"Forensics for Prosecutors" mentions backdoor in TrueCrypt (page 15) [pdf]

#1

Post by jhickner » Wed, Sep 04, 2013, 3:21 AM UTC

"Forensics for Prosecutors" mentions backdoor in TrueCrypt (page 15) [pdf]
cryptome.org

Re: "Forensics for Prosecutors" mentions backdoor in TrueCrypt (page 15) [pdf]

#2

Post by andrewpi » Wed, Sep 04, 2013, 3:47 AM UTC

Wouldn't any backdoor used in a criminal prosecution have to be disclosed to the defense?

Re: "Forensics for Prosecutors" mentions backdoor in TrueCrypt (page 15) [pdf]

#3

Post by peter_l_downs » Wed, Sep 04, 2013, 3:51 AM UTC

Worth mentioning that truecrypt volumes can be hidden inside playable video files. Yes, it's security through obscurity, but hey, it makes me feel a little safer.

http://keyj.emphy.de/real-steganography-with-truecrypt/

Re: "Forensics for Prosecutors" mentions backdoor in TrueCrypt (page 15) [pdf]

#4

Post by unimpressive » Wed, Sep 04, 2013, 3:53 AM UTC

peter_l_downs wrote: post #3

Worth mentioning that truecrypt volumes can be hidden inside playable video files. Yes, it's security through obscurity, but hey, it makes me feel a little safer. http://keyj.emphy.de/real-steganography-with-truecrypt/

Mentioning a steganographic technique implies that you use it, negating the point.

Re: "Forensics for Prosecutors" mentions backdoor in TrueCrypt (page 15) [pdf]

#5

Post by nitrogen » Wed, Sep 04, 2013, 3:54 AM UTC

Page 16 has some wonderful lines:

  • “Fruit of the poisonous tree” can be circumvented
    • The use of backdoors cannot be detected or proven
    • Vendors are legally and commercially prevented from
      acknowledging their backdoors. Defense will not be
      able to prove their existence
    • The files can be described as “forensically obtained”

Re: "Forensics for Prosecutors" mentions backdoor in TrueCrypt (page 15) [pdf]

#6

Post by frenger » Wed, Sep 04, 2013, 3:54 AM UTC

Truecrypt is open source. Can anyone find the backdoor?

Re: "Forensics for Prosecutors" mentions backdoor in TrueCrypt (page 15) [pdf]

#7

Post by na85 » Wed, Sep 04, 2013, 3:55 AM UTC

andrewpi wrote: post #2

Wouldn't any backdoor used in a criminal prosecution have to be disclosed to the defense?

Scroll down a bit; all they have to disclose is that the files "were forensically obtained."

Re: "Forensics for Prosecutors" mentions backdoor in TrueCrypt (page 15) [pdf]

#8

Post by D9u » Wed, Sep 04, 2013, 3:55 AM UTC

andrewpi wrote: post #2

Wouldn't any backdoor used in a criminal prosecution have to be disclosed to the defense?

Parallel reconstruction...

http://uk.reuters.com/article/2013/08/07/uk-dea-irs-idUKBRE9...

Re: "Forensics for Prosecutors" mentions backdoor in TrueCrypt (page 15) [pdf]

#9

Post by azelfrath » Wed, Sep 04, 2013, 3:56 AM UTC

EDIT: Ignore that. I figured a slide show would not skip slides when you use arrow keys for navigation.

Can I get a direct quote? I'm not seeing any mention of TC on p15 or any other page.

Re: "Forensics for Prosecutors" mentions backdoor in TrueCrypt (page 15) [pdf]

#10

Post by sounds » Wed, Sep 04, 2013, 3:58 AM UTC

frenger wrote: post #6

Truecrypt is open source. Can anyone find the backdoor?

"Reflections on trusting trust" [1] may be necessary here. When you install Truecrypt, do you download a packaged binary app? Or do you compile it from source? Do you trust your compiler?

Until you know what the backdoor actually _is_, please don't stop just because you audited the source code.

[1] a good summary is at http://en.wikipedia.org/wiki/Backdoor_%28computing%29#Reflec...