Protecting the Operating System

Protecting the Operating System

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Protecting the Operating System Ricardo 09-23-2006
Posted by xpyttl on September 25, 2006, 1:20 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
>> "1344 bit military strong encryption" matches very well with the crypto
>> snake-oil FAQ.
>
> hehe. i m in total agreement with that. when will crypto vendors learn
> that proprietary algorithms are NOT a selling point?

Whenever technical people start making the purchasing decisions

..



Posted by Sebastian Gottschalk on September 26, 2006, 3:35 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Saqib Ali wrote:

>> "1344 bit military strong encryption" matches very well with the crypto
>> snake-oil FAQ.
>
> hehe. i m in total agreement with that. when will crypto vendors learn
> that proprietary algorithms are NOT a selling point?

AFAIK it's Triple-BlowFish-448 = 3*448 = 1344, one of the many selectable
algorithms with this one specific for stupid paranoids. Anyway, such a
ridiculous key length for exactly no benefit (in contrast to f.e. cascading
algorithms to defend against new crypto analysis results) and the typical
unprovable claim of "military strong" should tell you that you shouldn't
trust their expertise.

Beside that, this software is horribly broken and insecure. Easily attacked
entropy collection, horribly insecure storage of keys in memory, lack of
sufficient integrity checks, and well, as the pre-boot auth bootloader
crashes on my test machine, I'd never deploy it on a real machine.

Posted by on September 25, 2006, 12:08 am
If you were  Registered and logged in, you could reply and use other advanced thread options

Ricardo wrote:
> Hello,
> I have just come to the conclusion that the only way to protect the machine
> with free physical access to anauthorized personnel is... to encrypt it.
> Unfortunately it seems that this can be done only the lonely by DriveCrypt
> software which costs a lot. It's wonderful stuff indeed allowing to encrypt
> the drive with authentication feature at the pre-boot level! The encryption
> seems excellent AES-256 algotithm. It's only drawback (except for the price)
> is that it doesn't see Linux partitions (not to mention that it doesn't run
> on Linux)which makes them liable to potential attack. It looks like for now
> only Windows operationg system may be securely locked unless you run Linux
> as a VMware guest system on the DriveCrypted Windows host. I wonder what are
> your experiences with respect to securing the stand alone box with
> uncontrolled physical access, like at the University (my case).
> P.S. Have just noticed free stuff called CompuSec PC Security Suite which
> seems both Windows and Linux compatible though as compared to DriveCrypt it
> uses weaker encrypting algorithm AES-128 and looks like is much slower. I
> cannot wait to hear your comments.
> Kindest regards,
> --

Why not just use PGP Desktop personal edition or GPG which is free.
Since you're at a Uni*, why wouldn't you just get yourself a jump drive
and store your files there.
> Ricardo


Posted by Ricardo on September 25, 2006, 2:36 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> ...
Thank you all very much for your comments.
Regards,
Ricardo



Similar ThreadsPosted
Password protecting? May 12, 2005, 10:37 pm
Protecting Folder November 7, 2008, 8:52 pm
Question from a newbie -- protecting files July 20, 2005, 3:01 pm
Protecting the Network with Homogeneous servers July 24, 2006, 5:02 am
Passphraselessly protecting dictionary relations May 10, 2007, 4:13 am
Please help with buying a UPS for my system October 14, 2005, 2:01 pm
Vulnerabilities Management System June 11, 2004, 4:50 am
NTFS - System files... January 4, 2005, 2:21 pm
Bad System Architecture, Accountability June 14, 2005, 8:14 am
Advice pls on what is happening on my system December 9, 2005, 5:14 am

The site map in XML format XML site map

Contact Us | Privacy Policy