How I Compiled TrueCrypt For Windows and Matched the Official Binaries

First time accepted submitter xavier2dc writes "TrueCrypt is a popular software enabling data protection by means of encryption for all categories of users. It is getting even more attention lately following the revelations of the NSA as the authors remain anonymous and no thorough security audit have yet been conducted to prove it is not backdoored in any way. This has led several concerns raised in different places, such as this blog post, this one, this security analysis [PDF], also related on that blog post from which IsTrueCryptAuditedYet? was born. One of the recurring questions is: What if the binaries provided on the website were different than the source code and they included hidden features? To address this issue, I built the software from the official sources in a careful way and was able to match the official binaries. According to my findings, all three recent major versions (v7.1a, v7.0a, v6.3a) exactly match the sources."

Comments

But can you trust xavier2dc?

[Anonymous Coward]

But can you trust xavier2dc? It's turtles all the way down.

Re:But can you trust xavier2dc?

[Impy the Impiuos Imp]

Yah, really.

Wait! But what if I, myself, am an NSA stooge and don't realize it?

Re:But can you trust xavier2dc?

[paiute]

OK, but how do I compile xavier2dc? Is the source even available?

Step 1: Find his mother

Re:But can you trust xavier2dc?

[tippe]

Lets give him the Voight-Kampff test and find out...

Re:But can you trust xavier2dc?

[Grog6]

If there's DNA on your Backdoor, you've just been rooted!

(sorry; but this IS /.) :)

Re:But can you trust xavier2dc?

[IndustrialComplex]

You'll need to provide us with your source code.

I'll provide you my source code, but just remember, you asked for it. So no complaining to the police when it is delivered.

Re:But can you trust Microsoft Visual C++

[Dishevel]

I don't. I build all of code in hardware. That is rendered in MineCraft.