> Since TrueCrypt is dead, what is the purpose of auditing it? It makes sense to audit the common ancestor rather than a single one of the derivatives because

> Since TrueCrypt is dead, what is the purpose of auditing it? It makes sense to audit the common ancestor rather than a single one of the derivatives because you'll cover more bases. If TC is found to have a critical vulnerability then you'll know all forks have the problem. If one fork is found to be vulnerable then you'll need to figure out whether it's a TC vulnerability or some subtle dependency on the new code.