Eve / truecrypt-archive

Download as
Browse Code ยป

Commit 8dc5ccac8d396b037e1028d997967701c8bc6f9d

Authored by Stefan Sundin
1 parent 3ff610562a
Exists in master

Update README.md

Showing 1 changed file with 0 additions and 4 deletions Inline Diff

README.md View file @ 8dc5cca
# TrueCrypt Archive 1 1 # TrueCrypt Archive
2 2
This is a tin foil hat area. Please put on your tin foil hat before proceeding. 3 3 This is a tin foil hat area. Please put on your tin foil hat before proceeding.
4 4
Most of the files are from this collection: http://cyberside.net.ee/truecrypt/. A **BIG** thanks to 16systems and CyR for collecting! 5 5 Most of the files are from this collection: http://cyberside.net.ee/truecrypt/. A **BIG** thanks to 16systems and CyR for collecting!
6 6
7 7
## Missing files 8 8 ## Missing files
9 9
At least these files are missing. If you have any of them, or know of other files that have been released by the TrueCrypt developers, please contact me! One idea is that they may be found on magazine CDs. 10 10 At least these files are missing. If you have any of them, or know of other files that have been released by the TrueCrypt developers, please contact me! One idea is that they may be found on magazine CDs.
11 11
Most wanted: 12 12 Most wanted:
13 13
* `truecrypt-1.0a-source-code.zip` 14 14 * `truecrypt-1.0a-source-code.zip`
* `truecrypt-3.0.zip` 15 15 * `truecrypt-3.0.zip`
* `truecrypt-3.0-source-code.zip` 16 16 * `truecrypt-3.0-source-code.zip`
* `truecrypt-4.3.zip.sig` 17
* `truecrypt-4.3-source-code.zip` 18 17 * `truecrypt-4.3-source-code.zip`
* `truecrypt-4.3-source-code.zip.sig` 19 18 * `truecrypt-4.3-source-code.zip.sig`
* `truecrypt-4.3-source-code.tar.gz.sig` 20
* `TrueCrypt 5.0 Source.tar.gz.sig` 21 19 * `TrueCrypt 5.0 Source.tar.gz.sig`
* `TrueCrypt 5.1 Source.tar.gz` 22
* `TrueCrypt 5.1 Source.tar.gz.sig` 23
24 20
Not as important: 25 21 Not as important:
26 22
* `truecrypt-4.2a-ubuntu-5.10-x86.tar.gz` 27 23 * `truecrypt-4.2a-ubuntu-5.10-x86.tar.gz`
* `truecrypt-4.2a-ubuntu-5.10-x86.tar.gz.sig` 28 24 * `truecrypt-4.2a-ubuntu-5.10-x86.tar.gz.sig`
* `truecrypt-4.3a-ubuntu-6.06-x86.tar.gz` 29 25 * `truecrypt-4.3a-ubuntu-6.06-x86.tar.gz`
* `truecrypt-4.3a-ubuntu-6.06-x86.tar.gz.sig` 30 26 * `truecrypt-4.3a-ubuntu-6.06-x86.tar.gz.sig`
* `truecrypt-4.3a-ubuntu-7.04-x64.tar.gz` 31 27 * `truecrypt-4.3a-ubuntu-7.04-x64.tar.gz`
* `truecrypt-4.3a-ubuntu-7.04-x64.tar.gz.sig` 32 28 * `truecrypt-4.3a-ubuntu-7.04-x64.tar.gz.sig`
* `truecrypt-4.3a-ubuntu-7.04-x86.tar.gz` 33 29 * `truecrypt-4.3a-ubuntu-7.04-x86.tar.gz`
* `truecrypt-4.3a-ubuntu-7.04-x86.tar.gz.sig` 34 30 * `truecrypt-4.3a-ubuntu-7.04-x86.tar.gz.sig`
* `truecrypt-4.3a-opensuse-10.2-x86.tar.gz.sig` 35 31 * `truecrypt-4.3a-opensuse-10.2-x86.tar.gz.sig`
* `TrueCrypt 5.0 Leopard Intel.dmg` 36 32 * `TrueCrypt 5.0 Leopard Intel.dmg`
* `TrueCrypt 5.0 Leopard Intel.dmg.sig` 37 33 * `TrueCrypt 5.0 Leopard Intel.dmg.sig`
* `TrueCrypt 5.0 Leopard PowerPC.dmg` 38 34 * `TrueCrypt 5.0 Leopard PowerPC.dmg`
* `TrueCrypt 5.0 Leopard PowerPC.dmg.sig` 39 35 * `TrueCrypt 5.0 Leopard PowerPC.dmg.sig`
* `TrueCrypt 5.0 Tiger Intel.dmg` 40 36 * `TrueCrypt 5.0 Tiger Intel.dmg`
* `TrueCrypt 5.0 Tiger Intel.dmg.sig` 41 37 * `TrueCrypt 5.0 Tiger Intel.dmg.sig`
* `TrueCrypt 5.0 Tiger PowerPC.dmg` 42 38 * `TrueCrypt 5.0 Tiger PowerPC.dmg`
* `TrueCrypt 5.0 Tiger PowerPC.dmg.sig` 43 39 * `TrueCrypt 5.0 Tiger PowerPC.dmg.sig`
