Tuesday, October 13, 2015

The Latest in the TrueCrypt Saga

As you know TrueCrypt was mysteriously deprecated by its team of anonymous developers without explanation with recommendation to use Windows Bitlocker.  This was odd since the encryption integrity has passed a few independent audits.

Last week researchers at Google disclosed the TrueCrypt has a vulnerability that enables a user-level actor to escalate privileges to administrator-level access.

The good news: TrueCrypt volumes are still reliably encrypted.  But, its probably time to find another means of on-the-fly encryption.

https://www.grc.com/sn/sn-527.htm
http://www.pcworld.com/article/2987439/encryption/newly-found-truecrypt-flaw-allows-full-system-compromise.html