Horrors of murky TrueCrypt to be probed once more The gears of the TrueCrypt audit have whirred into life overnight with boffins poised to again probe the open source crypto tool after nearly a year of waiting. A tiny team will fondle the tool's random number generators, cipher suites and key algorithms in a bid to pull the internet's favourite crypto suite out of the pariah …
I am pretty sure that the NSA would be broken to crawling pace if everyone downloaded a book at random and sent that with the various files that a secret police farce might be interested in.
Anyone who has any sense and wants to send terrorist information would be using book codes of a pretty nearly unbreakable source by now anyway. I mean how long does it take to write a couple of novels these days?
You could even have them badly translated into various languages to help clog the Satanic mills of Utah. The NSA will eventually cripple USA the way that the Afghanistan war crippled Russia if we all did that. They would have to make Verizon and Comcast a permanent crawl to keep up.
You can photocopy the Quran or Bible -or if you really want to go large any of the Indian religious mantras. Some of those Yogis are really off the wall. That would make life fun for GCHQueuers. Might even convert a few of them. Or worse :)
Anyone who has any sense and wants to send terrorist information
History suggests this is very nearly the empty set.
Terrorists succeed by dint of brute force (in particular, by recruiting heavily and then making extraordinarily inefficient use of resources), playing the long game, and relying on their opponents to do much of the actual work (viz the "democracies" eagerly ramping up their police states to profit the rich and powerful, and encouraging fear among the populace in the process). They rarely display anything more than a bit of cunning. Research, planning, careful thought - those are not prized in the terrorist communities.
TrueCrypt never supported UEFI either. That's the point - rather than reinvent the wheel, if we can add GPT and UEFI to TrueCrypt (which is no small feat), we're more likely to get a working, compatible, secure system than if we rip everything out and restart it from the ground up.
Truecrypt was great - it just needs to be brought into the 21st Century a bit, that's all, and then it will be fabulous.
By comparison, doesn't Bitlocker still encourage you to upload your keys to OneDrive?
> Unfortunately VeraCrypt does not currently support GPT partitions
There's hope:
"GPT support is on the top of the TODO list. It is a complicated feature to implement thus needing a lot of time. We hope to have it implemented between 6 and 12 months from now."
Veracrypt developer, 6-Sep-2014
..to stop the bloke that nicked your laptop from taking a good look before someone slaps something over the top.
That's all that's needed in most cases.
However, as mentioned above, Truecrypt was largely obsolete for full HDD encryption. Still handy for containers though.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
