[FDE] Data Encryption versus QOS in systems

[John Kandiri]

I have realized that whenever I enable PGP in my computer, it always
take a lot of time looking for encryption keys and thus introducing what
I might call "unnecessary " delays. 

i)                Is it that I have configured PGP in a poor way?

ii)            Is there a better productive that can reduce this latency
during encryption and searching of keys?

iii)        How does the encryption integrated in Vista compare with PGP
and other encryption products

 

 

Rgds

 

-----Original Message-----
From: fde-bounces at www.xml-dev.com [mailto:fde-bounces at www.xml-dev.com]
On Behalf Of Brad Lhotsky
Sent: Monday, March 05, 2007 6:12 PM
To: fde at www.xml-dev.com
Subject: Re: [FDE] Question re risks of data loss with FDE

 

 

coderman wrote:

> people lose their keys much less frequently than they lose laptops and

> storage media.  placing disk keys on a key chain also ties into the

> usability / intuitiveness of a capability like approach for protecting

> your OS and storage.

 

I can't say that I agree with you at all.  I work for the Intermural

Research division of a small Institute in NIH.  I've been here nearly 3

years and we've had _zero_ lost laptops.  We had one stolen, it was

headed for surplus, no hard drive, and 6 years old sitting in the hall

unattended. :)

 

Broad generalizations are the problem with Security these days.  My

scientists will likely lose their jobs if they lose their laptops.  It's

all about producing papers.  Now, if they lose their keys and can't

drive or get into their apartment, than it's more time to spend in the

lab working on papers.  We have keys, purses, money, wallets & badges

showing up in our Lost & Found on a weekly basis.

 

If the laptop is just an accessory, then sure, people will lose them

because they don't value them.  When the laptop is the scientists

well-being, they tend to know where they are.

 

This is why the OMB Mandate for FDE annoys me.  It's a large, corporate

style office making assumptions about the operations of all it's highly

specialized divisions.  Sure FDE would be great, but we're dealing with

a March 31st deadline to deploy an FDE solution that doesn't fit our

operation.

 

Aint bureaucracy great?!

 

-- 

Brad Lhotsky <lhotskyb at grc.nia.nih.gov>

Security Administrator / NIA Alt. ISSO

Phone: 410.558.8006

"Those who would sacrifice liberty to gain security

 deserve neither and will lose both." - Ben Franklin

_______________________________________________

FDE mailing list

FDE at www.xml-dev.com

http://www.xml-dev.com/mailman/listinfo/fde

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.xml-dev.com/pipermail/fde/attachments/20070307/456e6bda/attachment.html