Open-Source or FIPS-Validated Disk Encryption?

j_crane asks: "Our company is looking for disk encryption software that runs on Windows XP/2003 and Linux. There are hundreds of commercial disk encryption programs (most are Windows-only though). Some of them are FIPS-validated by the US NIST, but none of these are open-source. On the other hand, there is an excellent open-source on-the-fly disk encryption software, called TrueCrypt, for Windows and Linux (the program even provides plausible deniability), but it does not have a FIPS-validation. Which would you prefer -- open source or FIPS-validated -- and why?"

Re:plausible deniability

[Anonymous Coward]

> > Provides two levels of plausible deniability, in case an adversary forces you to reveal the password:
>
> What are you? A spy or something?

Naw, he's probably just a British subject or an American citizen.

DUHHH

[mboverload]

Put a Truecrypt volume inside of a FIPS one.
- mboverload