On: CipherShed, the Truecrypt fork

[jbackus]

How close is this fork to the original source? The folks behind the Open Crypto Audit Project[1] have done a fantastic job auditing the security of Truecrypt and they're now doing the cryptanalysis. While an actively maintained fork is desirable, changes to the core dependencies will eliminate the benefits of the audit.

[1]: https://opencryptoaudit.org/

[david_shaw → jbackus]

That's very true, but if the Open Crypto Audit Project finds any TrueCrypt vulnerabilities, there will be no one around to fix them.

[blueskin_ → jbackus]

IIRC, it's forked from the audited version, both as that's the last one before TC got Lavabit'd, but also because they can then get straight to work on fixing any vulns the audit finds.