Seeking Encryption Software Referals

From: test (test_at_)
Date: 02/24/05 

Date: Thu, 24 Feb 2005 15:43:24 -0600

(Note: this is being crossposted, edit your headers to reply)

I am searching for some top notch hard drive encryption software that
handles full drive encryption. Like most users who do not have a PhD
in cryptography, I don't know which product is what it claims to be.
All the vendors claim to be the best, though I've heard a number of
horror stories about seemingly reputable vendors whose encryption was
flawed or non-existent. I am looking for personal recommendations or
links to sites where thorough comparisons are made (and not just of
features).

I have done some research on the subject and have read the snake oil
FAQ, as well as scouring newgroups related to crypto and security.
For those of you who have read this far, let me tell you exactly what
I'm looking for and maybe you can point me in the right direction.

I am not satisfied with virtual drives, or file and folder based
encryption. I want the full hard drive (minus perhaps the boot
sector) to be encrypted, including temp files, the swap file, and free
space.

I am currently using Windows ME. I would like something that is
compatible with my current OS, but will consider upgrading if it is
the only option.

I need something that is fairly robust from a programming standpoint,
something that is not going to crash and leave me without access to my
data. Restoring from backups is a pain and they are never fully
current.

I would prefer software that has published source code that all the
crypto geeks have had a chance to pick at and critique. Also I prefer
software that uses a standard, well accepted and tested implementation
of a secure encryption algorithm.

I've checked out several so far. I've heard bad things about
DiskCrypt and SecureStar. PC Guardian's Encryption Plus looks good.
I like the Common Criteria EAL1 and FIPS 140-2 certifications, but I
don't like the "automatic user initiated password reset" option. Also
it looks like it is only for enterprise business and is not sold in
small quantities.

I have also examined SafeBoot's Device Encryption, which also seems
good and is FIPS certified, and is actually compatible with my OS.
They also use a reset password option, which I suppose is a necessity
in the corporate world, but totally undermines real security.

So, if anyone has any comments on these or other software which may
meet my needs, I'll be glad to hear it.

Thanks in advance,
Brian

Relevant Pages

  • Re: Quadruple Algorithms
    ... occurring" (a fatal flaw being found in AES, ... If you really want secure crypto use various layers of encryption ... with the output of one cipher feeding ...
    (sci.crypt)
  • Re: AES and Diehard
    ... >you could employ kill file, ... The result of encryption which might eventually develop ... a standard for crypto the 'diversity' of interests is ... compression algorithm could exploit in order to compress. ...
    (sci.crypt)
  • Re: Crypto implementation in consumer encryption software
    ... >literally hundreds of encryption programs using AES, Twofish, ... too many also put every concevable feature in the product - giving ... reasonable risk, and find a product that does what you want. ... most 'consumer' crypto apps don't seem to understand ...
    (sci.crypt)
  • Re: Are computer forensics people as stupid as they seem?
    ... I said it was undetectable that it was crypto. ... Sorry, but if people were going to jail for DBAN'd drives, you should ... expressed a genuine interest, instead of kicking me in the nuts. ... standard encryption accomplishes. ...
    (alt.privacy)
  • [PATCH 12/13: eCryptfs] Crypto functions
    ... components of the eCryptfs cryptographic filesystem. ... eCryptfs crypto functions. ... * @param offset ... * userspace to perform the encryption of the session key; ...
    (Linux-Kernel)