* `truecrypt-5.0-opensuse-x86.tar.gz` 44 40 * `truecrypt-5.0-opensuse-x86.tar.gz`
* `truecrypt-5.0-opensuse-x86.tar.gz.sig` 45 41 * `truecrypt-5.0-opensuse-x86.tar.gz.sig`
* `truecrypt-5.0-ubuntu-x86.tar.gz.sig` 46 42 * `truecrypt-5.0-ubuntu-x86.tar.gz.sig`
* `TrueCrypt 5.0a Leopard Intel.dmg.sig` 47 43 * `TrueCrypt 5.0a Leopard Intel.dmg.sig`
* `TrueCrypt 5.0a Leopard PowerPC.dmg` 48 44 * `TrueCrypt 5.0a Leopard PowerPC.dmg`
* `TrueCrypt 5.0a Leopard PowerPC.dmg.sig` 49 45 * `TrueCrypt 5.0a Leopard PowerPC.dmg.sig`
* `TrueCrypt 5.0a Tiger Intel.dmg` 50 46 * `TrueCrypt 5.0a Tiger Intel.dmg`
* `TrueCrypt 5.0a Tiger Intel.dmg.sig` 51 47 * `TrueCrypt 5.0a Tiger Intel.dmg.sig`
* `TrueCrypt 5.0a Tiger PowerPC.dmg` 52 48 * `TrueCrypt 5.0a Tiger PowerPC.dmg`
* `TrueCrypt 5.0a Tiger PowerPC.dmg.sig` 53 49 * `TrueCrypt 5.0a Tiger PowerPC.dmg.sig`
* `truecrypt-5.1-ubuntu-x86.tar.gz` 54 50 * `truecrypt-5.1-ubuntu-x86.tar.gz`
* `truecrypt-5.1-ubuntu-x86.tar.gz.sig` 55 51 * `truecrypt-5.1-ubuntu-x86.tar.gz.sig`
* `TrueCrypt 6.3 Mac OS X.dmg.sig` 56 52 * `TrueCrypt 6.3 Mac OS X.dmg.sig`
* `truecrypt-4.2a-fedora-core-4-x86.tar.gz.sig` 57 53 * `truecrypt-4.2a-fedora-core-4-x86.tar.gz.sig`
* `truecrypt-4.2a-fedora-core-5-x86.tar.gz.sig` 58 54 * `truecrypt-4.2a-fedora-core-5-x86.tar.gz.sig`
59 55
60 56
## Past versions 61 57 ## Past versions
62 58
The TrueCrypt website offers downloads of _past versions_. Currently they offer versions 7.0a, 6.3a and 5.1a for Windows, while only 7.0a and 6.3a for Mac OS X and Linux. I found this interesting note in the version history: 63 59 The TrueCrypt website offers downloads of _past versions_. Currently they offer versions 7.0a, 6.3a and 5.1a for Windows, while only 7.0a and 6.3a for Mac OS X and Linux. I found this interesting note in the version history:
64 60
> Note: TrueCrypt 4.3a and 5.1a have been repackaged to contain the latest version of the TrueCrypt License introduced with TrueCrypt 6.0 (the original application and driver binaries of those old versions have not been modified; however, the installer used for those new packages was compiled using the source code of TrueCrypt 6.0, not TrueCrypt 5.1a). 65 61 > Note: TrueCrypt 4.3a and 5.1a have been repackaged to contain the latest version of the TrueCrypt License introduced with TrueCrypt 6.0 (the original application and driver binaries of those old versions have not been modified; however, the installer used for those new packages was compiled using the source code of TrueCrypt 6.0, not TrueCrypt 5.1a).
66 62
See [License History](doc/License-History.md) for more information. 67 63 See [License History](doc/License-History.md) for more information.
68 64
69 65
## Verifying the integrity 70 66 ## Verifying the integrity
71 67
There are three public keys from the TrueCrypt developers. 72 68 There are three public keys from the TrueCrypt developers.
73 69
1. `TrueCrypt_Team_PGP_public_key.asc` 74 70 1. `TrueCrypt_Team_PGP_public_key.asc`
* This is the first key, used only for version 1.0 and 1.0a. 75 71 * This is the first key, used only for version 1.0 and 1.0a.
* pgpdump: `Public key creation time - Mon Jan 26 21:02:14 CET 2004` 76 72 * pgpdump: `Public key creation time - Mon Jan 26 21:02:14 CET 2004`
2. `TrueCrypt_Foundation_PGP_public_key.asc` 77 73 2. `TrueCrypt_Foundation_PGP_public_key.asc`
* This key has been used for version 2.0 and later. 78 74 * This key has been used for version 2.0 and later.
