ed.  One last note: if you store a Truecrypt volume in the "cloud", it's already compromised: you can compare differences between versions and derive the keys that way, since the data is being intercepted bit-by-bit at the ISP itself..  However it is quite an extrapolation to think that the hibernate file is somehow then passed across the internet.  Then again, if the FBI can get into Google I don't see why they can't get into wherever your truecrypt cloud provider is to access the memory and do decryption. Of course they would obviously need a serious reason to go to these lengths.  