Why people still believe Truecrypt is much better than Veracrypt?

Wouldn’t consider him an expert. A lot of what he says is pretty dated and stuck in the 90s around some products he sells. What he says or doesn’t say about Truecrypt, is as irrelevant as anyone else as he isn’t a cryptographer nor does his background give him any special knowledge on the topic.

There have been a number of issues with TrueCrypt, the most well known one that I can remember is the weak number of rounds RIPEMD-160 used in the PBKDF function. The other security related issues, if i remember correctly related to the TrueCrypt Boot Loader.

If you don’t trust VeraCrypt, (which has had audits) and are on Linux why not use LUKS and be done with it, it uses the same crypto code in the Linux kernel as Wireguard, IPSec and other things like that and uses Argon2 for it’s key derivation function.

For modern Windows and macOS systems you’re still better off using the respective native encryption Bitlocker, FileVault etc, as both of those make use of the security processors on those platforms.

6 Likes