pgpdisk? However, If the laptop is on and the key has been entered, then you
will still be at risk. You may want to use pgpdisk and pgp encrypt certain
confidential documents.
But this presents an additional burden for the user. They must remember the hd
pw and the individual file pws. One way to limit the pws is to have a hdpw and
a specific file pw and various other file pws. This way all the user would
have to memorize is two pws. Let me explain. There will be a hd pw and there
will be a file called clown.txt (secret.txt and password.txt are poor choices
as the bad guys will know this is the file to break) which contains the
passwords for all other confidential files. This file will be encrypted in
addition to the other confidential files. So once clown.txt is decrypted then
the other files can also be decrypted. But this means clown.txt must be
updated everytime a password is changed or a new confidential file is created.
--- Marty <mortfromork@videotron.ca> wrote:
Hi,
We want to make sure that if the laptop is stolen and the
encryption is broken that we have an extra layer of
protection. The password can be guessed or acquired from
social engineering (from my point of view), thus the risk.
Marty!
-----Original Message-----
From: Aditya Deshmukh
[mailto:aditya.deshmukh@online.gateway.strangled.net]
Sent: Wednesday, November 23, 2005 10:08 PM
To: 'Mork'; security-basics@securityfocus.com
Subject: RE: File encryption
Question on file encryption. We want to add a layer to our
file
security.Our hard disks are encrypted and we would like to
add single
file encryption.
I want to know why you want to add one more layer of file
security. If your Hard disk are already encrypted then with
a strong encryption then you don't need the extra
Encryption.
What is the best product that would silently encrypt and
decrypt
on-the-fly so it's transparent to the users?
I recommend you use PGP disk ecnryption.
It has whole disk enceyption as well as it can create files
that Can act as drives and are assissable using a drive
letters.
Type one password and you can access the files just like on
hard disk Not exactly transpertnt but almost there and very
good product with Exceptional support.
____________________________________________________________
____________
Delivered using the Free Personal Edition of Mailtraq
(www.mailtraq.com)
__________________________________
Yahoo! Music Unlimited
Access over 1 million songs. Try it free.
http://music.yahoo.com/unlimited/
