Commit 02be6065ae63d26fb46da24980287e1ffb21c1d8
1 parent
e3e390d88e
Exists in
master
Added truecrypt-4.2a to the missing list for fc4 and fc5
Showing 1 changed file with 2 additions and 0 deletions Inline Diff
README.md
View file @
02be606
| # TrueCrypt Archive | 1 | 1 | # TrueCrypt Archive | |
| 2 | 2 | |||
| This is a tin foil hat area. Please put on your tin foil hat before proceeding. | 3 | 3 | This is a tin foil hat area. Please put on your tin foil hat before proceeding. | |
| 4 | 4 | |||
| Most of the files are from this collection: http://cyberside.net.ee/truecrypt/. A **BIG** thanks to 16systems and CyR for collecting! | 5 | 5 | Most of the files are from this collection: http://cyberside.net.ee/truecrypt/. A **BIG** thanks to 16systems and CyR for collecting! | |
| 6 | 6 | |||
| 7 | 7 | |||
| ## Missing files | 8 | 8 | ## Missing files | |
| 9 | 9 | |||
| At least these files are missing. If you have any of them, or know of other files that have been released by the TrueCrypt developers, please contact me! One idea is that they may be found on magazine CDs. | 10 | 10 | At least these files are missing. If you have any of them, or know of other files that have been released by the TrueCrypt developers, please contact me! One idea is that they may be found on magazine CDs. | |
| 11 | 11 | |||
| Most wanted: | 12 | 12 | Most wanted: | |
| 13 | 13 | |||
| * `truecrypt-1.0a-source-code.zip` | 14 | 14 | * `truecrypt-1.0a-source-code.zip` | |
| * `truecrypt-3.0.zip` | 15 | 15 | * `truecrypt-3.0.zip` | |
| * `truecrypt-3.0-source-code.zip` | 16 | 16 | * `truecrypt-3.0-source-code.zip` | |
| * `truecrypt-4.3.zip.sig` | 17 | 17 | * `truecrypt-4.3.zip.sig` | |
| * `truecrypt-4.3-source-code.zip` | 18 | 18 | * `truecrypt-4.3-source-code.zip` | |
| * `truecrypt-4.3-source-code.zip.sig` | 19 | 19 | * `truecrypt-4.3-source-code.zip.sig` | |
| * `truecrypt-4.3-source-code.tar.gz.sig` | 20 | 20 | * `truecrypt-4.3-source-code.tar.gz.sig` | |
| * `TrueCrypt 5.0 Source.tar.gz.sig` | 21 | 21 | * `TrueCrypt 5.0 Source.tar.gz.sig` | |
| * `TrueCrypt 5.1 Source.tar.gz` | 22 | 22 | * `TrueCrypt 5.1 Source.tar.gz` | |
| * `TrueCrypt 5.1 Source.tar.gz.sig` | 23 | 23 | * `TrueCrypt 5.1 Source.tar.gz.sig` | |
| 24 | 24 | |||
| Not as important: | 25 | 25 | Not as important: | |
| 26 | 26 | |||
| * `truecrypt-4.2a-ubuntu-5.10-x86.tar.gz` | 27 | 27 | * `truecrypt-4.2a-ubuntu-5.10-x86.tar.gz` | |
| * `truecrypt-4.2a-ubuntu-5.10-x86.tar.gz.sig` | 28 | 28 | * `truecrypt-4.2a-ubuntu-5.10-x86.tar.gz.sig` | |
| * `truecrypt-4.3a-ubuntu-6.06-x86.tar.gz` | 29 | 29 | * `truecrypt-4.3a-ubuntu-6.06-x86.tar.gz` | |
| * `truecrypt-4.3a-ubuntu-6.06-x86.tar.gz.sig` | 30 | 30 | * `truecrypt-4.3a-ubuntu-6.06-x86.tar.gz.sig` | |
| * `truecrypt-4.3a-ubuntu-7.04-x64.tar.gz` | 31 | 31 | * `truecrypt-4.3a-ubuntu-7.04-x64.tar.gz` | |
| * `truecrypt-4.3a-ubuntu-7.04-x64.tar.gz.sig` | 32 | 32 | * `truecrypt-4.3a-ubuntu-7.04-x64.tar.gz.sig` | |
