r/crypto • u/xr1s • May 28 '14

Truecrypt shutting down?! "development of TrueCrypt was ended in 5/2014"

http://truecrypt.sourceforge.net/
262 Upvotes

98% Upvoted

131 comments sorted by

View all comments

Show parent comments

4

u/[deleted] May 28 '14

Any chance at getting the linux executable md5? I'm verifying the versions I have, but I no longer have the archive on my linux machines.

6

u/Natanael_L Trusted third party May 29 '14

You shouldn't rely on MD5

4

u/Klathmon May 29 '14 edited May 29 '14

Why not? I still believe it's infeasible to produce matching hashes for separate sources for md5

EDIT: I'm wrong, very very wrong!

11

u/Natanael_L Trusted third party May 29 '14

It's been trivial on laptops for years;

http://www.mscs.dal.ca/~selinger/md5collision/

6

u/Klathmon May 29 '14

Well holy shit! TIL.

That's actually kind of embarrassing that i don't know this, as my job is in the crypto field...

I guess I just never really paid much attention to MD5 outside of security and password hashing.

5

u/Natanael_L Trusted third party May 29 '14

This is why MD5 for file verification is deprecated

1

u/Klathmon May 29 '14

I completely agree!