3 ms·
It's a great write-up, I read the whole thing. You clearly understand the domain well. I really just don't get why you'd, in one breath, decry XTS, and then i
by diminoten 12y ago
It's a great write-up, I read the whole thing. You clearly understand the domain well.
I really just don't get why you'd, in one breath, decry XTS, and then in that same breath, recommend people use TrueCrypt, which is, as you call it, "the best-known implementation of XTS".
Maybe just lead me to the water on this one. It's really the only thing left unresolved in our conversation.
- daeken 12y agoBlock-level encryption is a terrible, terrible approach for many reasons (which 'tptacek has referenced a million times). However, Truecrypt is the best such implementation, and it's a required approach in certain cases. You should be doing crypto at the application/filesystem level; if you can't, use Truecrypt. This isn't contradictory advice.
- diminoten 12y agoThat's not just what he said, he also said, "By encouraging people to rely on tools like Truecrypt, you are, in a very small but real way, endangering them."
- tptacek 12y agoThis is like, 89% of what I think (I don't think TC is the best, but it's not the worst). What's weird to me is why we have a gigantic thread dedicated to the precise nuances of what I think about Truecrypt. Isn't this incredibly boring?
- diminoten 12y agoMostly, except for the part where the guy who conducted phase 1 of the TrueCrypt audit said that encouraging TrueCrypt's use is dangerous and harmful.