| * `truecrypt-4.3a-ubuntu-7.04-x86.tar.gz` | 33 | 33 | * `truecrypt-4.3a-ubuntu-7.04-x86.tar.gz` | |
| * `truecrypt-4.3a-ubuntu-7.04-x86.tar.gz.sig` | 34 | 34 | * `truecrypt-4.3a-ubuntu-7.04-x86.tar.gz.sig` | |
| * `truecrypt-4.3a-opensuse-10.2-x86.tar.gz.sig` | 35 | 35 | * `truecrypt-4.3a-opensuse-10.2-x86.tar.gz.sig` | |
| * `TrueCrypt 5.0 Leopard Intel.dmg` | 36 | 36 | * `TrueCrypt 5.0 Leopard Intel.dmg` | |
| * `TrueCrypt 5.0 Leopard Intel.dmg.sig` | 37 | 37 | * `TrueCrypt 5.0 Leopard Intel.dmg.sig` | |
| * `TrueCrypt 5.0 Leopard PowerPC.dmg` | 38 | 38 | * `TrueCrypt 5.0 Leopard PowerPC.dmg` | |
| * `TrueCrypt 5.0 Leopard PowerPC.dmg.sig` | 39 | 39 | * `TrueCrypt 5.0 Leopard PowerPC.dmg.sig` | |
| * `TrueCrypt 5.0 Tiger Intel.dmg` | 40 | 40 | * `TrueCrypt 5.0 Tiger Intel.dmg` | |
| * `TrueCrypt 5.0 Tiger Intel.dmg.sig` | 41 | 41 | * `TrueCrypt 5.0 Tiger Intel.dmg.sig` | |
| * `TrueCrypt 5.0 Tiger PowerPC.dmg` | 42 | 42 | * `TrueCrypt 5.0 Tiger PowerPC.dmg` | |
| * `TrueCrypt 5.0 Tiger PowerPC.dmg.sig` | 43 | 43 | * `TrueCrypt 5.0 Tiger PowerPC.dmg.sig` | |
| * `truecrypt-5.0-opensuse-x86.tar.gz` | 44 | 44 | * `truecrypt-5.0-opensuse-x86.tar.gz` | |
| * `truecrypt-5.0-opensuse-x86.tar.gz.sig` | 45 | 45 | * `truecrypt-5.0-opensuse-x86.tar.gz.sig` | |
| * `truecrypt-5.0-ubuntu-x86.tar.gz.sig` | 46 | 46 | * `truecrypt-5.0-ubuntu-x86.tar.gz.sig` | |
| * `TrueCrypt 5.0a Leopard Intel.dmg.sig` | 47 | 47 | * `TrueCrypt 5.0a Leopard Intel.dmg.sig` | |
| * `TrueCrypt 5.0a Leopard PowerPC.dmg` | 48 | 48 | * `TrueCrypt 5.0a Leopard PowerPC.dmg` | |
| * `TrueCrypt 5.0a Leopard PowerPC.dmg.sig` | 49 | 49 | * `TrueCrypt 5.0a Leopard PowerPC.dmg.sig` | |
| * `TrueCrypt 5.0a Tiger Intel.dmg` | 50 | 50 | * `TrueCrypt 5.0a Tiger Intel.dmg` | |
| * `TrueCrypt 5.0a Tiger Intel.dmg.sig` | 51 | 51 | * `TrueCrypt 5.0a Tiger Intel.dmg.sig` | |
| * `TrueCrypt 5.0a Tiger PowerPC.dmg` | 52 | 52 | * `TrueCrypt 5.0a Tiger PowerPC.dmg` | |
| * `TrueCrypt 5.0a Tiger PowerPC.dmg.sig` | 53 | 53 | * `TrueCrypt 5.0a Tiger PowerPC.dmg.sig` | |
| * `truecrypt-5.1-ubuntu-x86.tar.gz` | 54 | 54 | * `truecrypt-5.1-ubuntu-x86.tar.gz` | |
| * `truecrypt-5.1-ubuntu-x86.tar.gz.sig` | 55 | 55 | * `truecrypt-5.1-ubuntu-x86.tar.gz.sig` | |
| * `TrueCrypt 6.3 Mac OS X.dmg.sig` | 56 | 56 | * `TrueCrypt 6.3 Mac OS X.dmg.sig` | |
| 57 | * `truecrypt-4.2a-fedora-core-4-x86.tar.gz.sig` | |||
| 58 | * `truecrypt-4.2a-fedora-core-5-x86.tar.gz.sig` | |||
| 57 | 59 | |||
| 58 | 60 | |||
| ## Past versions | 59 | 61 | ## Past versions | |
| 60 | 62 | |||
| The TrueCrypt website offers downloads of _past versions_. Currently they offer versions 7.0a, 6.3a and 5.1a for Windows, while only 7.0a and 6.3a for Mac OS X and Linux. I found this interesting note in the version history: | 61 | 63 | The TrueCrypt website offers downloads of _past versions_. Currently they offer versions 7.0a, 6.3a and 5.1a for Windows, while only 7.0a and 6.3a for Mac OS X and Linux. I found this interesting note in the version history: | |
