‘Notification about intercepted VeraCrypt emails was an error’

QuarksLab CEO Fred Raynal informed Threatpost that posting a notice about potentially intercepted emails about the VeraCrypt audit was an error. The missing emails are most likely a local issue.

Raynal explains that there were problems with missing emails between him and the people behind VeraCrypt and Ostif, the organization that organizes the audit. After that, Ostif CEO Derek Zimmer posted a message on the organization’s site. On this, Raynal says he shouldn’t have done this and that the problem on his side was probably between his mail application and GPGMail, which can send pgp e-mails.

In the original message, Ostif claimed that the four missing emails indicated that a third party had intercepted these messages. In these emails, details were exchanged about the upcoming audit of the VeraCrypt encryption software. This is performed by QuarksLab. Ostif has not responded to requests for comment by Threatpost.

The results of the audit are expected in September. The research also extends to the efi bootloader, which, according to VeraCrypt developer Mounir Idrassi, is the software’s most important and critical improvement over predecessor TrueCrypt. This option again allows users to encrypt their entire hard drive.