SharTech, le 29/05/2014 à 08:10
J'ai trouvé ce pertinent commentaire sur reddit:
"Probably not. One of the people involved in the recent Truecrypt audit thinks it's legit: https://twitter.com/matthew_d_green/status/471752508147519488
In addition, the new version allows people to decrypt containers, but not encrypt them. And then there's this:
Similarly, the posted version of TrueCrypt appears to be heavily modified, with critical features removed and a heavy dose of "INSECURE_APP" sprinkled through the code. Even so, it was certified with the official TrueCrypt signing key, which leads us to believe this might be the real thing.
An interesting turn of developments for sure."

Mais aussi ça:
For anyone looking for old versions, I suggest here:
https://github.com/DrWhax/truecrypt-archive

Comparing this source to the Github you referenced.
Truecrypt 7.1.dmg from Cyber:
SHA1SUM: a8b89bd1d645afd6cb662662a9aa17f16f66405b
MD5SUM: ac4afbd40705c49e8bf52c49a6b8d01b
Truecrypt 7.1.dmg from Github:
SHA1SUM: a8b89bd1d645afd6cb662662a9aa17f16f66405b
MD5SUM: ac4afbd40705c49e8bf52c49a6b8d01b
Truecrypt 7.1a.dmg from Cyber:
SHA1SUM: 16e6d7675d63fba9bb75a9983397e3fb610459a1
MD5SUM: 89affdc42966ae5739f673ba5fb4b7c5
Truecrypt 7.1a.dmg from Github:
SHA1SUM: 16e6d7675d63fba9bb75a9983397e3fb610459a1
MD5SUM: 89affdc42966ae5739f673ba5fb4b7c5
Truecrypt 7.1a.exe from Cyber:
SHA1SUM: 7689d038c76bd1df695d295c026961e50e4a62ea
MD5SUM: 7a23ac83a0856c352025a6f7c9cc1526
Truecrypt 7.1a.exe from Github:
SHA1SUM: 7689d038c76bd1df695d295c026961e50e4a62ea
MD5SUM: 7a23ac83a0856c352025a6f7c9cc1526

Je penche pour l'option Lavabit, ont-ils reçu une demande du gouvernement demander d'insérer une backdoor ? Ca semble probable. Ils ont vu comment ça s'est passé pour Lavar Levinson, ils n'ont pas stoppé le développement, ils proposent juste une version uniquement capable de déchiffrer. Malin, mais je pense qu'ils vont quand même se prendre une procès.
(Permalink)