| 62 | 64 | |||
| > Note: TrueCrypt 4.3a and 5.1a have been repackaged to contain the latest version of the TrueCrypt License introduced with TrueCrypt 6.0 (the original application and driver binaries of those old versions have not been modified; however, the installer used for those new packages was compiled using the source code of TrueCrypt 6.0, not TrueCrypt 5.1a). | 63 | 65 | > Note: TrueCrypt 4.3a and 5.1a have been repackaged to contain the latest version of the TrueCrypt License introduced with TrueCrypt 6.0 (the original application and driver binaries of those old versions have not been modified; however, the installer used for those new packages was compiled using the source code of TrueCrypt 6.0, not TrueCrypt 5.1a). | |
| 64 | 66 | |||
| See [License History](doc/License-History.md) for more information. | 65 | 67 | See [License History](doc/License-History.md) for more information. | |
| 66 | 68 | |||
| 67 | 69 | |||
| ## Verifying the integrity | 68 | 70 | ## Verifying the integrity | |
| 69 | 71 | |||
| There are three public keys from the TrueCrypt developers. | 70 | 72 | There are three public keys from the TrueCrypt developers. | |
| 71 | 73 | |||
| 1. `TrueCrypt_Team_PGP_public_key.asc` | 72 | 74 | 1. `TrueCrypt_Team_PGP_public_key.asc` | |
| * This is the first key, used only for version 1.0 and 1.0a. | 73 | 75 | * This is the first key, used only for version 1.0 and 1.0a. | |
| * pgpdump: `Public key creation time - Mon Jan 26 21:02:14 CET 2004` | 74 | 76 | * pgpdump: `Public key creation time - Mon Jan 26 21:02:14 CET 2004` | |
| 2. `TrueCrypt_Foundation_PGP_public_key.asc` | 75 | 77 | 2. `TrueCrypt_Foundation_PGP_public_key.asc` | |
| * This key has been used for version 2.0 and later. | 76 | 78 | * This key has been used for version 2.0 and later. | |
| * pgpdump: `Public key creation time - Sun Jun 6 11:13:17 CEST 2004` | 77 | 79 | * pgpdump: `Public key creation time - Sun Jun 6 11:13:17 CEST 2004` | |
| 3. `TrueCrypt-Foundation-Public-Key.asc` | 78 | 80 | 3. `TrueCrypt-Foundation-Public-Key.asc` | |
| * This is the key that is currently available for download at truecrypt.org. As an exercise, make sure that the key in this repo is authentic. | 79 | 81 | * This is the key that is currently available for download at truecrypt.org. As an exercise, make sure that the key in this repo is authentic. | |
| * This key has the same fingerprint as the previous key, but pgpdump reveals that it is composed differently. | 80 | 82 | * This key has the same fingerprint as the previous key, but pgpdump reveals that it is composed differently. | |
| * Both Foundation keys can verify the same files. | 81 | 83 | * Both Foundation keys can verify the same files. | |
