Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #4523 > unrolled thread

Announcement: Truecrypt is dead. Long Live DoxBox.

Back to article view | Back to comp.misc

Contents

  Announcement: Truecrypt is dead. Long Live DoxBox. "tdk" <forum.tdk@squte.com> - 2014-08-22 11:41 -0500
    Re: Announcement: Truecrypt is dead. Long Live DoxBox. Shadow <Sh@dow.br> - 2014-08-22 18:46 -0300
      Re: Announcement: Truecrypt is dead. Long Live DoxBox. "tdk" <forum.tdk@squte.com> - 2014-08-22 18:13 -0500
    Re: Announcement: Truecrypt is dead. Long Live DoxBox. "Dirk T. Verbeek" <dverbeek@xs4all.nl> - 2014-08-23 11:02 +0200
      Re: Announcement: Truecrypt is dead. Long Live DoxBox. "tdk" <forum.tdk@squte.com> - 2014-08-23 06:39 -0500
        Re: Announcement: Truecrypt is dead. Long Live DoxBox. Forsythe <none@example.com> - 2014-08-25 04:42 +0000
          Re: Announcement: Truecrypt is dead. Long Live DoxBox. "tdk" <forum.tdk@squte.com> - 2014-08-26 12:55 -0500

#4523 — Announcement: Truecrypt is dead. Long Live DoxBox.

I am pleased to announce the project I have been working on the last couple  
of months is ready for beta testing.

------------------------------------------------------------------------------
DoxBox: Open-Source disk encryption for Windows. Think Truecrypt++

-------- FEATURES ------------------------------------------------------------

 * Easy to use, with a 'wizard' for creating new 'DoxBoxes'.
 * Full transparent encryption, DoxBoxes appear as removable disks in Windows
   Explorer.
 * Explorer mode lets you access DoxBoxes when you don't have admin
   permissions.
 * Compatible with Linux encryption, Cryptoloop "losetup", dm-crypt, and
   LUKS. Linux shell scripts support deniable encryption on Linux.
 * Supports smartcards and security tokens.
 * Encrypted DoxBoxes can be a file, a partition, or a whole disk.
 * Opens legacy volumes created with FreeOTFE
 * Runs on Windows Vista onwards (see note below for 64 bit versions).
 * Supports numerous hash (including SHA-512, RIPEMD-320, Tiger) and
   encryption algorithms (Including AES, Twofish, and Serpent) in several
   modes (CBC, LRW, and XTS), giving more options than any other disk
   encryption software.
 * Optional 'key files' let you use a thumb-drive as a key.
 * Portable mode doesn't need to be installed and leaves little trace on 3rd
   party PCs (administrator rights needed).
 * Deniable encryption protects you from 'rubber hose cryptography'.

*Please note this is a Beta version with some known limitations. Particularly  
in Portable mode an extra step is needed on 64 bit Windows to avoid the error  
message "Windows requires a digitally signed driver".*

-------- LINKS ---------------------------------------------------------------

-------- DOWNLOAD [1]
         DOWNLOAD DOXBOX PORTABLE [2]
         GITHUB PAGE [3]
         DOWNLOAD PAGE [4]
         RELEASE NOTES AND ANNOUNCEMENT [5] ----------------------------------

------------------------------------------------------------------------------
Please repost to whichever forums you think apt.
regards
tdk


[1] https://github.com/t-d-k/doxbox/releases/download/v6.0-beta/InstallDoxBox_v60Beta.exe
[2] https://github.com/t-d-k/doxbox/releases/download/v6.0-beta/DoxBoxPortable.zip
[3] https://github.com/t-d-k/doxbox
[4] https://t-d-k.github.io/doxbox/
[5] http://squte.com/usenet/announcement-doxbox-open-source-disk-encryption-windows
-- 
Take back your Internet! http://squte.com/Webertarian-Manifesto
View this thread at http://squte.com/node/6717?src=u

[toc] | [next] | [standalone]

#4524

On Fri, 22 Aug 2014 11:41:53 -0500, "tdk" <forum.tdk@squte.com> wrote:

>Announcement: Truecrypt is dead.

