Well, now that TrueCrypt seems to be abandoned (http://truecrypt.sourceforge.net/) - what about the future of Kryptos?

It is still good enough to prevent some random guy reading your data but I would not trust your trade secrets remain secret. With appropriate warnings Kryptos is still useable to protect sensitive data which is not interest to greater powers, IMO.


[ Edited by itix 31.05.2014 - 20:34 ]

You might want to check out https://www.grc.com/misc/truecrypt/truecrypt.htm and then http://truecrypt.ch/


- CISC

Truecrypt Never worked for me. It just wouldnt decrypt my Volumes or partition. Too bad, Sounds like a good and useful tool.

https://www.schneier.com/blog/archives/2014/05/truecrypt_wtf.html#c6346384

Quote:
Your trade secrets I might trust, but perhaps not those of my own

Anyway, the official story is "The software might not be secure, migrate to Microsoft solution."

Unless I had access to the relevant sources by Microsoft, I wouldn't be too trusting about data being more secure there, especially with news like this coming to a light...

Quote:
Why would it be any different in this case?

What I mean to say, the claimed reasons for ending the project seem rather dodgy to me. The fact that the original development team has stopped development doesn't automatically make any solution based on it less secure overnight.

You want to keep something secret? Don't use a computer. Period.

There's news of TrueCrypt having a serious vulnerability, that will allow full system compromise.

Sounds pretty dramatic, doesn't it?

Actually reading the article reveals it's:
1)On windows and
2)It's a privilege escalation issue.

Well, whenever someone uses any MorphOS system that's not locked in some way, he already has pretty "full" privileges, so I can't see this affecting MorphOS at all...

Of course if it DOES affect MorphOS, I have no doubt our core developers wouldn't be fixing this for future releases.

There are multiple follow-ups to TrueCrypt. It would be nice if MorphOS upgraded to one of these, best VeraCrypt or CipherShed:

http://en.wikipedia.org/wiki/VeraCrypt
https://en.wikipedia.org/wiki/CipherShed

useful Shell toolbox:
https://github.com/bwalex/tc-play/blob/master/README.md

Quote:
AFAIK, MorphOS doesn't use TrueCrypt, but instead, "Something based on TrueCrypt".

Of course this brings up couple of questions:
1)Are any found vulnerabilities also present in MorphOS version? (The latest one which I linked, I'd say no)
2)Have any follow-up projects improved the parts of code that MorphOS Kryptos is actually using?
3)Do any changes make it more impractical for MorphOS? (like getting slower due to increased security)

My guess would be, large amounts of modifications might be for how it's used on Windows / Linux / OSX.