I am by far no expert in this field, but according to the makers of TrueCrypt (www.truecrypt.org), the key is NOT stored on the disk. So if you use a good strong password (who uses weak passwords these days?) then the attacker will not be able to gain access to your encrypted partition/drive.

I use this software on my laptop to protect sensitive data, hopefully it's as secure as they say it is.

You can find their FAQ here: http://www.truecrypt.org/faq.php

TrueCtrypt, btw, is a free and open-source, which should make the people that think they're backdoors planted in this stuff happy.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/393/33369#33369