RE: Protect folder data.

["Nero, Nick" <Nick.Nero () disney com>]

Yep, you are correct.  It is RC4-40bit, I believe.  Problem is, it is
NOT just password protected.  It uses a mini-PKI (unless you have a real
PKI) and only that user's cert or the admin's can recover it.  If both
certs are lost, so is your data.

As a side, the laptop recovered last fall by a reporter from CNN that
was formally a computer used by Al-Qaeda had the hard drives encrypted
with Win2k EFS.  The FBI was able to brute force the 40bit keyspace in a
week and discover the data!

Nick Nero
CISSP, MCSE, CCNA

-----Original Message-----
From: dennis [mailto:dennis () unixqi com] 
Sent: Tuesday, November 26, 2002 4:23 AM
To: security-basics () securityfocus net
Subject: Re: Protect folder data. 


Doesn't Win2K's encrypted file system support this?
Sorry if I'm wrong, not a Windows kinda guy.


----- Original Message ----- 
From: "Shane Lahey" <s.lahey () roadrunner nf net>
To: <tony572000 () hotmail com>; <security-basics () securityfocus net>
Sent: Friday, November 22, 2002 10:29 AM
Subject: RE: Protect folder data. 


> Why not try Blowfish Advanced CS , available at http://come.to/hahn 
> This should do exactally what you want.
>
>
> -----Original Message-----
> From: Tony - CIA;CISA;CDP;CPA;MBA [mailto:tony572000 () hotmail com]
> Sent: November 18, 2002 8:00 PM
> To: SECURITY-BASICS () SECURITYFOCUS COM
> Subject: Protect folder data. 
>
>
> Hi,
>
> I have some highly confidential data that I frequently access on in a 
> folder that is on my desktop computer (ie win2k).  I want to make sure

> no one but
> me will able to see this data.  Does anyone know of any
> freeware\shareware 
> that will 1) en-crypt the data in the folder and/or  2) require a
> password 
> to open up the folder?  I need to make sure a person like our lan
admin
> or 
> desk top support person can not figure out a way to get to the data.
>
> Tony CIA,CISA,CDP,MBA
>
>
>
>
> _________________________________________________________________
> MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.
> http://join.msn.com/?page=features/virus
>
>
> ---
> Incoming mail has been scanned for viruses and is certified Virus 
> Free. Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.422 / Virus Database: 237 - Release Date: 11/20/02
>  
>
> ---
> This email has been scanned for viruses and is considered Virus-Free. 
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.422 / Virus Database: 237 - Release Date: 11/20/02
>