| * Same creation time as the previous key, but the date `Tue Mar 20 22:52:24 CET 2007` can be seen in pgpdump output. Presumably this is when this file was released (the day after 4.3 was released). | 82 | 84 | * Same creation time as the previous key, but the date `Tue Mar 20 22:52:24 CET 2007` can be seen in pgpdump output. Presumably this is when this file was released (the day after 4.3 was released). | |
| 83 | 85 | |||
| I am not a cryptography expert, so I do not know the significance the second Foundation key presents. It is evident however, that the TrueCrypt developers have difficulty deciding what they want to call themselves and what email address they use. | 84 | 86 | I am not a cryptography expert, so I do not know the significance the second Foundation key presents. It is evident however, that the TrueCrypt developers have difficulty deciding what they want to call themselves and what email address they use. | |
| 85 | 87 | |||
| 1. `TrueCrypt Team <mail@truecrypt.org>` | 86 | 88 | 1. `TrueCrypt Team <mail@truecrypt.org>` | |
| 2. `TrueCrypt Foundation <info@truecrypt-foundation.org>` | 87 | 89 | 2. `TrueCrypt Foundation <info@truecrypt-foundation.org>` | |
| 3. `TrueCrypt Foundation <contact@truecrypt.org>` | 88 | 90 | 3. `TrueCrypt Foundation <contact@truecrypt.org>` | |
| 89 | 91 | |||
| This is all very interesting, but let's get on to verifying the signature files. | 90 | 92 | This is all very interesting, but let's get on to verifying the signature files. | |
| 91 | 93 | |||
| 92 | 94 | |||
| ### Importing keys | 93 | 95 | ### Importing keys | |
| 94 | 96 | |||
| ``` | 95 | 97 | ``` | |
| gpg --import TrueCrypt_Team_PGP_public_key.asc TrueCrypt-Foundation-Public-Key.asc | 96 | 98 | gpg --import TrueCrypt_Team_PGP_public_key.asc TrueCrypt-Foundation-Public-Key.asc | |
| ``` | 97 | 99 | ``` | |
| 98 | 100 | |||
| You can import `TrueCrypt_Foundation_PGP_public_key.asc` too, if you'd like. | 99 | 101 | You can import `TrueCrypt_Foundation_PGP_public_key.asc` too, if you'd like. | |
| 100 | 102 | |||
| 101 | 103 | |||
| ### Trust the keys | 102 | 104 | ### Trust the keys | |
| 103 | 105 | |||
| ``` | 104 | 106 | ``` | |
| gpg --edit-key "TrueCrypt Team" trust quit | 105 | 107 | gpg --edit-key "TrueCrypt Team" trust quit | |
| gpg --edit-key "TrueCrypt Foundation" trust quit | 106 | 108 | gpg --edit-key "TrueCrypt Foundation" trust quit | |
| ``` | 107 | 109 | ``` | |
| 108 | 110 | |||
| Select option 5, _I trust ultimately_. | 109 | 111 | Select option 5, _I trust ultimately_. | |
| 110 | 112 | |||
| 111 | 113 | |||
| ### Verify the files | 112 | 114 | ### Verify the files | |
| 113 | 115 | |||
| I made a bash script, like so: | 114 | 116 | I made a bash script, like so: | |
| 115 | 117 | |||
| ``` | 116 | 118 | ``` | |
| #!/bin/bash | 117 | 119 | #!/bin/bash | |
| for f in *.sig | 118 | 120 | for f in *.sig | |
| do | 119 | 121 | do | |
| echo "Verifying '$f'" | 120 | 122 | echo "Verifying '$f'" | |
| gpg --verify "$f" | 121 | 123 | gpg --verify "$f" | |
| echo | 122 | 124 | echo |