IsTrueCryptAuditedYet? In Part!

[peterw]

I often look at the page http://istruecryptauditedyet.com/ to see if they keep their promise. http://opencryptoaudit.org/ wanted to check Truecrypt and they finally did it. The report is available!

The Open Crypto Audit Project1 engaged iSEC Partners to review select parts of the TrueCrypt 7.1a disk encryption software.
This included reviewing the bootloader and Windows kernel driv-er for any system backdoors as well as any other security related issues.

The iSEC team reviewed the TrueCrypt 7.1a source code, which is publicly available as a zip ar-chive (“truecrypt 7.1a source.zip”) at http://www.truecrypt.org/downloads2.

They started with the bootloader and the kernel driver and found no backdoors but some bad code. Nothing is critical but some things have to be corrected. A good sign for all truecrypt users.