ISEC Completes TrueCrypt Audit

https://isecpartners.github.io/news/2014/04/14/iSEC-Completes-Truecrypt-Audit.html

by sweis • 12 years ago

34 8 12 years ago

isecpartners.github.io

jlgaddis• 12 years ago

FTA:

"iSEC did not identify any issues considered "high severity" during this testing. iSEC found no evidence of backdoors or intentional flaws. Several weaknesses and common kernel vulnerabilities were identified, including kernel pointer disclosure, but none of them appeared to present immediate exploitation vectors. All identified findings appeared accidental."

pearjuice• 12 years ago

This might be my tinfoil hat speaking, but could this be disinfo?

skrowl• 12 years ago

Couldn't ANY security audit performed by ANYONE be disinfo?

Couldn't your pointing out that it might be disinfo also be disinfo in itself?

Oh crap, infinite loop!

mml• 12 years ago

Highly unlikely. iSEC is widely regarded as one of the best in the business. Having worked with those folks, I can see why.

At some point, you have to trust someone, even if they are out to get you.

at-fates-hands2• 12 years ago

"...while TrueCrypt does not have the most polished programming style, there is nothing immediately dangerous to report."

Classic. Taking a dig at the developers while telling the rest of the world TrueCrypt is ok to use.

eitland• 12 years ago

This seems matter-of-factish to me as long as they can defend it. (Hey, some of the code tha I've written to save people time and money does not have a very polished style, -that is a matter of fact and I'm fine with that.)

at-fates-hands2• 12 years ago

I was just pointing it out since it wasn't really necessary to even include in the report. I agree though. I've written some God awful code that gets the job done, but would be hell to try and refactor.

molticrystal• 12 years ago

ISEC Complete PHASE I of the TrueCrypt Audit, this is just of the driver and loading software, phase II is cryptanalysis.

ISEC Completes TrueCrypt Audit

Related Stories