[planetdoc]

TrueCrypt security audit presses on, despite developers jumping ship
(highlights)

Phase II of the TrueCrypt audit...involves a thorough cryptanalysis, including an audit of the TrueCrypt cipher suites, random number generators, and the way volumes are encrypted. In short, it will analyze the entire way encryption is implemented in the program.

White said the technical lead of Phase II is Thomas Ptacek, a widely respected security expert at Matasano who specializes in cryptographic protections. He'll be working closely with a variety of other highly regarded researchers, including Nate Lawson, a cryptographer at Root Labs. The work is expected to begin in June and wrap up by the end of September, White said.