News for hackers. Stuff that matters.

A comment on VeraCrypt 1.24. Parent comment

Re:VeraCrypt 1.24 by jonathanstrange on Tuesday October 08, 2019 @04:55AM (#21190122)
At the risk of getting downvoted for this, I urged caution against VeraCrypt in the past, because of the ties the company of its developer (IDRIX) has with the French government, lack of a history in cryptography before he took over VeraCrypt, and the overall possibility of nearness to the French security apparatus. People say that you can audit the code and compile it on your own, but who does that? Who checks the binaries?

To me with my overly vivid imagination, the fast forking of TrueCrypt to VeraCrypt looked like a hasty power grab by DGSE. Pure speculation, though.

[ Parent | on HN ]
Re:VeraCrypt 1.24 by degski on Tuesday October 08, 2019 @07:07AM (#21190904)
DGSE is not your opponent, they use rubber-hose decryption, works every time.
[ Parent | on HN ]
Re:VeraCrypt 1.24 by chii on Tuesday October 08, 2019 @05:54AM (#21190424)
what do you suggest as an encryption tool for full-drive encryption?
[ Parent | on HN ]
Re:VeraCrypt 1.24 by iofiiiiiiiii on Tuesday October 08, 2019 @08:53AM (#21191677)
BitLocker is great, especially as it can also take advantage of a TPM to protect against evil maid attacks .

In contrast, VeraCrypt developers did not seem to understand what a TPM is when I tried to discuss the topic with them.

[ Parent | on HN ]
Re:VeraCrypt 1.24 by chii on Tuesday October 08, 2019 @10:09AM (#21192472)
dubious - i would not trust bitlocker as it is not open source, and you cannot have it audited.
[ Parent | on HN ]