RE: Transporting source code securely

["Meidinger Christopher" <chris.meidinger () badenIT de>]

Are they carrying linux machines or windows machines with them?

If they are linux machines, they could us an encrypted archive (dmcrypt
+ luks) and access it over sftp - or even smb filesharing.

If they are windows machines, format, install linux, and use above
method.

Cheers,

Chris 

> -----Original Message-----
> From: Bill Stout [mailto:bill.stout () greenborder com] 
> Sent: Wednesday, August 17, 2005 11:40 PM
> To: security-basics () lists securityfocus com
> Subject: Transporting source code securely
>
> Our developers occasionally debug at customers sites, and 
> need to bring
> about a Gig of proprietary source code with them.   
>
> I'd like to secure the media they take with them in case they lose it.
>
> I don't want to add software to the debugged machine in order 
> to access
> and decrypt the media they bring.  Both PGP and WinZip 
> require software
> to be loaded, although PGP acts like a disk, WinZip requires 
> extraction
> to use encrypted files (not usable).
>
> I'm also skeptical of the portable biometric drives.  It 
> appears that if
> the drive were removed, it could be read in cleartext.
>
> What is used out there to transport source code securely?
>
> Bill Stout