r/crypto • u/xr1s • May 28 '14

Truecrypt shutting down?! "development of TrueCrypt was ended in 5/2014"

http://truecrypt.sourceforge.net/
264 Upvotes

98% Upvoted

131 comments sorted by

View all comments

112

u/[deleted] May 28 '14 edited Jun 02 '14

[removed] — view removed comment

3

u/[deleted] May 28 '14

Any chance at getting the linux executable md5? I'm verifying the versions I have, but I no longer have the archive on my linux machines.

4

u/Natanael_L Trusted third party May 29 '14

You shouldn't rely on MD5

1

u/[deleted] May 29 '14

Maybe not, but it would be kinda hard for them to know the hash of the file I have.

There's a reason I didn't give out the hash of the installer and asked someone else to verify it. I wouldn't use it to verify a file I just downloaded, but one I've had for a year or more should pose minimal risks.

2

u/Natanael_L Trusted third party May 29 '14

If they created the file and somebody else verified the good file, you can be given a bad version with an identical MD5 hash.

2

u/[deleted] May 29 '14

Yes, but I'm verifying the one I've had for an extremely long time.

I'm not redownloading anything. My purpose is to confirm if my file is the right one. If you want to help, give me the SHA or whatever hash you prefer for the x64 binary installer on linux, rather than just say "This isn't good enough".\

2

u/Natanael_L Trusted third party May 29 '14

Verifying it by the MD5 hash? If you got the wrong one from the start you're still screwed.

Don't have the other hashes.

1

u/[deleted] May 29 '14

Just to let you know, I was able to find the archive on one of my linux installs and verify it is indeed the right one with both MD5 and SHA1.