Suggestions on full...
 
Notifications
Clear all

Suggestions on full disk encrytion for a forensic laptop

12 Posts
10 Users
0 Reactions
1,052 Views
(@tall1)
Active Member
Joined: 14 years ago
Posts: 11
Topic starter  

Hello,

I am getting ready to purchase a laptop for conducting computer forensics in the field. I am wondering if anyone has any suggestions on full disk encryption? I have read some of the product reviews, but I am looking for user feedback on performance issues, either good or bad.

Thanks


   
Quote
(@douglasbrush)
Prominent Member
Joined: 16 years ago
Posts: 812
 

We use TrueCrypt -the price is right and it's easy to use cross platform.


   
ReplyQuote
(@Anonymous 6593)
Guest
Joined: 17 years ago
Posts: 1158
 

I am wondering if anyone has any suggestions on full disk encryption?

Be careful about PointSec – earlier releases (I can't speak for the current) have had problems that made booting impossible, and required some kind of data recovery operation. (The one I'm familiar with was in the hand of service technicians, so if you were in the field when that happened, you were toasted.)

However, do your own risk analysis if you haven't already.

Don't forget that there are HDs with built-in encryption.


   
ReplyQuote
minime2k9
(@minime2k9)
Honorable Member
Joined: 14 years ago
Posts: 481
 

Will second Truecrypt, excellent tool.


   
ReplyQuote
(@xennith)
Estimable Member
Joined: 15 years ago
Posts: 177
 

You can either use a free open source product (truecrypt), or you can pay for something of unknown quality.

This really is a no brainer.


   
ReplyQuote
(@volmasoft)
Active Member
Joined: 15 years ago
Posts: 19
 

I'd also recommend TrueCrypt for this although the security is only as good as your pass-phrase and how much time the attacker has so make sure it's complex oh and not written on a sticky note on the underside of the laptop )


   
ReplyQuote
minime2k9
(@minime2k9)
Honorable Member
Joined: 14 years ago
Posts: 481
 

I'd also recommend TrueCrypt for this although the security is only as good as your pass-phrase and how much time the attacker has so make sure it's complex oh and not written on a sticky note on the underside of the laptop )

See thats what I'm doing wrong! Apparently "password" isnt as strong as i thought.


   
ReplyQuote
PaulSanderson
(@paulsanderson)
Honorable Member
Joined: 19 years ago
Posts: 651
 

See thats what I'm doing wrong! Apparently "password" isnt as strong as i thought.

no no no, yo've got to change the the s's to 5's and the o to a 0 - its unbreakable then.


   
ReplyQuote
(@c-r-s)
Estimable Member
Joined: 14 years ago
Posts: 170
 

It depends on whether you just need to protect the storage in case of hardware loss or you will be attacked professionally with the aim to steal data. TrueCrypt and most other products, including preboot smartcard authentication, are quite useless for the latter purpose. If you've got the choice between Bitlocker and TrueCrypt, take Bitlocker as it has a rudimentary Root of Trust Measurement implemented. The way I'd recommend to my clients e.g. for traveling with laptops is a specific commercial FDE solution combined with a smartcard based bootsector verification. For higher security physical tamper resistance is needed.


   
ReplyQuote
minime2k9
(@minime2k9)
Honorable Member
Joined: 14 years ago
Posts: 481
 

See thats what I'm doing wrong! Apparently "password" isnt as strong as i thought.

no no no, yo've got to change the the s's to 5's and the o to a 0 - its unbreakable then.

Aaaaahhhhh now I understand, but i thought a captital P was required to make it uber leet and secure


   
ReplyQuote
Page 1 / 2
Share: