 One last note: if you store a Truecrypt volume in the "cloud", it's already compromised: you can compare differences between versions and derive the keys that way, since the data is being intercepted bit-by-bit at the ISP itself. 