Security Basics mailing list archives

Re: RE: How to Test HDD Encryption


From: anymouse () acme inc
Date: 13 Nov 2007 16:12:35 -0000

Yeah, I use Penguin Sleuth Kit or Encase to inspect it, but unless you're au-fait with computer forensics and can 
differentiate between encryption and obfuscation oh and and happen to have a forensic workstation or write-blocker then 
proxy the problem by using a reputable solution (e.g. something with Common Criteria validation) in a manner consistent 
with their recommended practices.

Translation - Gain confidence by buy something good that's been independently tested ideally used by government bodies, 
and be sure to use it in the manner the vendor suggests. And get your boss to sign-off that he/she's happy with this 
proxy approach.


Current thread: