Thursday, 29 May 2014

Truecrypt security announcement

Recent news online has suggested potential security problems with the popular encryption software, Truecrypt.

The official Truecrypt website has been modified and the version of Truecrypt available has been updated to 7.2. 

We need time to verify the claims made on the Truecrypt website. In the meantime we have carried out a risk assessment and our advice is as follows:

  • If you are using the previous version of Truecrypt* then you do not need to take any action at this time. Even if the claims are true then the risk to your data is negligible.
  • You must NOT download or attempt to use Truecrypt 7.2.
We are continuing to investigate and will provide further information as soon as possible. If you have any questions please contact the CiCS Helpdesk. 

*  You can find out what version of Truecrypt you are using by going to Help > About in the Truecrypt software. The previous version, 7.1a, was available from 2012 - May 27th 2014.