	At last we'll be able to get the data on Daniel Dantas'
TrueCrypt encrypted hard drives and put him away for a long time.
	That is really good news. Thanks.
	Waiting for the arrest. Then I'll dump TrueCrypt and move on
to something "safer".
	[]'s
-- 
Don't be evil - Google 2004
We have a new policy  - Google 2012

[toc] | [prev] | [next] | [standalone]

#4525

Shadow wrote:

>Then I'll dump TrueCrypt and move on to something "safer"
Unfortunately we've no idea how safe any program is. If the NSA could crack  
Truecrypt its unlikely they would have revealed it to the Brazilians for the  
sake of someone as trivial as Dantas.

But based on Snowdens revalations that the NSA are putting a lot of effort  
into doing an end-run round encryption by hacking servers, we can believe  
they don't have a generic attack against AES.

We also know that:

* the more studied any crypto system is, the less likely it is to have  
weaknesses.

* the LUKS and dm-crypt encryption built into Linux has been around for a  
while and is a big target for any researcher.

* the US military uses Linux encryption [1], presumably with the NSAs  
approval.

So my best guess is that the "safest" encryption is LUKS & dm-crypt & AES.

That's why I store my data in a loopback encrypted file (a 'Box' in DoxBox  
terms) created on Linux with these tools.

DoxBox can open these files on Windows, Truecrypt can't.

Of course there's the possibility that DoxBox has a weakness that dm-crypt  
doesn't, but given that it has to be compatible with dm-crypt and the  
creation of the volume is done on Linux, that's a smaller area of  
vulnerability than with some program that does everything.

regards

tdk






[1] http://www.zdnet.com/blog/open-source/the-air-forces-secure-linux-distribution/9618
-- 
Take back your Internet! http://squte.com/Webertarian-Manifesto
View this thread at http://squte.com/usenet/announcement-truecrypt-dead.-long-live-doxbox.?src=u#comment-37195

[toc] | [prev] | [next] | [standalone]

#4528

Op 22/08/14 om 18:41 schreef tdk:
> I am pleased to announce the project I have been working on the last
> couple of months is ready for beta testing.
>
> ------------------------------------------------------------------------------
>
> DoxBox: Open-Source disk encryption for Windows. Think Truecrypt++
<SNIP>

Neat, but as it is much more recent than Truecrypt I would for the 
foreseeable future continue to use Truecrypt.
Truecrypt has been partially audited and that process is still ongoing, 
no reason to declare it dead yet.

[toc] | [prev] | [next] | [standalone]

#4529

Dirk T Verbeek wrote:

>Neat, but as it is much more recent than Truecrypt I would for the  
>foreseeable future continue to use Truecrypt. Truecrypt has been partially  
>audited and that process is still ongoing, no reason to declare it dead yet.
You're right, I meant the project is dead in the sense of not being  
maintained.

DoxBox is based on FreeOTFE which is slightly older than Truecrypt, although  
Truecrypt is based on E4M which is older than FreeOTFE.

Its a matter of choice, of course, DoxBox has some features Truecrypt doesn't  
- like Linux compatibiity - and Truecrypt has some of its own, like OS disc  
encryption.

regards

tdk

-- 
Take back your Internet! http://squte.com/Webertarian-Manifesto
View this thread at http://squte.com/usenet/announcement-truecrypt-dead.-long-live-doxbox.?src=u#comment-37208

[toc] | [prev] | [next] | [standalone]

#4535

tdk <forum.tdk@squte.com> wrote:
> Its a matter of choice, of course, DoxBox has some features Truecrypt doesn't
> - like Linux compatibiity - and Truecrypt has some of its own, like OS disc
> encryption.

That's news to me, who have been reading from and writing to Truecrypt
containers under Fedora, Arch, Gentoo, etc. for years.  Or do I
misread you?

[toc] | [prev] | [next] | [standalone]

#4551

Forsythe wrote:

>That's news to me, who have been reading from and writing to Truecrypt  
>containers under Fedora, Arch, Gentoo, etc. for years. Or do I misread you?
It's more that I miscommunicated. DoxBox can read native Linux containers  
like LUKS.

regards

tdk

-- 
Take back your Internet! http://squte.com/Webertarian-Manifesto
View this thread at http://squte.com/usenet/announcement-truecrypt-dead.-long-live-doxbox.?src=u#comment-37264

[toc] | [prev] | [standalone]

Back to top | Article view | comp.misc

csiph-web