TCHunt is a free program that finds (for the most part) TrueCrypt volumes. (Modulo 512, chi-square stream analysis, etc). The scary thing is that it's not 100%

TCHunt is a free program that finds (for the most part) TrueCrypt volumes. (Modulo 512, chi-square stream analysis, etc). The scary thing is that it's not 100% positive as it cannot differentiate between random data and AES data, but in general testing, it finds 100% of TrueCrypt files. I wonder if something such as TCHunt could be used to accuse someone of having an encrypted TrueCrypt file or not? I doubt it, but some folks argue otherwise.