3 ms·
The documents seem to be available here: https://fragdenstaat.de/anfrage/untersuchungen-zum-verschlusselungsprogramm-truecrypt/ https://fragdenstaat.de/anfrage/
by perlgeek 7y ago
The documents seem to be available here: https://fragdenstaat.de/anfrage/untersuchungen-zum-verschlusselungsprogramm-truecrypt/ https://fragdenstaat.de/anfrage/untersuchungen-zum-verschlus...
They all have "geschwärzt" (blackened) in the file name, but it looks like only some author's name (and maybe working group name) have been removed -- I've scrolled through a few of these files, and didn't find anything else that might have been removed.
- close04 7y agoI'm not sure if the implication of the following is that sections of the report were withheld or that it was incomplete to begin with. > However the report hints that more such flaws exist. Another chapter in the documents mentions, that several such off-by-one-errors were found, but due to a lack of a complete code analysis only examples can be shown. However even those examples are missing in the document - the following chapter only consists of a headline and has no content.
- johannes1234321 7y agoMy understanding is that the auditors didn't have time to analyze all these errors, thus omitted them from the report already, but only pointing out the potential risk.