DCPP

DCPP

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
DCPP Peter 01-24-2007
---> Re: DCPP Sebastian Gotts...01-24-2007
| | ---> Re: DCPP Sebastian Gotts...01-24-2007
| |   `--> Re: DCPP Volker Birk01-25-2007
| ---> Re: DCPP Sebastian Gotts...01-25-2007
| | |--> Re: DCPP Volker Birk01-25-2007
| |--> Re: DCPP Volker Birk01-25-2007
| ---> Re: DCPP Sebastian Gotts...01-25-2007
| | ---> Re: DCPP Volker Birk01-25-2007
| |   ---> Re: DCPP Sebastian Gotts...01-25-2007
| |     ---> Re: DCPP Volker Birk01-25-2007
| |     | `--> Re: DCPP Sebastian Gotts...01-25-2007
| |     `--> Re: DCPP Frank Slootweg01-25-2007
| ---> Re: DCPP Sebastian Gotts...01-26-2007
|   ---> Re: DCPP Frank Slootweg01-26-2007
|     ---> Re: DCPP Sebastian Gotts...01-26-2007
|       ---> Re: DCPP Frank Slootweg01-26-2007
|         ---> Re: DCPP Sebastian Gotts...01-26-2007
|           ---> Re: DCPP Frank Slootweg01-26-2007
|             ---> Re: DCPP Sebastian Gotts...01-26-2007
|               `--> Re: DCPP Frank Slootweg01-26-2007
|--> Re: DCPP Volker Birk01-25-2007
Posted by Peter on January 24, 2007, 2:01 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,

I have two questetions about DriveCrypt Power Pack. I have encrypted my
system partition (C) and my data partition (D) and my external harddisk (E),
which I use for making backups. Booth authentification is on and I have
created a rescue floppy.

1. Now I was wondering what I should have done in case of the following
situation: suppose my computer is stolen and the only thing that is left is
my encrypted external harddisk. When I connect this harddisk to another
computer, install DCPP and import the (exported) key, is this sufficient for
decrypting my external harddisk? Or should I have backuped the entire
keystore?

2. Does the keystore have to be located on the encrypted system partition or
can it also be located on the encrypted data partition (D)? I can imagine
the if I locate it on the encrypted D drive, booth authentification cannot
read the keystore and the system won't start. Or am I wrong and can the
keystore be locaed anywhere?

Thank you,

Peter




Posted by Sebastian Gottschalk on January 24, 2007, 2:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Peter wrote:

> Hello,
>
> I have two questetions about DriveCrypt Power Pack. I have encrypted my
> system partition (C) and my data partition (D) and my external harddisk (E),
> which I use for making backups. Booth authentification is on and I have
> created a rescue floppy.
>
> 1. Now I was wondering what I should have done in case of the following
> situation: suppose my computer is stolen and the only thing that is left is
> my encrypted external harddisk. When I connect this harddisk to another
> computer, install DCPP and import the (exported) key, is this sufficient for
> decrypting my external harddisk? Or should I have backuped the entire
> keystore?

Who knows? Read the documentation and ask the vendor. Generally, the answer
seems to be: No, almost all of these software packages are totally fucked
up and add some random information that you'll lose.

> 2. Does the keystore have to be located on the encrypted system partition or
> can it also be located on the encrypted data partition (D)? I can imagine
> the if I locate it on the encrypted D drive, booth authentification cannot
> read the keystore and the system won't start.

Now that's a trivial conclusion.


Anyway, who cares? You're running DriveCrypt, thus the encryption is just a
worthless additional transformation of your data. Brute-forcing the key by
attacking the key-generation scheme or some other flaw in the
implementation has usually been very successful against this crappy
software.

Posted by Notan on January 24, 2007, 2:41 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Sebastian Gottschalk wrote:
> Peter wrote:
>
>> Hello,
>>
>> I have two questetions about DriveCrypt Power Pack. I have encrypted my
>> system partition (C) and my data partition (D) and my external harddisk (E),
>> which I use for making backups. Booth authentification is on and I have
>> created a rescue floppy.
>>
>> 1. Now I was wondering what I should have done in case of the following
>> situation: suppose my computer is stolen and the only thing that is left is
>> my encrypted external harddisk. When I connect this harddisk to another
>> computer, install DCPP and import the (exported) key, is this sufficient for
>> decrypting my external harddisk? Or should I have backuped the entire
>> keystore?
>
> Who knows? Read the documentation and ask the vendor. Generally, the answer
> seems to be: No, almost all of these software packages are totally fucked
> up and add some random information that you'll lose.
>
>> 2. Does the keystore have to be located on the encrypted system partition or
>> can it also be located on the encrypted data partition (D)? I can imagine
>> the if I locate it on the encrypted D drive, booth authentification cannot
>> read the keystore and the system won't start.
>
> Now that's a trivial conclusion.
>
>
> Anyway, who cares? You're running DriveCrypt, thus the encryption is just a
> worthless additional transformation of your data. Brute-forcing the key by
> attacking the key-generation scheme or some other flaw in the
> implementation has usually been very successful against this crappy
> software.

Cites?

--
Notan

Posted by Sebastian Gottschalk on January 24, 2007, 3:10 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Notan wrote:

>> Brute-forcing the key by
>> attacking the key-generation scheme or some other flaw in the
>> implementation has usually been very successful against this crappy
>> software.
>
> Cites?

Is your Google broken?

Anyway, even Mr. Schneier tells so.

Posted by Notan on January 24, 2007, 3:17 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Sebastian Gottschalk wrote:
> Notan wrote:
>
>>> Brute-forcing the key by
>>> attacking the key-generation scheme or some other flaw in the
>>> implementation has usually been very successful against this crappy
>>> software.
>> Cites?
>
> Is your Google broken?
>
> Anyway, even Mr. Schneier tells so.

I simply asked for cites.

The old "If you don't know, I'm not going to tell you" line is
one of the oldest, and most childish, arguments on the block.

Cites?

--
Notan

Similar ThreadsPosted
DCPP user password?! September 16, 2007, 1:37 pm

The site map in XML format XML site map

Contact Us | Privacy Policy