Read for instance the comments appended to Brian Krebs' article -Īnd the Wilders Security contributors also think there's something very strange going onīruce Schneier is sitting on the fence : he doesn't know anything either but he's given links to other sites who also don't know much.Īs for the download on the Sourceforge site, DON'T DOWNLOAD IT !Īccording to theRegister, the download is highly suspect.Įven more worrying, The Reg has confirmed that a binary TrueCrypt 7.2 installer for Windows, downloaded from the TrueCrypt SourceForge site, contained the same text found on the rewritten homepage – confirming the download has also been fiddled with amid today's website switcheroo.ĭon't run that binary! Someone has built versions of TrueCrypt from vandalised source code (click to enlarge) The story has been picked up and is being discussed and debated in a number of places. Message was edited by: Hayton on 30/05/14 00:27:22 IST Until we're absolutely certain this whole thing is not a hoax, a hack, or the result of some unpleasantness on the part of one of the Acronyms, it might be better not to download it. I don't think it is, but I'm waiting for more information to emerge.Įdit - The website is inviting users to download a decrypt-only version of TrueCrypt. The advice in the TrueCrypt website to switch to Bitlocker is also somewhat strange, and some users are wondering if this whole thing is a hoax. There has been speculation that they were served with a demand by the NSA, FBI or some other agency to weaken the encryption or put in a backdoor to allow covert decryption, and that this was accompanied by a gagging order forbidding them to reveal the existence of the demand and this is their way of alerting TrueCrypt users to this (shades of Lavabit) but so far there has been no convincing explanation of the reason for TrueCrypt's demise. They say that since Microsoft ended support for XP TrueCrypt is no longer secure and are advising users to drop it and move to some other disk encryption product. It looks as if the open-source developers of TrueCrypt have decided to pull the plug on its development.

Truecrypt 7.2 is it secure