Re: Encrypted Thumbdrives

["Avdagic, Indir" <indir_avdagic () WSU EDU>]

We are using Kingston's Data Traveler Secure USB Flash drives that secures data on-the-fly via 256-bit hardware-based 
AES encryption. These drives are a little bit slow when handling a bigger number of files.


__________________________________
Indir Avdagic, CISSP, ACSA, TICSA
Network Security Engineer
Washington State University  
indir_avdagic () wsu edu
Phone: (509) 335-3279
http://infotech.wsu.edu/security/  
 
          



-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jesse 
Thompson
Sent: Monday, April 21, 2008 10:00 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Encrypted Thumbdrives

James M. Dutcher - VP IS/IT & CIO wrote:
> Charles,
>
> Best open source - TrueCrypt
> Best vendor solution - IronKey

I agree with this, but you should also distinguish between hardware vs 
software encryption.  Data encrypted with software-based encryption (e.g 
truecrypt) is subject to offline attacks, so it could be broken with 
enough computing power.  Data encrypted with hardware-based, or 
hardware-protected-software-based encryption (e.g. ironkey) in theory 
cannot be subjected to brute force attacks.  Having said that, I 
personally use truecrypt on a standard 1GB usb drive.

Jesse

> My two cents worth
>
> Regards,
>
> Jim Dutcher - VP IS/IT & CIO - SUNY Orange
> Sent from my Verizon Wireless BlackBerry
>
> -----Original Message-----
> From: "Bombard, Charles L" <Charles.Bombard () CCV EDU>
>
> Date:         Fri, 18 Apr 2008 16:18:58 
> To:SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] Encrypted Thumbdrives
>
>
> Have you looked at a particular product? Have one you really like? 
>   
> I am wondering what other people have found in looking at USB thumbdrives that have built in encryption and/or have 
> utilized software based encryption such as truecrypt that can be included on the drives un-encrypted area. 
>   
> I am currently demo'ing a SafeStick Business edition thumbdrive. 
> I will be looking at a truecrypt solution too. 
>   
> I thought there had been a discussion about this a while back but I could not find it in the archives. 
>   
> Any thoughts/suggestions are appreciated. 
>   
> -Charlie 
>   
> ========================================== 
>   
> Charles Bombard, GSEC 
> LAN/Systems Administrator 
> Community College of Vermont 
> 119 Pearl Street 
> Burlington, VT 05401 
> 802.657.4234 
>  <mailto:bombardc () ccv edu> bombardc () ccv edu 
>   
> PRIVACY & CONFIDENTIALITY NOTICE: This message is for the designated recipient only and may contain privileged, 
> confidential, or otherwise private information. If you have received it in error, please notify the sender 
> immediately and delete the original. Any other use of an email received in error is prohibited. 
>