Veracrypt vs Truecrypt - which is better?
I am looking to encrypt a few drives of mine, and my ONLY interest is security. It is OK if my VeraCrypt volumes are not compatible with TrueCrypt, and vice versa.
There is a lot of talk about "TrueCrypt is dead" and it seems there are two forks out there now gaining momentum. The one more interesting to me is VeraCrypt, and from the research I have done, this looks like the "more secure" option. But is that so?
That is why I am asking you all here. I know what VeraCrypt claims, I know they say they do more hash iterations of the password to derive the encryption keys. That sounds nice and all, but... Does anyone have real world experience using Veracrypt and is it as good as advertised? How does it compare to TrueCrypt? Does anyone have a security reason why they would choose TrueCrypt over VeraCrypt? Any reasons at all why TrueCrypt is preferable to you?
I'm not on the "TrueCrypt is dead" bandwagon, I am just trying to be progressive, so I would choose a newer "better" option if it is available. But with that being said, I would also choose to go with the older option if it is actually better than the newer options. Your thoughts?
From Veracrypt vs Truecrypt Use VeraCrypt.
As of September 26th 2015, google's security researchers found a couple of vulnerabilities that affect TrueCrypt 7.1a and VeraCrypt 1.14
they are CVE-2015-7358 and CVE-2015-7359
On September 26th, 2015 VeraCrypt released 1.15 which fixes those vulnerabilities. On October 17th, 2016, VeraCrypt's audit by the QuarksLab was completed and as a result, VeraCrypt version 1.19 was released to address vulnerabilities found.
Sources:
http://www.pcworld.com/article/2987439/encryption/newly-found-truecrypt-flaw-allows-full-system-compromise.html
https://veracrypt.codeplex.com/wikipage?title=Release Notes