Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #4525

Re: Announcement: Truecrypt is dead. Long Live DoxBox.

Show all headers | View raw

Shadow wrote:

>Then I'll dump TrueCrypt and move on to something "safer"
Unfortunately we've no idea how safe any program is. If the NSA could crack  
Truecrypt its unlikely they would have revealed it to the Brazilians for the  
sake of someone as trivial as Dantas.

But based on Snowdens revalations that the NSA are putting a lot of effort  
into doing an end-run round encryption by hacking servers, we can believe  
they don't have a generic attack against AES.

We also know that:

* the more studied any crypto system is, the less likely it is to have  
weaknesses.

* the LUKS and dm-crypt encryption built into Linux has been around for a  
while and is a big target for any researcher.

* the US military uses Linux encryption [1], presumably with the NSAs  
approval.

So my best guess is that the "safest" encryption is LUKS & dm-crypt & AES.

That's why I store my data in a loopback encrypted file (a 'Box' in DoxBox  
terms) created on Linux with these tools.

DoxBox can open these files on Windows, Truecrypt can't.

Of course there's the possibility that DoxBox has a weakness that dm-crypt  
doesn't, but given that it has to be compatible with dm-crypt and the  
creation of the volume is done on Linux, that's a smaller area of  
vulnerability than with some program that does everything.

regards

tdk






[1] http://www.zdnet.com/blog/open-source/the-air-forces-secure-linux-distribution/9618
-- 
Take back your Internet! http://squte.com/Webertarian-Manifesto
View this thread at http://squte.com/usenet/announcement-truecrypt-dead.-long-live-doxbox.?src=u#comment-37195

Back to comp.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Announcement: Truecrypt is dead. Long Live DoxBox. "tdk" <forum.tdk@squte.com> - 2014-08-22 11:41 -0500
  Re: Announcement: Truecrypt is dead. Long Live DoxBox. Shadow <Sh@dow.br> - 2014-08-22 18:46 -0300
    Re: Announcement: Truecrypt is dead. Long Live DoxBox. "tdk" <forum.tdk@squte.com> - 2014-08-22 18:13 -0500
  Re: Announcement: Truecrypt is dead. Long Live DoxBox. "Dirk T. Verbeek" <dverbeek@xs4all.nl> - 2014-08-23 11:02 +0200
    Re: Announcement: Truecrypt is dead. Long Live DoxBox. "tdk" <forum.tdk@squte.com> - 2014-08-23 06:39 -0500
      Re: Announcement: Truecrypt is dead. Long Live DoxBox. Forsythe <none@example.com> - 2014-08-25 04:42 +0000
        Re: Announcement: Truecrypt is dead. Long Live DoxBox. "tdk" <forum.tdk@squte.com> - 2014-08-26 12:55 -0500

csiph-web