TrueCrypt 7.1 w/ [OS X 64-bit support] | Hacker News Reader

TrueCrypt 7.1 w/ [OS X 64-bit support]

truecrypt.org

34 pointsplainOldText17 comments

I wonder if they yet support full disk encryption on mac. That's been the missing feature for years.

Would there be any reason to use it over Lion's full disk encryption?

I do not think it would offer anything over Lion's encryption. The real hope would be support, I think, for hidden OS. The TrueCrypt Boot Loader has been absent from the Mac versions because the full disk encryption has been. I do not know why.

I suppose, then, a reason to use it over Lion's encryption would be to gain the boot loader and hidden OS feature.

People who want a fully open-source solution might prefer TrueCrypt. Are there any guarantees that Apple's solution doesn't have a backdoor?

If you don't trust Apple's FDE solution to not have a backdoor, you probably shouldn't use their operating system at all, as it has access to all of your data.

People usually aren't trying to protect their drive contents with encryption while the drive is mounted and the computer is running. If the drive is encrypted, anyone trying to gain access won't care if OSX has a backdoor because it will all be encrypted in the volume. The only thing that will matter is a backdoor allowing decryption of the volume.

You could use your argument to state that someone paranoid enough to use encryption just shouldn't use a computer at all.

i may be mistaken, but it's my understanding that TrueCrypt is not actually fully open source.

My understanding is that it's not considered "true" open source by many people, because of the license that it's released under, but their website gives easy access to all the source code.

Yes, for when you want portable virtual disks to put in places like DropBox. We don't trust drop box for sensitive/important stuff and we trust Truecrypt more.

Great for shuffling stuff to your accountant actually! And heck of a lot faster and cheaper than FedEx.

You're going to do full disk encryption, and then upload your entire disk to Drop Box? Seems kinda strange…

Answer in haste on a small screen and realize mmaro's question isn't on the top level. Bugger!

So, no is the answer and thanks for graciously pointing my mistake out and allowing me to correct. Truecrypt really is a great transport for smallish disks on an untrusted network. Whole disks on Dropbox probably = insane.

I wasn't under the impression this was 1> Pre-boot or 2> Actually the whole disk or 3> Functional and TRIMtastic with SSDs 4> Allowing central, on site management of backup keys

Do you have anything to show that it's comparable to say, PGP's offering?

I looked at doing it about a year ago (before Lion) and it's a big project - the current implementation just uses FUSE, and a real IOKit driver has to be created or it'll never be bootable. On top of that, EFI support has to be implemented, and it's a completely different animal than the BIOS hooks that are used for the Windows version.

With FDE support in Lion, and the level of polish that's already there in Apple's implementation, it really wouldn't be worth the level of effort involved to implement.

This really needs to end up in Macports. I have the macports installed MacFUSE for a different program, and I can't use Truecrypt with that "version" of MacFUSE for some reason.

i wanted to use truecrypt but realized it doesn't do dynamic/sparse file volumes, which macosx disk utility supports. does anyone know of an opensource alternative which has this feature?

You wouldn't be able to do hidden volumes in such a manner.

You can create a(n encrypted) sparse bundle which is a set of files that represents a disk image. Then on top of that image you can create a TrueCrypt volume that is quick-formatted. That might do what you want.

Reply on news.ycombinator.com