Re: Encrypted Thumbdrives

[Jesse Thompson <jesse.thompson () DOIT WISC EDU>]

James M. Dutcher - VP IS/IT & CIO wrote:
> Charles,
>
> Best open source - TrueCrypt
> Best vendor solution - IronKey

I agree with this, but you should also distinguish between hardware vs 
software encryption.  Data encrypted with software-based encryption (e.g 
truecrypt) is subject to offline attacks, so it could be broken with 
enough computing power.  Data encrypted with hardware-based, or 
hardware-protected-software-based encryption (e.g. ironkey) in theory 
cannot be subjected to brute force attacks.  Having said that, I 
personally use truecrypt on a standard 1GB usb drive.

Jesse

> My two cents worth
>
> Regards,
>
> Jim Dutcher - VP IS/IT & CIO - SUNY Orange
> Sent from my Verizon Wireless BlackBerry
>
> -----Original Message-----
> From: "Bombard, Charles L" <Charles.Bombard () CCV EDU>
>
> Date:         Fri, 18 Apr 2008 16:18:58 
> To:SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] Encrypted Thumbdrives
>
>
> Have you looked at a particular product? Have one you really like? 
>   
> I am wondering what other people have found in looking at USB thumbdrives that have built in encryption and/or have utilized software based encryption such as truecrypt that can be included on the drives un-encrypted area. 
>   
> I am currently demo’ing a SafeStick Business edition thumbdrive. 
> I will be looking at a truecrypt solution too. 
>   
> I thought there had been a discussion about this a while back but I could not find it in the archives. 
>   
> Any thoughts/suggestions are appreciated. 
>   
> -Charlie 
>   
> ========================================== 
>   
> Charles Bombard, GSEC 
> LAN/Systems Administrator 
> Community College of Vermont 
> 119 Pearl Street 
> Burlington, VT 05401 
> 802.657.4234 
>  <mailto:bombardc () ccv edu> bombardc () ccv edu 
>   
> PRIVACY & CONFIDENTIALITY NOTICE: This message is for the designated recipient only and may contain privileged, confidential, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of an email received in error is prohibited. 
>

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature