Vulnerabilities In Windows Version TrueCrypt Discovered

In the Windows version of the ever popular encryption program TrueCrypt and the derivative Vera Crypt has a Google security researcher found leaking. It involves two different vulnerabilities allow a local attacker's rights on the system could increase.

The problems are caused by the way the encryption programs deal with drive letters and tokens. According to Mounir Idrassi, the developer of Vera Crypt, the problem with the drive letters a critical problem. In the case of Vera Crypt vulnerability is now patched in version 1.15, which will be released soon. TrueCrypt however, is no longer supported,allowing users of this software remain vulnerable.

Last year the developers of TrueCrypt indicated that they stopped supporting the software and it was unsafe to continue using the program. In response, decided to Idrassi Vera Crypt develop. It involves a fork, a spin-off on the original TrueCrypt source code is based. Idrassi however has made ​​several improvements to provide more protection. In addition, Vera Crypt actively supported.

TrueCrypt Alternative Vera Crypt Now Detects Evil Maid Attack

Last week, two new versions of TrueCrypt alternative Vera Crypt appeared. Vera Crypt was late last year by a French programmer launched . It involves a fork, an offshoot that is based on the original TrueCrypt source code. Developer Mounir Idrassi however has made ​​several improvements.

The latest update for the software dated from the beginning of April, but now there appeared two updates in a short time. The first update to version 1:12 fixes a problem when updating Vera Crypt on Windows 10, adds several options, includes several bug fixes and now makes it possible to detect Evil Maid attacks. An attacker who has physical access to a machine can provide encrypted bootloader encryption software from a keylogger.

Once the user then again seated and encryption password is entered behind the machine, which is stored by the keylogger. If the attacker for the second time has physical access to the machine, the stored password can be read and the attacker can log into the system. Because of the requirement to twice gain physical access to the system was the attack " Evil Maid named "because it would fit into a scenario where a malicious cleaner in a hotel execute the attack.

TrueCrypt did not have measures to protect users from this attack. Vera Crypt is however now able to "boot loader tampering" to detect and can then offer options to rectify this. Four days after the release of version 1:12 released version 1.13 . A bug in version 1:12 led to it that Tor is no longer working as it was started from an encrypted Vera Crypt volume. This is the only bugfix containing this version.