Re: [H] Truecrypt

2008-04-02 Thread j maccraw
You can also simply batch the mounting process with a
cmd file. A way to avoid 
needing passwords is to use keyfiles which could be
sent separately. Keyfiles can be 
any file(s), you simply point TC to them in addition
to the container.

For sure you will need admin rights even for
TCtraveler mode because there is a 
driver involved.

Brian Weeden wrote:
> Yessort of.  It's called a Traveler Disk and it
is pretty easy to do.
> What you do is create a Truecrypt container that is
maybe 10MB smaller than
> the size of the CD.   Put your data in the
container.  Then under Truecrypt
> go to "tools -> Traveler Disk Setup".  Point it to
the dir where you have
> your truecrypt container and it will put a copy of
the truecrypt exe and
> drivers.  Then tell it on boot to mount the
container and it will make an
> autorun file.  Burn the autorun, container, and
Truecrypt dir to the CD root
> and presto.
> 
> The catch is of course for the autorun to work you
must have it enabled and
> I believe you must have admin privileges to install
the truecrypt driver.
> 
> More details are in the excellent Truecrypt manual:
> 
> http://www.truecrypt.org/docs/
>


  

You rock. That's why Blockbuster's offering you one month of Blockbuster Total 
Access, No Cost.  
http://tc.deals.yahoo.com/tc/blockbuster/text5.com


Re: [H] Truecrypt

2008-04-02 Thread Brian Weeden
Yessort of.  It's called a Traveler Disk and it is pretty easy to do.
What you do is create a Truecrypt container that is maybe 10MB smaller than
the size of the CD.   Put your data in the container.  Then under Truecrypt
go to "tools -> Traveler Disk Setup".  Point it to the dir where you have
your truecrypt container and it will put a copy of the truecrypt exe and
drivers.  Then tell it on boot to mount the container and it will make an
autorun file.  Burn the autorun, container, and Truecrypt dir to the CD root
and presto.

The catch is of course for the autorun to work you must have it enabled and
I believe you must have admin privileges to install the truecrypt driver.

More details are in the excellent Truecrypt manual:

http://www.truecrypt.org/docs/

-
Brian Weeden
Technical Consultant
Secure World Foundation


On Wed, Apr 2, 2008 at 3:46 PM, Thane Sherrington <
[EMAIL PROTECTED]> wrote:

> Is there a way to create a Truecrypt volume and burn it to CD so that it
> can be accessed by machines that don't have truecrypt installed (like a
> portable version of truecrypt?)
>
> T
>
>
>


[H] Truecrypt

2008-04-02 Thread Thane Sherrington
Is there a way to create a Truecrypt volume and burn it to CD so that 
it can be accessed by machines that don't have truecrypt installed 
(like a portable version of truecrypt?)


T




Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-07 Thread j maccraw
If you run TC's benchmark during the container
creation process you can see what 
kind of hit you're going to take.

Notice it or not, depending on what cipher & if you're
chaining them together. 
there is a performance hit. My assumption is it's not
drive speed but CPU so the 
faster the CPU(s), the less you'll notice. Combining
TwoFish + AES (for example) 
WILL cause a performance hit.


Winterlight wrote:
> I run my data and my email off encrypted drives and
I don't notice any 
> performance hit.
> 
> At 02:52 PM 2/6/2008, you wrote:
>> I wonder how much overhead encrypting the system
partition puts on the 
>> system.
>>
>> Brian Weeden wrote:
>>> I've been using TrueCrypt for a while to do
encrypted data partitions 
>>> and
>>> this is very welcome news.  Free, open source,
very strong encryption 
>>> for
>>> Windows, Linux, and OSX:
>>> http://www.truecrypt.org
> 
> 
> 


  

Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 



Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-07 Thread j maccraw
If you use keyfile(s) then passwords are not an issue.
You just issue your users 
a small capacity thumbdrive encrypted by TC w/
password to protect the 
keyfile(s) on it. Or if you are serious pick up some
IronKeys and use them to 
store keyfile(s). Don't know how this affects the new
TC version if it's 
pre-boot security but works great post-boot to mount
my secure documents partition.

Yes you can/should backup but there some data that is
too large for backup yet 
you want stored securely (temp files like downloads)
or windows goes whacky 
between backups & you rather not loose the changed
data. I have had this happen 
under DriveCrypt & previous versions of TC where your
entire container/partition 
is useless due to corruption in the beginning of the
container. On an 
unencrypted partition there is always the ability to
do sector-by-sector. Even 
windows EFS worst you loose is 1 file, so TC & the
like to be as recoverable IMHO.

Harry McGregor wrote:
> IMHO if you care enough about your data to use whole
disk encryption, 
> you care enough about your data to setup an
encrypted backup, such as 
> ssh secured dirvish, or Bacula over local network,
or even over a vpn.
> 
> Even a laptop can be backed up well while on net
using Bacula.  We have 
> several field laptops that go to tape nightly when
on net, and the users 
> are instructed to leave the laptops on at night for
that purpose.
> 
> I am seriously considering setting up True Crypt for
all of our laptop 
> users, as a government unit, we have significant
data loss prevention 
> issues.
> 
> For a long time I was concerned about data
encryption due to the 
> inability to get at it if a user loses their
password, but I think True 
> crypt has some master key options that we can deploy
as well.  I have 
> been looking over documentation on it quite a bit
today.
> 
> http://www.dirvish.org/
> http://www.bacula.org/en/
>Harry
> 
> Brian Weeden wrote:
>> Hard disk maintenance tools like Spin Rite will
work just fine but
>> you're right, data recovery would be a pain.
>>
>> Another reason to always backup your data.



