[FDE] FDE Digest, Vol 2, Issue 2

Sun Nov 12 00:17:29 MST 2006

I've been using PG Guardian EPHD for years, now use
Pointsec and have also tested Utimaco and some others.

With EPHD I noticed very slow boot times.  After that
the performance wasn't much of an issue.  This was an
older version that we bought over 2 years ago.

With Pointsec and Utimaco I don't notice much of a
performance hit at all.  I haven't done any testing
though, I suppose it depends on what your doing.  For
most people I don't think they would notice the it at
all.  It would just if they were doing something that
was very disk intensive.

I wonder if Mobile Armor uses AES 256 bit.  I don't
know but it may be using a cypher that's not as
secure.

Ryan Booton
CISSP, GSEC

--- fde-request at www.xml-dev.com wrote:

> Send FDE mailing list submissions to
> 	fde at www.xml-dev.com
> 
> To subscribe or unsubscribe via the World Wide Web,
> visit
> 	http://www.xml-dev.com/mailman/listinfo/fde
> or, via email, send a message with subject or body
> 'help' to
> 	fde-request at www.xml-dev.com
> 
> You can reach the person managing the list at
> 	fde-owner at www.xml-dev.com
> 
> When replying, please edit your Subject line so it
> is more specific
> than "Re: Contents of FDE digest..."
> 
> 
> Today's Topics:
> 
>    1.  Can you keep a secret? This encrypted drive
> can...
>       (Bryan Glancey)
> 
> 
>
----------------------------------------------------------------------
> 
> Message: 1
> Date: Tue, 7 Nov 2006 18:08:03 -0600
> From: "Bryan Glancey" <bryan at mobilearmor.com>
> Subject: [FDE]  Can you keep a secret? This
> encrypted drive can...
> To: <fde at www.xml-dev.com>
> Message-ID:
> 
>
<4D80AF592926F94295638886A71CEFD07A6909 at catapult.mobilearmor.com>
> Content-Type: text/plain; charset="us-ascii"
> 
> This was a very good summary of the technology, and
> I think you hit a
> lot of the big issues with traditional solutions in
> the market.
> 
>  
> 
>  I think you missed two major interesting
> competitors in Full Disk
> Encryption:
> 
>  
> 
> 1.	Vista with BitLocker
> 2.	Mobile Armor (whose encryption times are ten
> times faster then
> competition on & costs less as it is available from
> Sprint on a
> subscription basis)
> 
>  
> 
> And two interesting functionalities
> 
>  
> 
> 1.	Large Scale Management
> 2.	Pre-boot authentication against RADIUS and other
> network based
> authentication services
> 
>  
> 
>  
> 
> Great start!
> 
>  
> 
> Regards;
> 
>  
> 
> Bryan
> 
>  
> 
>  
> 
> ------------------------------------
> 
> Mobile Armor
> 
> Bryan E. Glancey
> 
> Co - Founder & Chief Technology Officer
> 
> bryan at mobilearmor.com
> 
> http://www.mobilearmor.com/
> 
> ------------------------------------
> 
>  
> 
> 
> [FDE] Can you keep a secret? This encrypted drive
> can...
> 
> 
> Saqib Ali docbook.xml at gmail.com
>
<mailto:fde%40www.xml-dev.com?Subject=%5BFDE%5D%20Can%20you%20keep%20a%2
>
0secret%3F%20This%20encrypted%20drive%20can...&In-Reply-To=TheMailAgent.
> 37b1c0c4cc136%4033ff138fc7a1046606b2> 
> Fri Nov 3 16:01:27 MST 2006 
> 
> *	Next message: [FDE] Can you keep a secret? This
> encrypted drive
> can...
>
<http://www.xml-dev.com/pipermail/fde/2006-November/000019.html>
> 
> *	Messages sorted by: [ date ]
>
<http://www.xml-dev.com/pipermail/fde/2006-November/date.html#18>
>  [
> thread ]
>
<http://www.xml-dev.com/pipermail/fde/2006-November/thread.html#18>
>  [
> subject ]
>
<http://www.xml-dev.com/pipermail/fde/2006-November/subject.html#18>
>  [
> author ]
>
<http://www.xml-dev.com/pipermail/fde/2006-November/author.html#18>
>  
> 
> ________________________________
> 
> I compile a lot of software on my laptop, and I
> *certainly notice* the
> difference between my office laptop (no encryption)
> and my travel
> laptop (with FDE). The laptops are exactly the same,
> with the same
> image loaded. The only difference is the FDE
> software that is
> installed on the travel laptop.
>  
> That is why I did an analysis of various FDE
> solutions to find the
> best one for my needs. The key thing I was
> interested was that it must
> be AES 256, reasonably fast, inexpensive, and offer
> key recovery in
> case of password loss.
>  
> The final outcome of the analysis is available @
>
http://www.xml-dev.com/blog/index.php?action=viewtopic&id=250
>  
> Compusec is great for home / personal use. It is
> cheap i.e. $0.00
> (Free), and does not slow down the computer as much
> as the other
> products. But that is because it only support 128
> bit AES, which is a
> major drawback as most enterprise settings require
> at least 256 bit
> AES. Compusec also has a great online support forum
> where you can get
> your questions answered by Compusec employees and
> other experienced
> users.
>  
> I ended up purchasing both Utimaco and Pointsec.
> They are excellent
> products. They both support AES 256. The downside is
> that they are
> little bit expensive (Pointsec:$170 ; Utimaco:$200)
> and slow.
>  
> The best thing is they both offer great password /
> encryption key
> recovery capabilities. You can create a recovery
> disk with both
> products.
>  
> They also offer password recovery using Challenge /
> Response sequence,
> where the IT Helpdesk can perform a
> Challenge/Response sequence with
> the user to help them recover the password or reset
> it to a new one.
> Off course Challenge/Response password recovery is
> the NOT most
> secure, especially if the user is remote, but you
> have the option to
> disable it on the laptop if you want.
> .
>  
> saqib
> http://www.full-disk-encryption.net
>  
>  
> On 11/2/06, Alexander Klimov <alserkli at inbox.ru
> <http://www.xml-dev.com/mailman/listinfo/fde> >
> wrote:
> 
=== message truncated ===

____________________________________________________________________________________
Do you Yahoo!?
Everyone is raving about the all-new Yahoo! Mail beta.
http://new.mail.yahoo.com