Ask HN: Alternative for Truecrypt

#1

Post by GBiT » Thu, May 29, 2014, 9:53 AM UTC

Due to recent events with Truecrypt security, what alternatives and tools we have for secure disk encryption?

Re: Ask HN: Alternative for Truecrypt

#2

Post by higherpurpose » Thu, May 29, 2014, 9:58 AM UTC

I'd like to see one based on Threefish' 1024-bit blocks.

Re: Ask HN: Alternative for Truecrypt

#3

Post by buro9 » Thu, May 29, 2014, 10:21 AM UTC

My scenario is simply replacing TrueCrypt volumes.

I use TrueCrypt volumes to store personal files like scans of passport, credit card info, 2FA codes, etc.

These volumes are then on NAS or USB sticks, though a couple are in Dropbox for emergency remote access (those 2FA codes).

I primarily access everything via Linux, but the emergency scenario means I would like to be able to access via Windows and/or Mac.

I'm looking for super-simple, and ideally packaged binaries that do not need elevated privileges to run... as these deal with the emergency scenarios.

Re: Ask HN: Alternative for Truecrypt

#4

Post by tptacek » Thu, May 29, 2014, 12:25 PM UTC

higherpurpose wrote: post #2

I'd like to see one based on Threefish' 1024-bit blocks.

Why?

Re: Ask HN: Alternative for Truecrypt

#5

Post by tptacek » Thu, May 29, 2014, 12:26 PM UTC

If you're using a Mac, Filevault 2 is sector-level AES-XTS with a solid user interface and good performance.

Re: Ask HN: Alternative for Truecrypt

#6

Post by ph5il » Thu, May 29, 2014, 12:46 PM UTC

Anyone know if a group is organizing to take on dev for Truecrypt?

Re: Ask HN: Alternative for Truecrypt

#7

Post by enscr » Thu, May 29, 2014, 12:54 PM UTC

I have been trying out alternatives for more than 1 year and I feel nothing good & reliable exists for Windows (other than BitLocker - need to upgrade to enterprise/utimate/pro). The feature set of Truecrypt was pretty neat.

I doubt there'll be a good alternative anytime soon. I'm guessing the data is sensitive enough that you don't want to experiment with tools that aren't widely adopted.

Re: Ask HN: Alternative for Truecrypt

#8

Post by runjake » Thu, May 29, 2014, 3:48 PM UTC

Mac: FileVault for FDE, encrypted disk images for files.

Linux: dm-crypt for FDE, gpg for files -- or dm-crypt with loopback volumes.

Windows: BitLocker for FDE (unless you are a potential US IC target, but then why would you use an OS from a company who has a proven history of being eager to work with the US IC), gpg for files.

Re: Ask HN: Alternative for Truecrypt

#9

Post by mlok » Mon, Jun 02, 2014, 12:47 PM UTC

ph5il wrote: post #6

Anyone know if a group is organizing to take on dev for Truecrypt?

I have found these : * http://truecrypt.ch/ * https://github.com/bwalex/tc-play

Re: Ask HN: Alternative for Truecrypt

#10

Post by xcrunner529 » Tue, Jun 10, 2014, 4:29 PM UTC

runjake wrote: post #8

Mac: FileVault for FDE, encrypted disk images for files. Linux: dm-crypt for FDE, gpg for files -- or dm-crypt with loopback volumes. Windows: BitLocker for FDE (unless you are a potential US IC target, but then why would you use an OS from a company who has a proven history of being eager to work with the US IC), gpg for files.

Asymetric for files? Wouldn't that be slow? Or does GPG automatically do a combo?

I had used OpenSSL's enc tool before and seems to work too. The sucky thing is that I liked having a tool where I at least had access on my iOS devices. With encrypted disk images (ironically) that wouldn't be the case whereas I at least had read access to TC volumes.