  

Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs


Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread Harry McGregor
IMHO if you care enough about your data to use whole disk encryption, 
you care enough about your data to setup an encrypted backup, such as 
ssh secured dirvish, or Bacula over local network, or even over a vpn.


Even a laptop can be backed up well while on net using Bacula.  We have 
several field laptops that go to tape nightly when on net, and the users 
are instructed to leave the laptops on at night for that purpose.


I am seriously considering setting up True Crypt for all of our laptop 
users, as a government unit, we have significant data loss prevention 
issues.


For a long time I was concerned about data encryption due to the 
inability to get at it if a user loses their password, but I think True 
crypt has some master key options that we can deploy as well.  I have 
been looking over documentation on it quite a bit today.


http://www.dirvish.org/
http://www.bacula.org/en/
   Harry

Brian Weeden wrote:

Hard disk maintenance tools like Spin Rite will work just fine but
you're right, data recovery would be a pain.

Another reason to always backup your data.

On Feb 6, 2008 6:47 PM, j maccraw <[EMAIL PROTECTED]> wrote:

Likely no more than EFS does but would depend on the
type of encryption used.


Ben Ruset wrote:

I wonder how much overhead encrypting the system

partition puts on the

system.

Brian Weeden wrote:

I've been using TrueCrypt for a while to do

encrypted data partitions and

this is very welcome news.  Free, open source, very

strong encryption for

Windows, Linux, and OSX:

http://www.truecrypt.org





 

Never miss a thing.  Make Yahoo your home page.
http://www.yahoo.com/r/hs





Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread Brian Weeden
Hard disk maintenance tools like Spin Rite will work just fine but
you're right, data recovery would be a pain.

Another reason to always backup your data.

On Feb 6, 2008 6:47 PM, j maccraw <[EMAIL PROTECTED]> wrote:
> Likely no more than EFS does but would depend on the
> type of encryption used.
>
>
> Ben Ruset wrote:
> > I wonder how much overhead encrypting the system
> partition puts on the
> > system.
> >
>
> > Brian Weeden wrote:
> >> I've been using TrueCrypt for a while to do
> encrypted data partitions and
> >> this is very welcome news.  Free, open source, very
> strong encryption for
> >> Windows, Linux, and OSX:
> >>
> >> http://www.truecrypt.org
> >>
> >
> >
>
>
>  
> 
> Never miss a thing.  Make Yahoo your home page.
> http://www.yahoo.com/r/hs
>


Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread j maccraw
Likely no more than EFS does but would depend on the
type of encryption used.

Ben Ruset wrote:
> I wonder how much overhead encrypting the system
partition puts on the 
> system.
> 
> Brian Weeden wrote:
>> I've been using TrueCrypt for a while to do
encrypted data partitions and
>> this is very welcome news.  Free, open source, very
strong encryption for
>> Windows, Linux, and OSX:
>>
>> http://www.truecrypt.org
>>
> 
> 


  

Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs


Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread j maccraw
Now that's cool news! Truecrypt is good stuff.

I have yet to see data recovery program to salvage
encrypted partitions 
(assuming you had the cipher). Doesn't make me real
comfortable if a single bad 
sector would leave my data inaccessible.


Brian Weeden wrote:
> I've been using TrueCrypt for a while to do
encrypted data partitions and
> this is very welcome news.  Free, open source, very
strong encryption for
> Windows, Linux, and OSX:
> 
> http://www.truecrypt.org
> 
> 


  

Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  
http://tools.search.yahoo.com/newsearch/category.php?category=shopping


Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread j maccraw
Now that's cool news! Truecrypt is good stuff.

I have yet to see data recovery program to salvage
encrypted partitions 
(assuming you had the cipher). Doesn't make me real
comfortable if a single bad 
sector would leave my data inaccessable.


Brian Weeden wrote:
> I've been using TrueCrypt for a while to do
encrypted data partitions and
> this is very welcome news.  Free, open source, very
strong encryption for
> Windows, Linux, and OSX:
> 
> http://www.truecrypt.org
> 
> 


  

Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  
http://tools.search.yahoo.com/newsearch/category.php?category=shopping


Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread Winterlight
I run my data and my email off encrypted drives and I don't notice 
any performance hit.


At 02:52 PM 2/6/2008, you wrote:

I wonder how much overhead encrypting the system partition puts on the system.

Brian Weeden wrote:

I've been using TrueCrypt for a while to do encrypted data partitions and
this is very welcome news.  Free, open source, very strong encryption for
Windows, Linux, and OSX:
http://www.truecrypt.org




Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread Joe User
Hello Ben,

Wednesday, February 6, 2008, 4:52:10 PM, you wrote:

> I wonder how much overhead encrypting the system partition puts on the
> system.

I am also curious

-- 
Regards,
 joeuser - Still looking for the 'any' key...



Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread Ben Ruset
I wonder how much overhead encrypting the system partition puts on the 
system.


Brian Weeden wrote:

I've been using TrueCrypt for a while to do encrypted data partitions and
this is very welcome news.  Free, open source, very strong encryption for
Windows, Linux, and OSX:

http://www.truecrypt.org



[H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread Brian Weeden
I've been using TrueCrypt for a while to do encrypted data partitions and
this is very welcome news.  Free, open source, very strong encryption for
Windows, Linux, and OSX:

http://www.truecrypt.org