Adding TrueCrypt

[mbnoimi]

I suggest to add [url=http://www.truecrypt.org/]TrueCrypt[/url] package to Mint repository because default Ubuntu and Debian don't include it.

TrueCrypt is a vital encryption solution for file containers and disks (partitions & full disks) and if I'm not wrong it's the only stable open source solution and it's available by default in many Linux distros (except Ubuntu based) so adding it to Mint repository would be distinguished addition.

[Orbmiser]

+1 and would also like to see it added there. As much easier to use cross OS'es and great usb traveler mode.
.

[BRKsays]

+1. I use Truecrypt often for encryption related tasks. Adding it to Mint repository would be great.

[Slash_Earth]

+1 for adding Truecrypt to Linux Mint.

[MishaSherpa]

Do a web search for "TC" + "audit" before you add anything like TC
TC has never had a thorough security audit, was written anonymously and was registered to the North Pole, at one point.
Do a wikipedia search also
Many things about TC are weird, weird, weird...

[dollyp]

Do a web search for "TC" + "audit" before you add anything like TC
TC has never had a thorough security audit, was written anonymously and was registered to the North Pole, at one point.
Do a wikipedia search also
Many things about TC are weird, weird, weird...

So if TC is not safe what other reliable software should we use?

David

[trapperjohn]

Truecrypt is well a established, open-source application. The code has been hammered over by the best in the Linux community. It has been carefully evaluated by the academic community and the law enforcement community. (Do a search from google scholar for: academic evaluation of truecrypt)

see also:
https://www.ncjrs.gov/App/Publications/ ... ?ID=257723

It is in the extra repository for Arch Linux.

It is an excellent choice for users and should be considered for inclusion in the Mint repository.

[Dyfi]

Below is a link to another good encryption tool - portable, standalone!

http://www.spi.dod.mil/ewizard.htm

[catweazel]

Do a web search for "TC" + "audit" before you add anything like TC
TC has never had a thorough security audit, was written anonymously and was registered to the North Pole, at one point.
Do a wikipedia search also
Many things about TC are weird, weird, weird...

Twit. Read the [url=http://www.truecrypt.org/downloads2]source code[/url].

[daveinuk]

I know nothing about this but out of interest searched and there was a crowdfunding appeal to raise money for an audit but why would people pay for it if the code is already available for anyone to scrutinize? If something was amiss then surely some very knowledgeable people in the open source community would have raised their hands already, or is that me being naive ?

[MishaSherpa]

Guys, perhaps you didnt find the article I was referring to. It's worth reading.
[url]http://blog.cryptographyengineering.com/2013/10/lets-audit-truecrypt.html[/url]
Some of your comments are inaccurate. Please read the article.

[MishaSherpa]

Truecrypt is well a established, open-source application. The code has been hammered over by the best in the Linux community. It has been carefully evaluated by the academic community and the law enforcement community. (Do a search from google scholar for: academic evaluation of truecrypt)
.snip.
It is an excellent choice for users and should be considered for inclusion in the Mint repository.

Trapper, I agree that TC should be CONSIDERED for inclusion after it's been examined thoroughly and bug bounties made available.
BTW, maybe ARS got it wrong?

For nearly a decade, TrueCrypt has been one of the trusty tools in a security-minded user’s toolkit. There’s just one problem: no one knows who created the software. Worse still, no one has ever conducted a full security audit on it—until now.

[url]http://arstechnica.com/security/2013/10/new-effort-to-fully-audit-truecrypt-raises-over-16000-in-a-few-short-weeks/[/url]

[MishaSherpa]

Twit. Read the [url=http://www.truecrypt.org/downloads2]source code[/url].

Can you please stay polite? A professor at Hopkins had concerns about potential differences between source and binaries in some end-user scenarios. [url]http://blog.cryptographyengineering.com/2013/10/lets-audit-truecrypt.html[/url]

Matthew Green
I'm a cryptographer and research professor at Johns Hopkins University. I've designed and analyzed cryptographic systems used in wireless networks, payment systems and digital content protection platforms. In my research I look at the various ways cryptography can be used to promote user privacy.

...but of course you're smarter than he is...

[catweazel]

Code: Select all

Can you please stay polite?

If I were to be impolite there would be absolutely no doubt about it, sonny.

A professor at Hopkins had concerns about potential differences between source and binaries in some end-user scenarios.

So? There's nothing stopping you compiling the code yourself. Besides, he's probably got a bad case of paranoia from the recent revelations about the NSA...

So what's wrong with Truecrypt?

Maybe nothing at all. Rest assured if I knew of a specific problem with Truecrypt, this post would have a very different title -- something with exclamation points and curse words and much wry humor. Let me be clear: I am not implying anything like this. Not even a little.

The fact that certain things cannot be precluded does not imply that they are included. The world would be a better place if logic was applied more often rather than emotive skriking about things that may not exist.

[mhogomchungu]

There is a GUI solution that use linux native support for truecrypt volumes.More info in this link[1]

There exists linux native solutions that can create and open truecrypt formatted encrypted volumes and hence there is no longer a need to use truecrypt binary program from trucrypt people.

tcplay[2] can create and open truecrypt volumes
cryptsetup[3] can open truecrypt volumes

[1] http://forums.linuxmint.com/viewtopic.php?f=58&t=151529&p=790130#p790130

[2] http://code.google.com/p/cryptsetup/

[3] https://github.com/bwalex/tc-play