Re: The VA Stolen Laptop - Lessons Learned

[intel96 <intel96 () bellsouth net>]

I just meet with a company in Washington, DC with a company from Canada
that has developed a hardware-based encryption module for computer
systems.  They are a start-up but have hooks into some of the laptop
manufactures, which plan to offer the device to customers as a option.  
I have not tested the equipment,, but plan too soon.  The device uses
AES-256 or 3-DES.  It also creates a mirror of the drive, which can be
used for failover operations.    There is even a self-destruction piece
being added.

Saqib Ali wrote:
> Clement,
>
> I just checked the True Crypt's website and it says that it only
> supports partition but NOT the whole disc encryption. With whole disc
> encryption everything including the OS is encrypted regardless of the
> partition layout.
>
>
>
> On 9/20/06, Clement Dupuis <cdupuis () cccure org> wrote:
> > Wikipedia unfortunately is not always up to date
> >
> > Truecrypt will do full disks and even allow you to have an encrypted disk
> > without any partitions on it.
> >
> > Take care
> >
> > Clement
> >
> >
> > -----Original Message-----
> > From: listbounce () securityfocus com
[mailto:listbounce () securityfocus com] On
> > Behalf Of Saqib Ali
> > Sent: Wednesday, September 20, 2006 12:35 AM
> > To: security
> > Cc: security-basics () securityfocus com
> > Subject: Re: The VA Stolen Laptop - Lessons Learned
> >
> > Caution: TrueCrypt is NOT a Full Disc Encryption (FDE) utility. I can
> > encrypt partitions but not the whole Disc. See:
> > http://en.wikipedia.org/wiki/FDE
> >
> > On 9/18/06, security <security () xentek net> wrote:
> TrueCrypt (http://www.truecrypt.org/) is the one I recommend to
> clients. Its Open-Source and supports Linux and Windows.
>
> -em
>
>
>
>
> On Sep 17, 2006, at 10:27 PM, MandommGmail wrote:
>
> > There are many free whole disk encryption softwares that are
> > around. Please google for CompuSec. I am personally using it. It is
> > free for commercial and personal usage.
>
> > I believe its just right for my usage.
>
> > Alex
> > ----- Original Message ----- From: "George Toft"
> > <george () georgetoft com>
> > To: <security-basics () securityfocus com>
> > Sent: Saturday, September 16, 2006 1:42 AM
> > Subject: Re: The VA Stolen Laptop - Lessons Learned
>
>
> > > There are many whole-disk encryption products that make this a
> > > trivial exercise.  Even at $100-150 per seat, the price is cheaper
> > > than a lawsuit and bad publicity.
> > >
> > > George Toft, CISSP, MSIS
> > > My IT Department
> > > www.myITaz.com
> > > 480-544-1067
> > >
> > > Confidential data protection experts for the financial industry.
> > >
> > >
> > > evb wrote:
> > > >  :1. Encrypt all data on mobile computers/devices which
> > > > carry :agency data unless the data is determined to be non-
> > > > sensitive, :in writing, by your Deputy Secretary or an individual
> > > > he/she :may designate in writing : And does "data" include
> > > > operating system files, log files, cab files,
> > > > drivers, etc., or does it only include eg xls, doc, pdf and wpd
> > > > files, etc.?
> > > > How has Bush defined "data"?  Thx,
> > > >
> > > > Eric
> > > > --------------------------------------------------------------------
> > > > -------
> > > > This list is sponsored by: Norwich University
> > > >
> > > > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > > > The NSA has designated Norwich University a center of Academic
> > > > Excellence in Information Security. Our program offers
> > > > unparalleled Infosec management education and the case study
> > > > affords you unmatched consulting experience. Using interactive e-
> > > > Learning technology, you can earn this esteemed degree, without
> > > > disrupting your career or home life.
> > > >
> > > > http://www.msia.norwich.edu/secfocus
> > > > --------------------------------------------------------------------
> > > > -------
> > >
> > > ---------------------------------------------------------------------
> > > ------
> > > This list is sponsored by: Norwich University
> > >
> > > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > > The NSA has designated Norwich University a center of Academic
> > > Excellence in Information Security. Our program offers
> > > unparalleled Infosec management education and the case study
> > > affords you unmatched consulting experience. Using interactive e-
> > > Learning technology, you can earn this esteemed degree, without
> > > disrupting your career or home life.
> > >
> > > http://www.msia.norwich.edu/secfocus
> > > ---------------------------------------------------------------------
> > > ------
>
>
> > ----------------------------------------------------------------------
> > -----
> > This list is sponsored by: Norwich University
>
> > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > The NSA has designated Norwich University a center of Academic
> > Excellence in Information Security. Our program offers unparalleled
> > Infosec management education and the case study affords you
> > unmatched consulting experience. Using interactive e-Learning
> > technology, you can earn this esteemed degree, without disrupting
> > your career or home life.
>
> > http://www.msia.norwich.edu/secfocus
> > ----------------------------------------------------------------------
> > -----
>
>
> > > >
> ---------------------------------------------------------------------------
> This list is sponsored by: Norwich University
> > > >
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic Excellence
> in Information Security. Our program offers unparalleled Infosec
> > > management
> education and the case study affords you unmatched consulting experience.
> Using interactive e-Learning technology, you can earn this esteemed
> > > degree,
> without disrupting your career or home life.
> > > >
> http://www.msia.norwich.edu/secfocus
> > > >
> ---------------------------------------------------------------------------
> > > >
> > >
> > >
> > > --
> > > Saqib Ali, CISSP, ISSAP
> > > Support http://www.capital-punishment.net
> > > -----------
> > > "I fear, if I rebel against my Lord, the retribution of an Awful Day
> > > (The Day of Resurrection)" Al-Quran 6:15
> > > -----------
> ---------------------------------------------------------------------------
> > > This list is sponsored by: Norwich University
> > >
> > > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > > The NSA has designated Norwich University a center of Academic
> Excellence
> > > in Information Security. Our program offers unparalleled Infosec
> management
> > > education and the case study affords you unmatched consulting
> experience.
> > > Using interactive e-Learning technology, you can earn this esteemed
> degree,
> > > without disrupting your career or home life.
> > >
> > > http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------
> > >


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------