U.S. Gov't to use Full Disk Encryption on All Computers

U.S. Gov't to use Full Disk Encryption on All Computers
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
U.S. Gov't to use Full Disk Encryption on All Computers Saqib Ali 12-29-2006
Posted by Rick Merrill on December 31, 2006, 8:32 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Vanguard wrote:
>> To address the issue of data leaks from stolen or missing laptops, US
>> Government is planning to use Full Disk Encryption (FDE) on all of the
>> Government owned computers. On June 23, 2006 a Presidential Mandate was
>> put in place requiring all agency laptops to fully encrypt data on the
>> HDD. The US Government is currently conducting the largest single
>> side-by-side comparison and competition for the selection of a Full
>> Disk Encryption product. This implementation will end up being the
>> largest single implementation ever, and all of the information
>> regarding the competition is in the public domain. The selected product
>> will be deployed on Millions of computers in the US federal government
>> space. The evaluation will come to a end in 90 days.
>>
>> ...... Read complete article at:
>> http://www.full-disk-encryption.net/fde_govt.html
>>
>
>
> Still won't help with all those boobs that walk away from their laptop
> to leave it unattended while still logged on and without the screen
> saver enabled or session otherwise locked out.

Sure it will because the "mandate" must also require that the computer
automatically logout after 5 minutes of no use!


Posted by William on January 1, 2007, 4:01 am
If you were  Registered and logged in, you could reply and use other advanced thread options
on 31 Dec 2006, something possessed Rick Merrill to write:

> Vanguard wrote:
>>> To address the issue of data leaks from stolen or missing laptops,
>>> US Government is planning to use Full Disk Encryption (FDE) on all
>>> of the Government owned computers. On June 23, 2006 a Presidential
>>> Mandate was put in place requiring all agency laptops to fully
>>> encrypt data on the HDD. The US Government is currently conducting
>>> the largest single side-by-side comparison and competition for the
>>> selection of a Full Disk Encryption product. This implementation
>>> will end up being the largest single implementation ever, and all of
>>> the information regarding the competition is in the public domain.
>>> The selected product will be deployed on Millions of computers in
>>> the US federal government space. The evaluation will come to a end
>>> in 90 days.
>>>
>>> ...... Read complete article at:
>>> http://www.full-disk-encryption.net/fde_govt.html
>>>
>>
>>
>> Still won't help with all those boobs that walk away from their
>> laptop to leave it unattended while still logged on and without the
>> screen saver enabled or session otherwise locked out.
>
> Sure it will because the "mandate" must also require that the computer
> automatically logout after 5 minutes of no use!
>
>

But does this mandate also require that the computer users don't accept
any old active-X plugin? Or prohibit Java except for certain webhosts?

Posted by Rick Merrill on December 31, 2006, 8:42 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Saqib Ali wrote:
> To address the issue of data leaks from stolen or missing laptops, US
> Government is planning to use Full Disk Encryption (FDE) on all of the
> Government owned computers. On June 23, 2006 a Presidential Mandate was
> put in place requiring all agency laptops to fully encrypt data on the
> HDD. The US Government is currently conducting the largest single
> side-by-side comparison and competition for the selection of a Full
> Disk Encryption product. This implementation will end up being the
> largest single implementation ever, and all of the information
> regarding the competition is in the public domain. The selected product
> will be deployed on Millions of computers in the US federal government
> space. The evaluation will come to a end in 90 days.
>
> ...... Read complete article at:
> http://www.full-disk-encryption.net/fde_govt.html
>

I would assume that the encryption would also accompany compression. It
takes about as many cycles to decompress as it does to decrypt?


Posted by Saqib Ali on December 31, 2006, 9:17 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
With FDE, the encryption is not a off-line process. Every bit is
encrypted at the Kernel or Hardware level as it is written to the HDD
platter. Think of it as a stream cipher. So there is no compression or
decompression involved......

saqib
http://www.full-disk-encryption.net



Rick Merrill wrote:
> Saqib Ali wrote:
> > To address the issue of data leaks from stolen or missing laptops, US
> > Government is planning to use Full Disk Encryption (FDE) on all of the
> > Government owned computers. On June 23, 2006 a Presidential Mandate was
> > put in place requiring all agency laptops to fully encrypt data on the
> > HDD. The US Government is currently conducting the largest single
> > side-by-side comparison and competition for the selection of a Full
> > Disk Encryption product. This implementation will end up being the
> > largest single implementation ever, and all of the information
> > regarding the competition is in the public domain. The selected product
> > will be deployed on Millions of computers in the US federal government
> > space. The evaluation will come to a end in 90 days.
> >
> > ...... Read complete article at:
> > http://www.full-disk-encryption.net/fde_govt.html
> >
>
> I would assume that the encryption would also accompany compression. It
> takes about as many cycles to decompress as it does to decrypt?


Posted by William on January 1, 2007, 4:05 am
If you were  Registered and logged in, you could reply and use other advanced thread options
on 31 Dec 2006, something possessed Saqib Ali to write:

> With FDE, the encryption is not a off-line process. Every bit is
> encrypted at the Kernel or Hardware level as it is written to the HDD
> platter. Think of it as a stream cipher. So there is no compression or
> decompression involved......
>
> saqib
> http://www.full-disk-encryption.net
>
>
>
> Rick Merrill wrote:
>> Saqib Ali wrote:
>> > To address the issue of data leaks from stolen or missing laptops,
>> > US Government is planning to use Full Disk Encryption (FDE) on all
>> > of the Government owned computers. On June 23, 2006 a Presidential
>> > Mandate was put in place requiring all agency laptops to fully
>> > encrypt data on the HDD. The US Government is currently conducting
>> > the largest single side-by-side comparison and competition for the
>> > selection of a Full Disk Encryption product. This implementation
>> > will end up being the largest single implementation ever, and all
>> > of the information regarding the competition is in the public
>> > domain. The selected product will be deployed on Millions of
>> > computers in the US federal government space. The evaluation will
>> > come to a end in 90 days.
>> >
>> > ...... Read complete article at:
>> > http://www.full-disk-encryption.net/fde_govt.html
>> >
>>
>> I would assume that the encryption would also accompany compression.
>> It takes about as many cycles to decompress as it does to decrypt?
>
>

Does this full-disk encryption protect against most trojan-downloader
users, though? I mean, if some program like Back Orifice got onto the
machine, then couldn't the remote cracker get access to the data, even
though the entire disk is encrypted, via whatever host-kernal's
encryption/decryption mechanism?

Similar ThreadsPosted
Full Disk Encryption Survey July 9, 2007, 1:56 am
So why don't we use full disk encryption on all mobile devices? October 12, 2006, 10:56 pm
What is the earliest version with full harddisk encryption (not only files) ? July 27, 2005, 9:05 am
Searching tool for FULL disc encryption (not only volume files) July 28, 2005, 11:06 am
Mailing List dedicated to Full Disc Encryption use and implementation strategy October 1, 2006, 7:28 pm
Disk Encryption with TrueCrypt and Backups December 28, 2008, 3:38 am
Recommendations for hard disk encryption tool? July 26, 2006, 9:08 am
computers November 11, 2005, 4:03 pm
Locking down computers January 5, 2006, 10:14 am
computers are a security nightmare July 13, 2008, 7:23 am

The site map in XML format XML site map

Contact Us | Privacy Policy