* pgpdump: `Public key creation time - Sun Jun 6 11:13:17 CEST 2004` 79 75 * pgpdump: `Public key creation time - Sun Jun 6 11:13:17 CEST 2004`
3. `TrueCrypt-Foundation-Public-Key.asc` 80 76 3. `TrueCrypt-Foundation-Public-Key.asc`
* This is the key that is currently available for download at truecrypt.org. As an exercise, make sure that the key in this repo is authentic. 81 77 * This is the key that is currently available for download at truecrypt.org. As an exercise, make sure that the key in this repo is authentic.
* This key has the same fingerprint as the previous key, but pgpdump reveals that it is composed differently. 82 78 * This key has the same fingerprint as the previous key, but pgpdump reveals that it is composed differently.
* Both Foundation keys can verify the same files. 83 79 * Both Foundation keys can verify the same files.
* Same creation time as the previous key, but the date `Tue Mar 20 22:52:24 CET 2007` can be seen in pgpdump output. Presumably this is when this file was released (the day after 4.3 was released). 84 80 * Same creation time as the previous key, but the date `Tue Mar 20 22:52:24 CET 2007` can be seen in pgpdump output. Presumably this is when this file was released (the day after 4.3 was released).
85 81
I am not a cryptography expert, so I do not know the significance the second Foundation key presents. It is evident however, that the TrueCrypt developers have difficulty deciding what they want to call themselves and what email address they use. 86 82 I am not a cryptography expert, so I do not know the significance the second Foundation key presents. It is evident however, that the TrueCrypt developers have difficulty deciding what they want to call themselves and what email address they use.
87 83
1. `TrueCrypt Team <mail@truecrypt.org>` 88 84 1. `TrueCrypt Team <mail@truecrypt.org>`
2. `TrueCrypt Foundation <info@truecrypt-foundation.org>` 89 85 2. `TrueCrypt Foundation <info@truecrypt-foundation.org>`
3. `TrueCrypt Foundation <contact@truecrypt.org>` 90 86 3. `TrueCrypt Foundation <contact@truecrypt.org>`
91 87
This is all very interesting, but let's get on to verifying the signature files. 92 88 This is all very interesting, but let's get on to verifying the signature files.
93 89
94 90
### Importing keys 95 91 ### Importing keys
96 92
``` 97 93 ```
gpg --import TrueCrypt_Team_PGP_public_key.asc TrueCrypt-Foundation-Public-Key.asc 98 94 gpg --import TrueCrypt_Team_PGP_public_key.asc TrueCrypt-Foundation-Public-Key.asc
``` 99 95 ```
100 96
You can import `TrueCrypt_Foundation_PGP_public_key.asc` too, if you'd like. 101 97 You can import `TrueCrypt_Foundation_PGP_public_key.asc` too, if you'd like.
102 98
103 99
### Trust the keys 104 100 ### Trust the keys
105 101
``` 106 102 ```
gpg --edit-key "TrueCrypt Team" trust quit 107 103 gpg --edit-key "TrueCrypt Team" trust quit
gpg --edit-key "TrueCrypt Foundation" trust quit 108 104 gpg --edit-key "TrueCrypt Foundation" trust quit
``` 109 105 ```
110 106
Select option 5, _I trust ultimately_. 111 107 Select option 5, _I trust ultimately_.
112 108
113 109
### Verify the files 114 110 ### Verify the files
115 111
I made a bash script, like so: 116 112 I made a bash script, like so:
117 113
``` 118 114 ```
#!/bin/bash 119 115 #!/bin/bash
for f in *.sig 120 116 for f in *.sig
do 121 117 do
echo "Verifying '$f'" 122 118 echo "Verifying '$f'"
gpg --verify "$f" 123 119 gpg --verify "$f"
echo 124 120 echo