Re: Using Bitlocker

[David Sheryn <dsheryn () LONDON EDU>]

The TrueCrypt code audit has been completed.  See:-

http://istruecryptauditedyet.com/
https://opencryptoaudit.org/
http://blog.cryptographyengineering.com/2015/04/truecrypt-report.html


Regards

--
David Sheryn | Information Security Specialist -- Networks, Telecoms & Security | Information Technology.
London Business School | Regent's Park | London NW1 4SA | United Kingdom.
Switchboard +44 (0)20 7000 7000 | Direct line +44 (0)20 7000 7776

www.london.edu<http://www.london.edu/> | London experience. World impact.

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Judd, 
Taylor Allen
Sent: 31 March 2015 14:17
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Using Bitlocker

There are four or five spin offs to truecrypt at the moment. A few listed below. I'd be curious the impression of these 
tools and the "trust" behind their code?

https://veracrypt.codeplex.com/
http://mhogomchungu.github.io/zuluCrypt/
https://ciphershed.org/

Even if you use a spin off, there have been many discussions as to the legality of the license as truecrypt used a 
custom license that raises some trademark/copyright concerns.

I also haven't heard anything recently about the truecrypt 7.1a audit that was supposedly still ongoing. Last I saw on 
the audit but not sure how reliable the source is:
https://cryptoservices.github.io/fde/2015/02/18/truecrypt-phase-two.html

For now if I'm doing full disk encryption I use the application native to the platform, windows:bitlocker, 
osx:filevault, linux:dm-crypt/luks   Then for container based encryption I still use the 7.1a variant of truecrypt.

Taylor

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Tim 
Faircloth
Sent: Tuesday, March 31, 2015 7:28 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Using Bitlocker

We're starting to use BitLocker as a replacement for TrueCrypt (using Virtual Drive files).  My only complaint is that 
it's a bit unwieldy; you have to get into disk management in order to mount/unmount drives.

Does anyone have any suggestions for an alternate front-end?

/tim
--
Tim Faircloth
System Administrator, GSW IIT
229-931-5076

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of 
KILDARE,Duane V
Sent: Monday, March 30, 2015 10:19 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Using Bitlocker

I am thinking of using Bitlocker on systems for persons who handle sensitive information.  I am just enquiring, if 
anyone has used Bitlocker in any implementation, and any issues you had  or concerns?

Duane Kildare
Information Technology Officer
Office of the University CIO
The University of the West Indies
Regional Headquarters
Hermitage Road
Kingston 7
Jamaica W.I

Internal Extension:  8903
(876) 702-2433/3641 (Office)