Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Relaunched TrueCrypt site with original content and documentation

truecrypt71a.com

Post reply on HN
Print view View original

1–10 of 54 posts

Re: Relaunched TrueCrypt site with original content and documentation

#3

Post by luck87 »

It is available the version 7.1a, but the TrueCrypt development has stopped (for now). An alternative solution is VeraCrypt (build over Truecrypt 7.1a): https://veracrypt.codeplex.com/

VeraCrypt says to add extra security features (ex. TrueCrypt uses PBKDF2-RIPEMD160 with 1000 iterations whereas in VeraCrypt we use 327661): https://veracrypt.codeplex.com/discussions/569777#PostConten...

Do you think VeraCrypt is an valid alternative? or have they only fix something in TrueCrypt ( like change the CONSTANT value of iterations )

Re: Relaunched TrueCrypt site with original content and documentation

#4

Post by dtech »

luck87 wrote: post #3

It is available the version 7.1a, but the TrueCrypt development has stopped (for now). An alternative solution is VeraCrypt (build over Truecrypt 7.1a): https://veracrypt.codeplex.com/ VeraCrypt says to add extra security features (ex. TrueCrypt uses PBKDF2-RIPEMD160 with 1000 iterations whereas in VeraCrypt we use 327661): https://veracrypt.codeplex.com/discussions/569777#PostConten... Do you think VeraCrypt is an v…

They're your most realistic option right now. They are actively developing it and added things like newer algorithms (e.g. SHA2).

There's CipherSched but that is basically a completely new program/rewrite which is very far from done.

However, I don't agree with VeraCrypts choices. They've changed several things that make mounting slow (0,5s -> 10s), which is annoying, especially if you mistype the password. Providing the option for increased security isn't bad, but they refuse to give users overrides to disable those slow security options because they are of the opinion that users can't assess the tradeoff for themselves. Which leads people to just go back to truecrypt because it works way better in their minds.

Re: Relaunched TrueCrypt site with original content and documentation

#5

Post by ilurk »

luck87 wrote: post #3

It is available the version 7.1a, but the TrueCrypt development has stopped (for now). An alternative solution is VeraCrypt (build over Truecrypt 7.1a): https://veracrypt.codeplex.com/ VeraCrypt says to add extra security features (ex. TrueCrypt uses PBKDF2-RIPEMD160 with 1000 iterations whereas in VeraCrypt we use 327661): https://veracrypt.codeplex.com/discussions/569777#PostConten... Do you think VeraCrypt is an v…

> Disclaimer: this site is not affiliated with, nor is it the official site of TrueCrypt

AFAIK there are several forks out there. But who is behind them? Can they be trusted?

BTW, for those looking for the code, this is the only reliable host for the Truecrypt source code:

https://github.com/AuditProject/truecrypt-verified-mirror

Re: Relaunched TrueCrypt site with original content and documentation

#7

Post by m82labs »

dtech wrote: post #4
luck87 wrote: post #3

It is available the version 7.1a, but the TrueCrypt development has stopped (for now). An alternative solution is VeraCrypt (build over Truecrypt 7.1a): https://veracrypt.codeplex.com/ VeraCrypt says to add extra security features (ex. TrueCrypt uses PBKDF2-RIPEMD160 with 1000 iterations whereas in VeraCrypt we use 327661): https://veracrypt.codeplex.com/discussions/569777#PostConten... Do you think VeraCrypt is an v…

They're your most realistic option right now. They are actively developing it and added things like newer algorithms (e.g. SHA2). There's CipherSched but that is basically a completely new program/rewrite which is very far from done. However, I don't agree with VeraCrypts choices. They've changed several things that make mounting slow (0,5s -> 10s), which is annoying, especially if you mistype the password. Providing…

This is an odd conclusion to come to. Are there a lot of users of True/Veracrypt that don't understand this? I guess I just don't see my grandparents using either of these packages, and I can't imagine a lot of "normal" users "trying out" a new encryption program.

Re: Relaunched TrueCrypt site with original content and documentation

#9

Post by tired_man »

m82labs wrote: post #7
dtech wrote: post #4

Earlier quoted context omitted.

They're your most realistic option right now. They are actively developing it and added things like newer algorithms (e.g. SHA2). There's CipherSched but that is basically a completely new program/rewrite which is very far from done. However, I don't agree with VeraCrypts choices. They've changed several things that make mounting slow (0,5s -> 10s), which is annoying, especially if you mistype the password. Providing…

This is an odd conclusion to come to. Are there a lot of users of True/Veracrypt that don't understand this? I guess I just don't see my grandparents using either of these packages, and I can't imagine a lot of "normal" users "trying out" a new encryption program.

Just because a person is older than you doesn't mean they're either stupid or completely non-technical.

Plenty of older people started using computer in the middle of the sixties. So what if we started with card punch machines, tape readers, and mainframes?

Just exactly what do you mean by "normal?" How much computer exposure does it take before one loses that quality and becomes, well, "you?"

There are lots of grandparents coding away in cubes across the world or tinkering with their prized home-brew desktop rig. Take a reality pill, kiddo.

If anything, there are fewer younger people who will tinker with crypto because the vast majority of them think they're invincible, indestructible, and immortal, when they're really just inexperienced and gullible.

Post reply on HN