Re: Disk encryption tools...?

From: WinTerMiNator (me_at_privacy.net)
Date: 11/28/04 

Date: Sun, 28 Nov 2004 12:43:44 +0100

Paul Cooper wrote:
> On Sat, 27 Nov 2004 21:52:30 +0100, "WinTerMiNator" <me@privacy.net>
> wrote:
>
>> Yes, they are aware (this point has been discussed in
>> "alt.security.scramdisk") but apparently don't want to change it
>> (note that Truecrypt developers are anonymous, and I can only guess
>> that I have discussed with them).
>
> You can talk to the developers
> (http://truecrypt.sourceforge.net/contact.php)

I still don't know who they are, since they are anonymous, though I have my
own opinion on this topic ;-)

>
> In fact, there is nothing to update. When you compare the version of
> OpenSSL that E4M and TrueCrypt use with the newer version of OpenSSL,
> there are no significant changes.

I don't know if those changes are not significant. In that case, why did the
changes were done in OpenSSL library? ;-)

>
>> It's based on a robust system file driver, FileDisk from Bo Barten,
>> plus crypto from loop-aes and libtomcrypt. Less bells and whistles,
>> less bugs or uncompatibilities than TrueCrypt.
>
> It would be fair to mention that quite a lot of people reported that
> their "system became prone to blue screens" after installing
> CrossCrypt. Google the alt.security.scramdisk newsgroup for more info.

I personally reported a blue screen + system crash while incorrectly trying
to install CrossCrypt on a Nt4 system, in contradiction with its
documentation that says it is written for Windows 2000 and XP. I don't know
of any other blue screen report.

Other problem reported with CrossCrypt was a kind of "saturation" while
writing to a large container. This was coming from original driver Filedsik,
and has been corrected with a new release of Filedisk, used for compiling
the lates CrossCrypt version.

> The only issue that TrueCrypt has had was that, with certain antivirus
> packages, it crashes when you try to dismount a volume. Personally, I
> have never had any problem with TrueCrypt (I am using
> www.free-av.com). It's fast and very stable.

With some anti viruses, and with CD-ROM UDFS writing software. TrueCrypt
seems to have difficults to reside on a system with other softwares
performing low-level disk access. No problem if you don't use this kind of
software, problem if you do. And the developers have never shown any will to
correct this. Moreover, most of discusses in alt.security.scramdisk about
this topic were of the kind "don't use your scrap software thet doesn't work
with TrueCrypt"!

> Regards,
> Paul

Regards, 

-- 
Michel Nallino aka WinTerMiNator
http://www.winterminator.fr.st (Internet et sécurité)
http://www.gnupgwin.fr.st (GnuPG pour Windows)
Adresse e-mail invalide; pour me contacter:
http://www.cerbermail.com/?vdU5HHs5WG

Relevant Pages

  • Re: Truecrypt - developers are somewhat suspicious!
    ... developers are somewhat suspicious. ... you will find that those posts will mysteriously disappear. ... Then don't use truecrypt. ... if you're gonna troll at least post something abit more ...
    (sci.crypt)
  • Re: Looking for Good Encrytion Software
    ... >>It is alleged that crosscrypt volumes are accessible from Linux. ... I use Truecrypt for encrypting partitions and have had no problems. ...
    (sci.crypt)
  • Re: Disk encryption tools...?
    ... > positive recommendation of CrossCrypt. ... > give potential downloaders of CrossCrypt such a biased information and ... Like most softwares, TrueCrypt, CrossCrypt, FreeOTFE have to release several ... http://www.winterminator.fr.st http://www.gnupgwin.fr.st (GnuPG pour Windows) Adresse e-mail invalide; ...
    (sci.crypt)
  • Re: Disk encryption tools...?
    ... that the bug he mentions was fixed in TrueCrypt 2.0. ... "Data corruption will no longer occur when a TrueCrypt partition is ... Also note that I was not comparing TrueCrypt with CrossCrypt (although ... discussions and balanced information. ...
    (sci.crypt)
  • Re: TrueCrypt 4.0 Out
    ... >>TrueCrypt encrypted data from random plaintext. ... >Then you can report back. ...
    (sci.crypt)