[liberationtech] TrueCrypt: Status of Community Effort to keep on developments

[Fabio Pietrosanti (naif)]

Hi all,

all of us know that there is some little problem with TrueCrypt software
project, with some yet unknown understanding of behind the scene facts.

However TrueCrypt a widely used software, it deserve to be restored and
it's development be maintained during time.

I read several initiatives that propose to do something to keep it's
development, such as:
- http://Truecrypt.ch
- http://Geekcrypt.net

Also others are going to start similar approaches.

We should ask WHO should do it , with which APPROACH and with which
RESOURCES?

WHO:
Who is going to takeover TrueCrypt project seriously should be an entity
(foundation, consortium, coalition, etc) of multiple players coming from
a different environments from the civil society.

APPROACH:
The approach should be to focus on a multi-stakeholders approach, with
players from the accademia, from hacking/crypto environment, from the
NGO's environment, from the encryption markets, from the "grants and
funding" of such projects.

RESOURCES:
To do something like that for sure it's required to allocate a certain
amount of resources in terms of engineering for new developments,
bugfixing, release management, documentation, advocacy, security audits, etc
Such resources obviously have a costs, so someone should bring also a
financial effort.

I know also about some company willing to provide development effort for
such a public public interests project, to keep it maintained in the future.

So, my open questions to:
- Shouldn't a coalition be started up lead such a TrueCrypt
recovery/takeover effort?
- Which other organizations are already considering such an effort?
- Who should be the right funders/donors to contribute financially to
such effort?

I think we should likely try map the organizations willing to work on
such TrueCrypt recovery/takeover to partners together.

-- 
Fabio Pietrosanti (naif)
HERMES - Center for Transparency and Digital Human Rights
http://logioshermes.org - http://globaleaks.org - http://tor2web.org