Page 1 of 1

[SOLVED] Truecrypt replacement

PostPosted: Feb 1st, '15, 14:08
by madeye
Is there still a software that works like truecrypt and is cross platform?
I've been looking around for the last couple of days without finding any references to others than truecrypt, which is to be avoided according to the creator.

Re: Truecrypt replacement

PostPosted: Feb 1st, '15, 15:00
by doktor5000
For linux there's LUKS and the windows analogon would be FreeOTFE
But it seems the author has disappeared and the development has stalled (some might say the project has been abandoned) but it works at least on windows and linux.
Seems there's a fork of this called DoxBox


Another fork of TrueCrypt called CipherShed
another that is called veracrypt
Some further crossplatform alternatives:
TruPax which is compatible to TrueCrypt volumes and implemented in Java
EncFS which can also be used for DropBox
tcplay which seems to be a TrueCrypt implementation from an archlinux contributor
zulucrypt which is a frontend for dmcrypt and tcplay and allows to e.g. easily open LUKS and TrueCrypt volumes
securstick which only seems to be for USB flash drives
https://www.aescrypt.com/

DiskCryptor does not seem to offer a linux version
eCrypFS does not seem to offer a windows version
Some time ago there was CrossCrypt but this seems dead and gone.

For more see e.g. http://softwarerecs.stackexchange.com/q ... -truecrypt


FWIW, for truecrypt the complete source code was published, so feel free to take a look at e.g.
https://www.grc.com/misc/truecrypt/truecrypt.htm
http://istruecryptauditedyet.com/
https://opencryptoaudit.org/reports/iSe ... ssment.pdf
https://madiba.encs.concordia.ca/~x_dec ... -analysis/

Re: Truecrypt replacement

PostPosted: Feb 1st, '15, 15:58
by Symbioxy
Thanks a lot doktor5000 for this list.

We can also mention another fork: http://www.gostcrypt.org/gostcrypt.php?langue=en I think it uses its own cypher and cannot read truecrypt files/drives.

Frankly, truecrypt is still working pretty well on my machine and there are so many forks and alternatives to be checked that my current policy is to do nothing...

Re: Truecrypt replacement

PostPosted: Feb 1st, '15, 15:59
by madeye
Thanks doc :-)

I'll check the different solutions and see which one will be "the one" for me.

A friend of mine also pointed me towards boxcryptor.com
Although it's neither open source nor free.

Re: Truecrypt replacement

PostPosted: Feb 1st, '15, 16:29
by doktor5000
madeye wrote:A friend of mine also pointed me towards boxcryptor.com
Although it's neither open source nor free.

Yep, boxcryptor classic is also what I looked at for dropbox, which you can the use on linux via EncFS.

Feel free to leave a reply once you've found what works for you :)

Re: [SOLVED] Truecrypt replacement

PostPosted: Feb 1st, '15, 19:44
by jiml8
With the way the world is today, I think I would assume automatically that any encryption software that was not open source contained a hidden backdoor or a hidden key. This, it seems to me, is the most secure assumption to make.

Re: [SOLVED] Truecrypt replacement

PostPosted: Feb 4th, '15, 15:45
by viking60
I think it is pretty obvious that Truecrypt has been "compromised". I have replaced it with ENCFS and also encrypted Dropbox with it.
In general encryption is still a good way to ensure your privacy - even according to Snowden.
Encfs works well.

http://bjoernvold.com/forum/viewtopic.php?f=11&t=3323

Re: [SOLVED] Truecrypt replacement

PostPosted: Feb 4th, '15, 18:49
by jiml8
I had not heard of encfs. Looks like it has taken the gruntwork out of using gpg. At least, I presume it is using gpg for the encryption.
.
You can also set up a container file using dd, mount it on the loop device, and encrypt it using cryptsetup with or without LUKS. This would work, effectively, just like dropbox (though lacking the hidden filesystem within the filesystem - which is a joke anyway since the whole world knows about it).

Or, you could do what I do, and that is simply refuse to use Dropbox or other public cloud services. I installed Owncloud on my NAS, got a dynamic DNS address for it from NoIP, force HTTPS connections, and that is how I synchronize everything. When I need to exchange and share files with clients, I give them an account on my NAS.

Re: [SOLVED] Truecrypt replacement

PostPosted: Feb 4th, '15, 19:13
by jiml8

Re: [SOLVED] Truecrypt replacement

PostPosted: Feb 4th, '15, 20:20
by viking60
Yes it is always a tradeoff.
Encfs is good for Dropbox and other Clouds because it does not reserve a load of space - like Truecrypt. There is no such thing as a 100% safe "cloud" though so the main thing is not to put your sensitive stuff out there.
Keeping it inhouse on your own server makes sense.

Re: [SOLVED] Truecrypt replacement

PostPosted: Feb 5th, '15, 22:51
by doktor5000
FWIW, if you're considering online storage, there's also https://mega.co.nz which offers end-to-end encryption.

Re: [SOLVED] Truecrypt replacement

PostPosted: Mar 18th, '18, 16:57
by morgano
Just updating this thread:
Of the alternatives mentioned we have EncFS and veracrypt.
I think they complement each other very nicely; EncFS do file by file, useful for i.e external sync as mentioned.

Veracrypt handle a filesystem encrypted into a file or partition.

viewtopic.php?f=7&t=12296&p=72201#p72201