• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Encryption of hd´s?

L

lynxlynx

n00b
Joined
Jun 9, 2004
Messages
61
I have been thinking of starting to encrypt my harddrives...I have several and several machines as well
Has anyone tried it yet? is the slowdown worth it?does it work safely?
I am planning to use a raid setup to increase speed later but dont know if a encryption will work on that.
Do you guys have any tips/clues that u can share on this topic?
Maybe some of you have tried it and have some setup tips and what app to use and more importantly what no to use!
and or is there any hardware encryption on the market that is available for the private market (ie cheap!)
TXH
Lynxlynx
 
First, I cannot answer if it is worth it without knowing what you need to protect. The value of encryption is based on the consequences of data compromise. If you only have a small portion of data to protect DriveCrypt by SecurStar will let you mount virtual hard disks that function with seamless encryption, although EFS in Win2k and above is capable of doing the same job, provided you use a strong logon password and disable single-DES. If you wish to encrypt the entire drive, several encloures/controller cards are available. Any hardware based solution will have a negligible impact on speed, thus RAID is not necessary. In fact, these cards do not support RAID. Try these links and let me know if this looks like what fits your needs.

http://www.envoydata.com/security/enova_pci64.htm
http://www.abit-usa.com/products/multimedia/secureide/
http://www.gizmodo.com/archives/kontron-infoguardian-encrypter-hard-drive-enclosure-015471.php
http://www.cruinc.com/htmldocs/products/Encryption dp5 plus.htm
 
Your biggest concern is who/what you're protecting this information from. If you're doing something of questionable legality, be aware that you can be compelled to hand over keys.
 
Snugglebear said:
Your biggest concern is who/what you're protecting this information from. If you're doing something of questionable legality, be aware that you can be compelled to hand over keys.
Click to expand...
Depends on the country, whether it is classified as self-incrimination or not. It is in USA, its not in Europe and most other parts of the world where cryptography is more restricted.
 
hi and thanks for your answers!
Well as most of you I might have stuff that I dont want the law to find..nothing serious...a film or 2 and some mp3´s....but mostly its for me(work) and being secure if I loose the disks in a breakin or something similar.I do want the encryption to stand up to goverment interest :) as I think they are the biggest threat and I want my solution to stand up to the best!

As to handing over keys..I dont think they can order me to remember stuff :)
you just have to way the punishment for not telling over what you have on your drive...

I would like to be all software when it comes to keys...a usb dongle is easy to find/loose.
Seems to be more unsafe than a code to remember I think.
I liked the last link the most...lookes to be something I could use! But the key seems to be supplied by the manufacturer?!
Have you or anyone tried the "CRU Encryption DataPort V Plus" ?

Thx!
 
M11 said:
Depends on the country, whether it is classified as self-incrimination or not. It is in USA, its not in Europe and most other parts of the world where cryptography is more restricted.
Click to expand...

It's not self-incrimination in the US; computerized records are computerized records, whether they're stored on someone else's email server, your own machine, or encrypted. The government can't compell you to testity against yourself (though in civil trials it can happen), but this is hard evidence, not testimony. If a judge wants to sit your butt in prison until you un-forget the key, he can do so provided there's a firm belief what's in that volume is relevant to the case/charges.
 
What goes in europe?
I dont know if they can make me remember...if the evidence is inside a container and they cant open it....maybe they can prosecute me for obstruction of justice but I dont think they can keep me in prison until I tell....eum or I hope not!! :rolleyes:
 
the "remembering a password" thing brings up an interesting question... would it be possible to set up an encryption where one password brings up a completely different set of data and destroys the other?
 
And Tawnos,

Why would i judge your extremely long syllabled unnecessary use of words caused by your exposure to ultramicroscopic silicon volcanic dust that has caused inflammation of you lungs.... to be useless and of no value?

Why?
 
Tawnos said:
the "remembering a password" thing brings up an interesting question... would it be possible to set up an encryption where one password brings up a completely different set of data and destroys the other?
Click to expand...

Yes, there are programs that do part of this. Essentially you have a honeypot encrypted container, the master/parent in effect, which you would surrender the key to. Inside that container is another that contains the real data which is accessed with an alternate password. Most programs like this don't let you write to the honeypot directly without destroying the underlying container. Some will destroy both with a `kill` password, but you have to figure your opponent will know this.

There are two problems with this. First, law enforcement sucked up a bunch of talent during the tech bomb and are wise to this trick, and second, they're sure as hell not going to use a program that's known to destroy the underlying data with a second `kill` password, much less any unfamiliar application. What they'll do is make byte copies of everything they want to play with and use your surrendered password to check it out. Once they know which app you use, they can setup their own clean app to decrypt the data with your password. So rather than destroying the data you're left with the honeypot again. If you can make that honeypot real convincing, power to you. Just don't store a few quicken files inside a multi-GB container and act like that's it. Besides, once they know what a zero or empty block hashes to, it's a quick check to see that most of that container is really filled with stuff. I suppose you could obfuscate things by filling your container's filesystem with garbage, random-seeded blocks and other crap, but it may not work.
 
^^Except that any good crypto program will use an IV and operate in CBC mode, and pad with random data. This nullifies known plaintext attacks.
 
Snugglebear said:
It's not self-incrimination in the US; computerized records are computerized records, whether they're stored on someone else's email server, your own machine, or encrypted. The government can't compell you to testity against yourself (though in civil trials it can happen), but this is hard evidence, not testimony. If a judge wants to sit your butt in prison until you un-forget the key, he can do so provided there's a firm belief what's in that volume is relevant to the case/charges.
Click to expand...
Check the Supreme Court ruling. The government cannot force you to decrypt files, but can prosecute you for encrypting then after you were aware an investigation was underway, under standard obstruction of justice laws.
 
CSx-2011 said:
And Tawnos,

Why would i judge your extremely long syllabled unnecessary use of words caused by your exposure to ultramicroscopic silicon volcanic dust that has caused inflammation of you lungs.... to be useless and of no value?

Why?
Click to expand...
in short, excuse my bs caused by the irritation in my throat ;)

why? because I said so
 
Tawnos said:
in short, excuse my bs caused by the irritation in my throat ;)

why? because I said so
Click to expand...

So that explains it...!!!
My throat is irritated too!!!


Has anyone else ever decoded the giant words?
 
M11 said:
^^Except that any good crypto program will use an IV and operate in CBC mode, and pad with random data. This nullifies known plaintext attacks.
Click to expand...

exactly...a encrypted 0 is no longer a 0...it should pad every bit on my drive/container with well..encryptioned data....once you unlock it will be a 0 again.
The container and/or drive should always be the same size....otherwise you could figure out whats inside...or atleast if it can be a large 700mb file :) or a 2 k txt file...

I read up on some drive encryptions...but there seems to be bugs in almost all of them :eek: if there forums are anything to go by.....
I was hoping for a falesafe prog well tested prog :(
Maybe the hardware ones are better...
 
I'm very interested in the products from Enova (They have designed the ABit Secure IDE chip).

But so far I'm waiting for a S-ATA product similar to the IDE, and then I'm happy.
I've emailed with them and they said they were expecting a S-ATA release soon

Thanks for your inquiry. Enova plans to introduce the SATA version X-Wall by 2Q, 04
Click to expand...
 
You must log in or register to reply here.
Back
Top