If you're super paranoid you shouldn't trust any version of truecrypt. Read the fascinating story of Paul Le Roux...
https://mastermind.atavist.com/
He created E4M (which truecrypt was based on) and is rumored to have been one of the creators of truecrypt. Apparently he's also been a US government asset for a while.
Re:Edward Snowden: The Internet Is Broken
by nickpsecurity on Friday April 22, 2016 @05:01PM
(#11552538)
If you're superparanoid, you should trust that because a superparanoid seemed to build it for himself and open-source it to stick it to the man in his mind. And then built a criminal empire that, if he was still financing it, depended on it for his survival. That's the kind of incentives that get results.
Re:Edward Snowden: The Internet Is Broken
by dublinben on Friday April 22, 2016 @05:44PM
(#11552755)
TrueCrypt has been subjected to an independent security audit. As have successors like VeraCrypt. Any alternatives likely haven't.
So what? Snowden even said that Truecrypt was one of the only tools that currently the NSA could not defeat. I'd rather trust him on that than your opinion on the matter.
Re:Edward Snowden: The Internet Is Broken
by nickpsecurity on Saturday April 23, 2016 @01:01AM
(#11554231)
Same shit I said to Moxie about GPG. There's only a few things consistently stopping them. Best endorsement ever if you ask me. I still push for even greater levels of security and assurance but what stops NSA at the moment is one hell of a starting place.
This author's conclusions seem quite sound to me. They collapsed it in a way to comply with a gag order while silently sounding an alarm.
https://forum.truecrypt.ch/t/my-analysis-of-what-really-happ...
Anyone operating in this space is eventually going to get the same option as Lavabit's founder: compromise or collapse.