Re: Disk encryption tools...?

From: WinTerMiNator (me_at_privacy.net)
Date: 11/27/04 

Date: Sat, 27 Nov 2004 16:06:46 +0100

RPK wrote:
> I installed "BladeBox" and "TrueCrypt", the so called
> On-The-Fly-Encryption programs to create encrypted volumes.
>
> The FREE edition BladeBox allows 30 MB. of volume. I created the
> volume
> and fomated it to NTFS. I chose AES-256 bit encryption algorithm.
>
> Similary I created a 50 MB. volume using TrueCrypt, and selecting AES.
>
> Both these tools were installed in WinXP. I also have "FineCrypt"
> encryption program installed. When I selected "File Statistics" from
> "FineCrypt" to get the randomness information, the BladeBox volume
> shows absolutely
> no randomness, whereas the TrueCrypt volumes show sufficient
> randomness.
>
> What's the problem? Is the BladeBox volume not encrypted? But the
> properties display summary of AES being used.
>
> TrueCrypt is indeed marvelous. Looks like a commercial product.
> Many of you may have analyzed its source code. What you all say about
> this product?
>
> But I think, encrypting a volume with passphrase is not a very secure
> option. It should use randomly generated key or session key.
>
> I read PGP documentation for the same and found that it does has a
> support for Public/Private Key for disk encryption.

Why use a closed-source program? You have the choice among OpenSource ones:
- TrueCrypt, probably the most elaborated, but having some bugs with other
software doing HDD "low access" like AV programs (NAV) or UDF formatted
CD-ROM read / write programs (Nero InCD, Roxio Drag-to-Disc). It also uses
some part of OpenSSL code which is today outdated (old versions, while
OpenSSL uses today newer ones).
- Cross-Crypt, very "basical", without bells and whistles (command line
program), can be used with Sarah Dean's dedicated GUI. Robust, compatible
with Linux aes-loop.
- Sarah Dean's Free OTFE, in test phase.

Best regards, 

-- 
Michel Nallino aka WinTerMiNator
http://www.winterminator.fr.st (Internet et sécurité)
http://www.gnupgwin.fr.st (GnuPG pour Windows)
Adresse e-mail invalide; pour me contacter:
http://www.cerbermail.com/?vdU5HHs5WG

Relevant Pages

  • Disk encryption tools...?
    ... The FREE edition BladeBox allows 30 MB. ... I chose AES-256 bit encryption algorithm. ... no randomness, whereas the TrueCrypt volumes show sufficient randomness. ...
    (sci.crypt)
  • Re: Installing EncFS on SUSE 10.0
    ... within the original encrypted file/directory or partition. ... the name Truecrypt, you can use it, and give it away to friends, but, you ... To create the random data for the encryption, ... with a FAT file system, install truecrypt on a Windows computer at work, ...
    (alt.os.linux.suse)
  • [SW] TrueCrypt 3.0 available at truecrypt.sourceforge.net
    ... The principle is that a TrueCrypt volume is created within another ... for the outer volume. ... Serpent encryption algorithm ... - If the size of a partition/device was not a multiple of 1024 bytes, ...
    (sci.crypt)
  • Re: encryption software for pendrive
    ... TrueCrypt has a Traveller option that will put the necessary binaries on ... Does anyone know of a free portable encryption solution? ... > drives and even on hard drives of some manufacturers. ...
    (Security-Basics)
  • RE: encryption software for pendrive
    ... TrueCrypt has a Traveller option that will put the necessary binaries on ... Does anyone know of a free portable encryption solution? ... drives and even on hard drives of some manufacturers. ... This e-mail message, ...
    (Security-Basics)