> I agree...you have to be aware of the level of encryption and where it
> kicks
> in.
>

Implementation may cause some weaknesses... I was/am using an alternative
system Encfs (which hooks into login system via pam) and uses the same
password for login and drive unlock.

On disk encryption is via strong random password, which is in turn
encrypted by user supplied password.

The weakness is that the system login is basically a MD5 hash of password
and is accessible outside the scope of the encrypted home drive. So the
hash could be cracked separately to provide password access encrypted
partition.

What's my point? Convienence breads weakness, but a weak-ish system may be
sufficient for every day protection for things such as lost/stolen laptop.

Simon.


_______________________________________________
clug-talk mailing list
[email protected]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca
Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
**Please remove these lines when replying

Reply via email to