Re: Encrypted Data at Rest

2017-08-03 Thread Jody Bevan via 4D_Tech
Richard: Hardware acceleration in the CPU is still not nearly as fast as this task being done by the drive controller. All software runs through the CPU. Yes, the CPU can support specific types of code which helps. Just like GPUs, the advanced support in the drive controllers makes a big

RE: Encrypted Data at Rest

2017-08-03 Thread Bruno LEGAY via 4D_Tech
Hi, This is an interesting subject... I would say it depends on what you want to protect from and how deep are your pockets... As people said, it is difficult to encrypt the whole 4D database without encryption being supported at the database engine level... At the moment 4D does not support

Re: Encrypted Data at Rest

2017-08-02 Thread Tim Nevels via 4D_Tech
On Aug 2, 2017, at 7:35 PM,Richard Wright wrote: > Not sure why you say for personal use only. FileVault supports 256 AES and > benefits from hardware acceleration in the CPU. I’ve never done timing > comparisons but there are no noticeable performance effects at all. Some > people have

Re: Encrypted Data at Rest

2017-08-02 Thread Richard Wright via 4D_Tech
Not sure why you say for personal use only. FileVault supports 256 AES and benefits from hardware acceleration in the CPU. I’ve never done timing comparisons but there are no noticeable performance effects at all. Some people have tested, years ago, and found at most only 2-3% degradation. >

Re: Encrypted Data at Rest

2017-08-02 Thread Milan Adamov via 4D_Tech
FileVault 2, or just FileVault since Mountain Lion, is drive level encryption. Milan Sent from my iPad > On Aug 2, 2017, at 21:21, Tim Nevels via 4D_Tech <4d_tech@lists.4d.com> wrote: > >> On Aug 2, 2017, at 12:51 PM,Chip Scheide wrote: >> >> depending on the computer system. >> This is built

RE: Encrypted Data at Rest

2017-08-02 Thread Tim Nevels via 4D_Tech
On Aug 2, 2017, at 12:51 PM,Chip Scheide wrote: > depending on the computer system. > This is built into (software) OS X it is called 'FileVault'. > I believe that Windows 7+ has a similar feature, but this might not be > true at all, or only for newer (8 and or 10). > > I do not have explicit

RE: Encrypted Data at Rest

2017-08-02 Thread Justin Will via 4D_Tech
I don't believe that FileVault and Windows built in encryption is sufficient enough. I need to comply with NIST Special Publication 800-57. I believe it will have to be hardware based with some sort of special key management. Honestly it's all pretty foreign to me. Justin

Re: Encrypted Data at Rest

2017-08-02 Thread Keith Culotta via 4D_Tech
FileVault 2 was a big improvement over Apple's first attempt. This link describes the performance impact: http://osxdaily.com/2011/08/10/filevault-2-benchmarks-disk-encryption-faster-mac-os-x-lion/ Keith - CDI > On Aug 2, 2017, at 12:47 PM, Jody Bevan via 4D_Tech <4d_tech@lists.4d.com> >

Re: Encrypted Data at Rest

2017-08-02 Thread Jody Bevan via 4D_Tech
Chip: Even longer than the hardware/firmware solutions there has been software to do this. The performance hit is substantial though. I remember testing out a software solution about 15 years ago with a compiled standalone version of our application. Essentially with these they intercept the

RE: Encrypted Data at Rest

2017-08-02 Thread Chip Scheide via 4D_Tech
depending on the computer system. This is built into (software) OS X it is called 'FileVault'. I believe that Windows 7+ has a similar feature, but this might not be true at all, or only for newer (8 and or 10). I do not have explicit experience (I'm sure Jody does), i would expect there to be

Re: Encrypted Data at Rest

2017-08-02 Thread Jody Bevan via 4D_Tech
. Developer Argus Productions Inc. <https://www.facebook.com/ArgusProductions/> > On Aug 2, 2017, at 8:22 AM, Justin Will via 4D_Tech <4d_tech@lists.4d.com> > wrote: > > I have had a request to have a system have all data at rest encrypted. My > understanding is tha

RE: Encrypted Data at Rest

2017-08-02 Thread Dennis, Neil via 4D_Tech
> Have others had to deal with this and if so what options did you find > available and what did you choose as your solution? The easiest is to turn on the drive encryption. However I also selectively encrypt more sensitive information so it is double encrypted. Neil Privacy

Encrypted Data at Rest

2017-08-02 Thread Justin Will via 4D_Tech
I have had a request to have a system have all data at rest encrypted. My understanding is that they actually want the 4D datafile and backups encrypted at all times. Have others had to deal with this and if so what options did you find available and what did you choose as your solution