more years after that.
Globz 7y ago
You should no longer use TrueCrypt, if you want an alternative I suggest https://www.veracrypt.fr https://www.veracrypt.fr
whoopdedo 7y ago
But did the VeraCrypt developers know about it?
- pulse7 7y ago
  According to the article they didn't know about it.