Hacker News Reader

What's your opinion of XTS in general for disk encryption?

Are there any known exploitations of weakness in XTS that might work their way back to TrueCrypt?

Most folks use TrueCrypt's disk encryption as a "file container", when they effectively want to encrypt files. Do you know of any tools (cross-platform or otherwise) that would provide the same UX as TrueCrypt while not relying on FDE?

View on HN

I think it's fine. For the limited threat model FDE is equipped to handle, XTS does the job.

I'm not sure what the best answer is to your second question. I wouldn't use TC for that. I would typically use PGP, but I don't think it has a good UX for general consumption. There may be room for someone to build a better product.

Coincidentally (?), You Don't Want XTS (2014) https://news.ycombinator.com/item?id=9312599 was re-posted today, opining on this question.

Reply on news.ycombinator.com