Best whole disk encryption setup

Networking/Security Forums -> Cryptographic Software and Hardware

Author: r.feakes PostPosted: Wed Apr 29, 2009 2:01 pm    Post subject: Best whole disk encryption setup
    ----
Hello everyone,

I need a full disk encryption system.

Windows Vista BitLocker I don't trust innately because Microsoft made it: (i) it's microsoft; (ii) my heart says there's a back door there.

I tried out PGP Desktop full disk at my work computer. It seems OK.

What do you guys use? recommend?

Price isn't an issue here because it is for my work system and we have an indefinite budget for this sort of stuff.

Could you give me some explanations about the different packages?

Also, most of these solutions don't offer plausible deniability, do they? What do you think the importance of this feature is?

Thanks for your opinions Smile

Author: capiLocation: Portugal PostPosted: Wed Apr 29, 2009 4:03 pm    Post subject:
    ----
Hello r.feakes,

I recommend you look into TrueCrypt.

Author: WhiteHatLocation: Italy PostPosted: Wed Apr 29, 2009 5:05 pm    Post subject: Re: Best whole disk encryption setup
    ----
I use LUKS file system.
You can choose the encryption algorithm, the key modulus, and you can set more than one passphrase.
Now, thanks to FreeOTFE, you can have LUKS also on Windows machines.

Author: Fire AntLocation: London PostPosted: Wed Apr 29, 2009 7:15 pm    Post subject:
    ----
Depends what your requirements are. For example, I need centralised management and recovery for I use PGP WDE. But I also use TrueCrypt for file encryption but I haven't looked into TrueCrypt Whole Disk.

Matt_s

Author: r.feakes PostPosted: Thu Apr 30, 2009 10:41 am    Post subject:
    ----
Hi guys,

Thanks a lot for this info.

TrueCrypt looks very attractive with its plausible deniability.

Do each of you trust the solutions not to have backdoors?

Thanks again.

Author: Fire AntLocation: London PostPosted: Thu Apr 30, 2009 6:07 pm    Post subject:
    ----
Yes I do trust them both. The source code is available for TrueCrypt and I have worked with PGP intensively Wink and can vouch for that.

Matt_s

Author: r.feakes PostPosted: Thu Apr 30, 2009 7:37 pm    Post subject:
    ----
and, matt_s, if I use truecrypt on my entire HDD (full disk):

(i) when is the key entered? bios? before OS startup? after OS startup?

(ii) is performance affected writing / reading? severely? on most pcs?

thanks so much.

Author: benzfire PostPosted: Wed Jul 08, 2009 6:33 am    Post subject:
    ----
i tried Truecrypt, yes it works but there is problem when i need to share my work files to my colleagues, you don't want to share your Truecrypt partition file, do you? i had another bad experience with truecrypt that i forgot my vault's pin and i had no way of open the vault till now. my company now uses [url=http://www.bloombase.com]Bloombase Keyparc[/ur] instead interesting it encrypts on the file level rather than full disk that i can send over the .kpp secured file thru emails to my friends and workmates.

Author: r.feakes PostPosted: Wed Jul 08, 2009 10:22 am    Post subject:
    ----
benzfire, thanks a lot for your case-study.

richard

Author: Trogdor54 PostPosted: Fri Oct 09, 2009 6:55 pm    Post subject:
    ----
Here is a tutorial on how to set up Truecrypt on WinXP;
http://blackopsecurity.net/wiki/index.php/TrueCrypt

Author: design0211 PostPosted: Tue Mar 22, 2011 8:37 am    Post subject: Whole disk encryption
    ----
I recommend you to visit the site http://www.suite101.com/content/best-file-system-and-whole-disk-encryption-software-for-windows-a229404 ,it gives complete information for your search.Hope it helps.

Author: maggiethomas PostPosted: Wed Dec 05, 2012 1:40 pm    Post subject:
    ----
Hi r.feakes,

I'll recommend you the best PGP whole disk encryption by Symantec



Networking/Security Forums -> Cryptographic Software and Hardware


output generated using printer-friendly topic mod, All times are GMT + 2 Hours

Page 1 of 1

Powered by phpBB 2.0.x © 2001 phpBB Group