View previous topic :: View next topic |
Author |
Message |
r.feakes Just Arrived
Joined: 29 Apr 2009 Posts: 0
|
Posted: Wed Apr 29, 2009 2:01 pm Post subject: Best whole disk encryption setup |
|
|
Hello everyone,
I need a full disk encryption system.
Windows Vista BitLocker I don't trust innately because Microsoft made it: (i) it's microsoft; (ii) my heart says there's a back door there.
I tried out PGP Desktop full disk at my work computer. It seems OK.
What do you guys use? recommend?
Price isn't an issue here because it is for my work system and we have an indefinite budget for this sort of stuff.
Could you give me some explanations about the different packages?
Also, most of these solutions don't offer plausible deniability, do they? What do you think the importance of this feature is?
Thanks for your opinions
|
|
Back to top |
|
|
capi SF Senior Mod
Joined: 21 Sep 2003 Posts: 16777097 Location: Portugal
|
Posted: Wed Apr 29, 2009 4:03 pm Post subject: |
|
|
Hello r.feakes,
I recommend you look into TrueCrypt.
|
|
Back to top |
|
|
WhiteHat Just Arrived
Joined: 23 Nov 2005 Posts: 0 Location: Italy
|
Posted: Wed Apr 29, 2009 5:05 pm Post subject: Re: Best whole disk encryption setup |
|
|
I use LUKS file system.
You can choose the encryption algorithm, the key modulus, and you can set more than one passphrase.
Now, thanks to FreeOTFE, you can have LUKS also on Windows machines.
|
|
Back to top |
|
|
Fire Ant Trusted SF Member
Joined: 27 Jun 2008 Posts: 3 Location: London
|
Posted: Wed Apr 29, 2009 7:15 pm Post subject: |
|
|
Depends what your requirements are. For example, I need centralised management and recovery for I use PGP WDE. But I also use TrueCrypt for file encryption but I haven't looked into TrueCrypt Whole Disk.
Matt_s
|
|
Back to top |
|
|
r.feakes Just Arrived
Joined: 29 Apr 2009 Posts: 0
|
Posted: Thu Apr 30, 2009 10:41 am Post subject: |
|
|
Hi guys,
Thanks a lot for this info.
TrueCrypt looks very attractive with its plausible deniability.
Do each of you trust the solutions not to have backdoors?
Thanks again.
|
|
Back to top |
|
|
Fire Ant Trusted SF Member
Joined: 27 Jun 2008 Posts: 3 Location: London
|
Posted: Thu Apr 30, 2009 6:07 pm Post subject: |
|
|
Yes I do trust them both. The source code is available for TrueCrypt and I have worked with PGP intensively and can vouch for that.
Matt_s
|
|
Back to top |
|
|
r.feakes Just Arrived
Joined: 29 Apr 2009 Posts: 0
|
Posted: Thu Apr 30, 2009 7:37 pm Post subject: |
|
|
and, matt_s, if I use truecrypt on my entire HDD (full disk):
(i) when is the key entered? bios? before OS startup? after OS startup?
(ii) is performance affected writing / reading? severely? on most pcs?
thanks so much.
|
|
Back to top |
|
|
benzfire Just Arrived
Joined: 08 Jul 2009 Posts: 0
|
Posted: Wed Jul 08, 2009 6:33 am Post subject: |
|
|
i tried Truecrypt, yes it works but there is problem when i need to share my work files to my colleagues, you don't want to share your Truecrypt partition file, do you? i had another bad experience with truecrypt that i forgot my vault's pin and i had no way of open the vault till now. my company now uses [url=http://www.bloombase.com]Bloombase Keyparc[/ur] instead interesting it encrypts on the file level rather than full disk that i can send over the .kpp secured file thru emails to my friends and workmates.
|
|
Back to top |
|
|
r.feakes Just Arrived
Joined: 29 Apr 2009 Posts: 0
|
Posted: Wed Jul 08, 2009 10:22 am Post subject: |
|
|
benzfire, thanks a lot for your case-study.
richard
|
|
Back to top |
|
|
Trogdor54 Just Arrived
Joined: 09 Oct 2009 Posts: 0
|
|
Back to top |
|
|
design0211 Just Arrived
Joined: 03 Mar 2011 Posts: 0
|
|
Back to top |
|
|
maggiethomas Lurker
Joined: 20 Sep 2012 Posts: 14
|
Posted: Wed Dec 05, 2012 1:40 pm Post subject: |
|
|
Hi r.feakes,
I'll recommend you the best PGP whole disk encryption by Symantec
|
|
Back to top |
|
|
|