Tony's ramblings on Open Source Software, Life and Photography

Dumping PGP Whole Disk Encryption in favor of OSS TrueCrypt

I've had several "subscriptions" for PGP Whole Disk Encryption. What I didn't truly understand when I spent my ungodly amount of money on them was that after a year you don't just stop getting "subscription support." If you don't re-up, your hard drives decrypt and the software is crippled. Apparently now they are offering a "perpetual license" for less than I paid for my "subscriptions."

Yeah... how nice. Talk about money down the drain.

I also attempted over a week ago to contact their customer support because I purchased the original licenses through CDW and I no longer use them as a vendor. The only response I received was an automated "someone will contact you within 24 hours." Apparently their 24 hours is much, much longer than mine.

So, I'm now in the process of decrypting several laptops (12 hour process each), then installing TrueCrypt, a free open-source package that provides the same functionality of PGP Desktop, and re-encrypting the drives with the new software.

Now in fairness I'd tried TrueCrypt 5 before I purchased the PGP Desktop software and it had issues with two of the machines I tried it on. TrueCrypt 6 works perfectly across the board. No hiccups, no issues, just beautiful security. Oh, and their support forums are more responsive than the commercial company's paid support department. Go figure.

Another nice tidbit: NOWHERE in the PGP Desktop help or online faq could I find any information about how to decrypt the drive prior to uninstalling the software. They conveniently skip right over that because, hey, why would you not want to be their customer?

Score one for Open Source Software.


Categories:
Anonymous 1337's picture

Also has steganography

TrueCrypt is the true underdog these days. They have also implemented steganographic features, something PGP probably will not do, ever. PGP was originally geared towards protection of individual privacy, now they are fully corporate. TrueCrypt is still protecting individual liberty and privacy.

Anonymous n00b's picture

Now it's gone to Symantec...

And it seems there's no open-source version anywhere on their site, so there can't be independent verification of the existence / non-existence of any back-door in the software. Not being paranoid...

A few years ago I too looked at PGP as an option of full disc encryption; didn't realize that on expiry of a subscription your drive got decrypted, as you noted. Nasty.

Long story short, I settled for TrueCrypt and have not looked back. TC has additional features such as plausible deniability that I have not needed to use (I just like the knowledge that a lost laptop, hard drive or USB stick, is "just a piece of hardware" and I don't need to worry about the data seeping out).