Hacker News new | past | comments | ask | show | jobs | submit login

Anybody use this yet? What's the legitimacy of this compared to Truecrypt's fallen domain?

I see that actually list the developers which is nice. But unfortunately I'm not too familiar with the big name's in cryptography software.




Reading the "news" section, they actually still haven't made any changes, they just managed to compile it!

Some other place that forked the TrueCrypt sources to some repo (VeraCrypt) managed to change a few constants and make the containers incompatible. At least they addressed a known TC weakness: the low number of PBKDF2 passes.

Finally, the contribution of the TruCrypt.ch (TCNext) is that they put the original sources and binaries behind a new domain name and wrote "TrueCrypt must not die."

In short, it's easy to put other's work behind a new domain or in another repo, it's hard and costly to do the real development.


The fact that developers are known and are mostly US based means you shouldn't trust their product. Any of them can be silenced by a secret gag order and forced to introduce a backdoor/weakness, and there isn't much they would be able to do other than move to Russia and reveal it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: