On Sat, May 7, 2016 at 12:22 PM, Antonio Rojas arojas@archlinux.org wrote:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256

Wulf Richartz wrote:

...

Hello devs and list,

truecrypt 1:7.1a-3 is broken now for five month since the gcc ABI change and recompilation of truecrypt. Corresponding bug report: https://bugs.archlinux.org/task/47325

It would be fine, if there will be a "solution" for this package in the repository Extra, maybe going back to 1:7.1a-2?

regards Wulf

We should remove it. It doesn't make sense to ship a broken package that is unmaintained both upstream and downstream.

Maybe to be replaced with tc-play?

On 05/07/2016 01:08 PM, Abderrahman Najjar wrote:

On Sat, May 7, 2016 at 10:58 AM, Carsten Mattner carstenmattner@gmail.com wrote:

...

tc-play

​Why not VeraCrypt?​

For cryptography its also about trust and TrueCrypt still has zero problems that are related to its cryptographic security.

I don't say VeraCrypt is bad and don't want to judge about that at all in this statement, but it also depends from whom you want to protect your data and TrueCrypt has built up a very high trust level over a very long time period. Especially because of the anonymity of the dev(s) it was not able to think about upstream backdoor scenarios by blackmailing them (which is not a too absurd if you look at the current political discussions all over the world and 3-letter agencies going nuts).

TL;DR: It is still bad that it is broken... but I have already investigated this issue some time ago as I wanted to help to fix this (at the end I just forgot about it -.-). I'm volunteering to aid the current maintainer and propose a simple fix around next week. I still see enough value for TrueCrypt to keep it.

cheers, anthraxx