Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-07 Thread j maccraw
If you run TC's benchmark during the container
creation process you can see what 
kind of hit you're going to take.

Notice it or not, depending on what cipher  if you're
chaining them together. 
there is a performance hit. My assumption is it's not
drive speed but CPU so the 
faster the CPU(s), the less you'll notice. Combining
TwoFish + AES (for example) 
WILL cause a performance hit.


Winterlight wrote:
 I run my data and my email off encrypted drives and
I don't notice any 
 performance hit.
 
 At 02:52 PM 2/6/2008, you wrote:
 I wonder how much overhead encrypting the system
partition puts on the 
 system.

 Brian Weeden wrote:
 I've been using TrueCrypt for a while to do
encrypted data partitions 
 and
 this is very welcome news.  Free, open source,
very strong encryption 
 for
 Windows, Linux, and OSX:
 http://www.truecrypt.org
 
 
 


  

Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 



Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-07 Thread j maccraw
If you use keyfile(s) then passwords are not an issue.
You just issue your users 
a small capacity thumbdrive encrypted by TC w/
password to protect the 
keyfile(s) on it. Or if you are serious pick up some
IronKeys and use them to 
store keyfile(s). Don't know how this affects the new
TC version if it's 
pre-boot security but works great post-boot to mount
my secure documents partition.

Yes you can/should backup but there some data that is
too large for backup yet 
you want stored securely (temp files like downloads)
or windows goes whacky 
between backups  you rather not loose the changed
data. I have had this happen 
under DriveCrypt  previous versions of TC where your
entire container/partition 
is useless due to corruption in the beginning of the
container. On an 
unencrypted partition there is always the ability to
do sector-by-sector. Even 
windows EFS worst you loose is 1 file, so TC  the
like to be as recoverable IMHO.

Harry McGregor wrote:
 IMHO if you care enough about your data to use whole
disk encryption, 
 you care enough about your data to setup an
encrypted backup, such as 
 ssh secured dirvish, or Bacula over local network,
or even over a vpn.
 
 Even a laptop can be backed up well while on net
using Bacula.  We have 
 several field laptops that go to tape nightly when
on net, and the users 
 are instructed to leave the laptops on at night for
that purpose.
 
 I am seriously considering setting up True Crypt for
all of our laptop 
 users, as a government unit, we have significant
data loss prevention 
 issues.
 
 For a long time I was concerned about data
encryption due to the 
 inability to get at it if a user loses their
password, but I think True 
 crypt has some master key options that we can deploy
as well.  I have 
 been looking over documentation on it quite a bit
today.
 
 http://www.dirvish.org/
 http://www.bacula.org/en/
Harry
 
 Brian Weeden wrote:
 Hard disk maintenance tools like Spin Rite will
work just fine but
 you're right, data recovery would be a pain.

 Another reason to always backup your data.



  

Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs


[H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread Brian Weeden
I've been using TrueCrypt for a while to do encrypted data partitions and
this is very welcome news.  Free, open source, very strong encryption for
Windows, Linux, and OSX:

http://www.truecrypt.org


Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread Ben Ruset
I wonder how much overhead encrypting the system partition puts on the 
system.


Brian Weeden wrote:

I've been using TrueCrypt for a while to do encrypted data partitions and
this is very welcome news.  Free, open source, very strong encryption for
Windows, Linux, and OSX:

http://www.truecrypt.org



Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread j maccraw
Now that's cool news! Truecrypt is good stuff.

I have yet to see data recovery program to salvage
encrypted partitions 
(assuming you had the cipher). Doesn't make me real
comfortable if a single bad 
sector would leave my data inaccessible.


Brian Weeden wrote:
 I've been using TrueCrypt for a while to do
encrypted data partitions and
 this is very welcome news.  Free, open source, very
strong encryption for
 Windows, Linux, and OSX:
 
 http://www.truecrypt.org
 
 


  

Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  
http://tools.search.yahoo.com/newsearch/category.php?category=shopping


Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread j maccraw
Likely no more than EFS does but would depend on the
type of encryption used.

Ben Ruset wrote:
 I wonder how much overhead encrypting the system
partition puts on the 
 system.
 
 Brian Weeden wrote:
 I've been using TrueCrypt for a while to do
encrypted data partitions and
 this is very welcome news.  Free, open source, very
strong encryption for
 Windows, Linux, and OSX:

 http://www.truecrypt.org

 
 


  

Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs


Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread Brian Weeden
Hard disk maintenance tools like Spin Rite will work just fine but
you're right, data recovery would be a pain.

Another reason to always backup your data.

On Feb 6, 2008 6:47 PM, j maccraw [EMAIL PROTECTED] wrote:
 Likely no more than EFS does but would depend on the
 type of encryption used.


 Ben Ruset wrote:
  I wonder how much overhead encrypting the system
 partition puts on the
  system.
 

  Brian Weeden wrote:
  I've been using TrueCrypt for a while to do
 encrypted data partitions and
  this is very welcome news.  Free, open source, very
 strong encryption for
  Windows, Linux, and OSX:
 
  http://www.truecrypt.org
 
 
 


  
 
 Never miss a thing.  Make Yahoo your home page.
 http://www.yahoo.com/r/hs



Re: [H] Truecrypt 5.0 now does system (boot) drive encryption and works with OSX

2008-02-06 Thread Harry McGregor
IMHO if you care enough about your data to use whole disk encryption, 
you care enough about your data to setup an encrypted backup, such as 
ssh secured dirvish, or Bacula over local network, or even over a vpn.


Even a laptop can be backed up well while on net using Bacula.  We have 
several field laptops that go to tape nightly when on net, and the users 
are instructed to leave the laptops on at night for that purpose.


I am seriously considering setting up True Crypt for all of our laptop 
users, as a government unit, we have significant data loss prevention 
issues.


For a long time I was concerned about data encryption due to the 
inability to get at it if a user loses their password, but I think True 
crypt has some master key options that we can deploy as well.  I have 
been looking over documentation on it quite a bit today.


http://www.dirvish.org/
http://www.bacula.org/en/
   Harry

Brian Weeden wrote:

Hard disk maintenance tools like Spin Rite will work just fine but
you're right, data recovery would be a pain.

Another reason to always backup your data.

On Feb 6, 2008 6:47 PM, j maccraw [EMAIL PROTECTED] wrote:

Likely no more than EFS does but would depend on the
type of encryption used.


Ben Ruset wrote:

I wonder how much overhead encrypting the system

partition puts on the

system.

Brian Weeden wrote:

I've been using TrueCrypt for a while to do

encrypted data partitions and

this is very welcome news.  Free, open source, very

strong encryption for

Windows, Linux, and OSX:

http://www.truecrypt.org





 

Never miss a thing.  Make Yahoo your home page.
http://www.yahoo.com/r/hs