TrueCrypt security audit is good news, so why all the glum faces?
Summary
The ongoing audit of the TrueCrypt whole-disk encryption tool used by millions of privacy and security enthusiasts has reached an important milestone—a detailed review of its cryptographic underpinnings that found no backdoors or fatal flaws. "The NCC audit found no evidence of deliberate backdoors, or any severe design flaws that will make the software insecure in most instances." If the current source code couldnt be borrowed to create an independent version of the program, developers would have to start from scratch, an undertaking that could take years. With little more than the vague and unsubstantiated advisory, millions of TrueCrypt users had little choice than to hope it was overstated and that the security and cryptographic fundamentals of the program were nonetheless sound. "The loss of TrueCrypts developers is keenly felt by a number of people who rely on full disk encryption to protect their data," Green wrote.