Comment Re:Backdoor in the source? (Score 1) 250
Nop, but now you know this has to be sorted out by code auditing, not by speculations about the official binaries. Baby steps.
Comment Re:Compiler can not be trusted (Score 3, Informative) 250
Visual C++ 1.52c is the last version that could generate 16-bit code, which is needed to compile part of the boot loader for full disk/system encryption. The other solution would have been to write all the thing in assembly (or replaced the portion with the pre-compiled code instead), but that wouldn't have made more people happy to reverse-engineer more assembly, would it?
Comment Re:'Now we know version v7.1a is not backdoored' (Score 1) 250
I meant, v7.1a is not backdoored *by the TrueCrypt developers between the sources and the binaries*, nothing more. I'll edit the sentence to make it clear.
Comment Re:worst grammar mistake they could make (Score 1) 250
Haha, sorry I wrote that too fast.
Submission + - How I compiled TrueCrypt for Windows and matched the official binaries (concordia.ca) 1
xavier2dc writes: TrueCrypt is a popular software enabling data protection by means of encryption for all categories of users. It is getting even more attention lately following the revelations of the NSA as the authors remain anonymous and no thorough security audit have yet been conducted to prove it is not backdoored in any way. This has led several concerns raised in different places, such as this blog post (http://www.privacylover.com/encryption/analysis-is-there-a-backdoor-in-truecrypt-is-truecrypt-a-cia-honeypot/), this one (http://brianpuccio.net/excerpts/is_truecrypt_really_safe_to_use), this security analysis (https://www.privacy-cd.org/downloads/truecrypt_7.0a-analysis-en.pdf) also related on that blog post (http://blog.cryptographyengineering.com/2013/10/lets-audit-truecrypt.html) from which the IsTrueCryptAuditedYet? (http://istruecryptauditedyet.com/) was born.
One of the recurring questions is: What if the binaries provided on the website were different than the source code and they included hidden features? To address this issue, I built the software from the official sources in a careful way and was able to match the officials binaries. According to my findings, all three recent major versions (v7.1a, v7.0a, v6.3a) exactly match the sources.
One of the recurring questions is: What if the binaries provided on the website were different than the source code and they included hidden features? To address this issue, I built the software from the official sources in a careful way and was able to match the officials binaries. According to my findings, all three recent major versions (v7.1a, v7.0a, v6.3a) exactly match the sources.
