Encryption software

[Beetnik]

About to have a contract confirmed which will mean we'll need to have 6-8 people out in the field with laptops and some pretty sensitive data.

Encryyption software is not something I have much knowledge of - any recommendations?

Need to encrypt the whole disk and happy to pay for a solution - i.e. it needs to work, be simple and have some support if anything goes wrong.

 

[WLeg]

PGP Desktop.


To me they are the original and the best.......

 

[Sp!ke]

You could just use EFS, Its free and built into windows and seamless. Just right click the folder, then properties, then tick the box to encrypt. I wouldnt do the whole disc though, just folders &/0r certain file types.

Make sure you have good backups (unencrypted) & at least two accounts able to decrypt the files.

 

[Beetnik]

@ Sp!ke - that would rely on the employees taking responsibility! Needs to encrypt the whole disk when windows shuts down.

 

[Sp!ke]

It depends on your organisation and how much contol you have... you can use EFS assistant to force encryption on chosen file types.

Vista Enterprise and Windows 7 allows full disk encryption. I wouldnt risk it with XP, better to enforce Citrix or similar with all data on server if data is sensitive. You could also make a VM for people to use and lock it right down.

Hardware FDE is now built into modern HDD's, which could be another consideration.

 

[agatward]

We use TrueCrypt, which is open source and is also simple enough for academic staff to use (so must be easy!).

TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows Vista/XP, Mac OS X and Linux

 

[stevesey]

GuardianEdge

 

[columb]

We use TrueCrypt, which is open source and is also simple enough for academic staff to use (so must be easy!).

TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows Vista/XP, Mac OS X and Linux

Highly recommended!

I think that's best software ever! And allows you to dodge UK law by giving only password to system which you want them to see. no way to prove that there is other data!

Cheers
Chris

 

[Dryce]

Need to encrypt the whole disk and happy to pay for a solution - i.e. it needs to work, be simple and have some support if anything goes wrong.

TrueCrypt is a reasonable option (mentioned elsewhere).

However if you need something commercial then Becrypt or Stonewood are available at commercial grades.

 

[masqueraid]

SafeBoot? unfortunately now bought out by McAfee but still a good product - now sold as McAfee Endpoint Encryption.

 

[Beetnik]

Thanks everyone - I've managed to wangle (almost) free upgrades on some new lappies to Vista Ultimate (and upgrades to Windows 7 in October) which has encryption built in so I'll give that a whirl first. Hopefully this plus fingerprint recognition will do the job.

... sits back and waits for all to tell him why it's no good ...!!

 

[markmifsud]

We use TrueCrypt, which is open source and is also simple enough for academic staff to use (so must be easy!).

TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows Vista/XP, Mac OS X and Linux

I use truecrypt also, very good encrytion and easy to use

 

[Sp!ke]

Thanks everyone - I've managed to wangle (almost) free upgrades on some new lappies to Vista Ultimate (and upgrades to Windows 7 in October) which has encryption built in so I'll give that a whirl first. Hopefully this plus fingerprint recognition will do the job.

... sits back and waits for all to tell him why it's no good ...!!

Just make sure that there is a recovery account with permissions to access the encrypted files - just in case the user profile gets corrupted.

FWIW, you have encryption built into Windows XP should you choose to enable it.

 

[SimonsMerc]

Thanks everyone - I've managed to wangle (almost) free upgrades on some new lappies to Vista Ultimate (and upgrades to Windows 7 in October) which has encryption built in so I'll give that a whirl first. Hopefully this plus fingerprint recognition will do the job.

... sits back and waits for all to tell him why it's no good ...!!

I don't like fingerprint recognition as a means of authentication. Especially for an easily stolen item like a laptop. Here are a couple of thoughts.

- If someone wants to steal your laptop and take your authentication information with it: for a password the easiest way is to get a copy of the password, for fingerprints the easiest way is to cut the top of your finger off.

- If someone *does* compromise your fingerprints in a different manner, they become hard to revoke. If someone steals your password, you change it - it's much more difficult to change your fingerprints...

Use a password. Make it a difficult one to crack, with multiple upper and lower case alpha-numeric characters. And if someone threatens to beat you around the head with an iron bar unless you give them the password, *give them the password*.

NB. The solution columb suggested has the option of providing a "special" password that you give to people who are demanding it, which decrypts a whole different set of data. That sounds like a very sensible option.

-simon

 

[Sp!ke]

Actually, you can unlock a laptop with finger print reader using nothing more than a childrens detective kit.

The fingerprints are all over the laptop. It doesnt take long to work out which location is ideal for lifting the index finger? Lift it with powder and tape, photocopy it and then run the copy over the reader.

Even the high end ones in high security areas that measure tempreature and pulse are easilly bypassed by wetting the paper copy and sticking the wet paper on your finger.

http://www.metacafe.com/watch/252534/myth_busters_finger_print_lock/

Surprisingly useless technology so no need to steal your finger.

 

[SimonsMerc]

Actually, you can unlock a laptop with finger print reader using nothing more than a childrens detective kit.

The fingerprints are all over the laptop. It doesnt take long to work out which location is ideal for lifting the index finger? Lift it with powder and tape, photocopy it and then run the copy over the reader.

Even the high end ones in high security areas that measure tempreature and pulse are easilly bypassed by wetting the paper copy and sticking the wet paper on your finger.

Myth Busters-Finger Print Lock - Video

Surprisingly useless technology so no need to steal your finger.

I'm aware it's not hard to do. But what's the *fastest* way of doing it?