Security Basics mailing list archives
Fwd: Encrytped USB Key quick win solution
From: "Jed R. Mallen" <jedmallen () gmail com>
Date: Thu, 15 Oct 2009 11:19:35 +0800
I used FreeOTFE before switching to TrueCrypt. Reason for using both is I need to access the encrypted volumes in both Linux and Win32. Reason for dumping FreeOTFE is it's cumbersome during the time I used it. Maybe what you can also check are the opensource crypto libraries available in the different programming languages and create a working interface around it. Perl, Python, Ruby, etc has implementations of the famous opensource cryptos like Blowfish, AES, etc. Backing up the password seems like an iffy option (you need to protect the password and to do that you need another password?). Truecrypt has a nice solution which is a random key file that you can use in combination with your passphrase. /2c On Wed, Oct 14, 2009 at 4:04 AM, mojorising <moj0rising () aim com> wrote:
I've done a bit of checking around on this in the past couple of months and I would say FreeOTFE is probably your best option for Windows users, though I haven't used it myself. As a Linux user, I started using LUKS (the technology behind FreeOTFE) to encrypt my USB drive and it works great. You can even set aside a non-encrypted partition if you wish. Mac users can use LUKS too -- just like I do from my Linux machine. When the same USB drive is inserted into a Windows machine, you can use FreeOTFE (which would reside on the USB stick itself) to unlock and access it. You probably already know FreeOTFE isn't exactly an encryption application on it's own but rather a GUI front-end for LUKS. There are a few handy resources available on the web for setting all this up, of course. A quick Google search such as http://www.google.ca/search?q=luks+usb can get you started. Good luck, Mike On 05/10/2009, Steve Freeman <freema2 () bellsouth net> wrote:I have been in the position of a limited budget for a particular fiscal year and negotiated with a vendor a cost for the current year that my company could swallow followed with a contract for the next year to complete the amount needed. This allowed me to implement the solution I wanted for the enterprise only once and with the product that fit best. This kept me from implementing one product now followed with another product in the next fiscal year. Discuss this with the vendor you want to work with and see if they can arrange a two part contract for the same product. This will save you an enormous amount of work and ensure you are their customer. A win-win proposal if you can work it out. Many vendors can accommodate this type of sale. Steve -----Original Message----- From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Paul Deasy Sent: Saturday, October 03, 2009 7:29 AM To: Secure Net Cc: security-basics () lists securityfocus com Subject: Re: Encrytped USB Key quick win solution HI, Have you looked at Device Control, by Lumension ? <http://www.lumension.com/data-protection/> In my opinion, it's a very good product. (From my view point as an administrator of the product). Though when you say you have a limited budget, you could always talk with a reseller, and try to negotiate a discount for a volume order. I can PM you the name of our reseller, (UK based), who I have found to be very good with pricing on the various security systems we have bought. PD 2009/9/30 Secure Net <secure.net () live ca>:Hi, I'm working in a large enterprise that will look next year for an"enterprise class solution" that can handle all the life cycle of USB key that use encryption.But now, we have to find a quick win solution that we can put inproduction shortly with a limited budget.I personally used Truecrypt for several years but here the reason why Idon’t want to use it for an enterprise solution:1-If the user lost the password of his USB key, you are dead 2-If the user go on a computer that don't already have Truecryptinstalled, you need administrative privilegeI did some search and I tried FreeOTFE (http://www.freeotfe.org/) It does what I wanted to: 1-Technical Support will be able to create a backup key before giving theUSB key to the user. So they will be able to recover the data if the user lost his password.2-There is a utility called FreeOTFE Explorer that can open the encryptedvolume on the USB Key in the case you don't have administrative privilege on the computer. The app is not very quick but it seems to do the job.My question is: Did someone had any bad experience with this app? If yes,did you find a better one that did the things I mentioned before and was working fine?Thanks JEP _________________________________________________________________ Avec Windows Live, vous gardez le contact avec tous vos amis au mêmeendroit.http://go.microsoft.com/?linkid=9660830 ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSLcertificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727 d1------------------------------------------------------------------------------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727 d1 ------------------------------------------------------------------------ ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
-- Jed R. Mallen | GPG key ID: 81E575A3 fp: 4E1E CBA5 7E6A 2F8B 8756 660A E54C 39D6 81E5 75A3 | http://jedmallen.com ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
Current thread:
- Encrytped USB Key quick win solution Secure Net (Oct 01)
- RE: Encrytped USB Key quick win solution Smith, Ryan (Oct 01)
- Re: Encrytped USB Key quick win solution Ben Chapman (Oct 01)
- Re: Encrytped USB Key quick win solution Gregory Rubin (Oct 02)
- Re: Encrytped USB Key quick win solution Ben Chapman (Oct 02)
- RE: Encrytped USB Key quick win solution feeks (Oct 02)
- Re: Encrytped USB Key quick win solution Ben Chapman (Oct 01)
- Re: Encrytped USB Key quick win solution Paul Deasy (Oct 05)
- RE: Encrytped USB Key quick win solution Steve Freeman (Oct 05)
- Re: Encrytped USB Key quick win solution mojorising (Oct 14)
- Message not available
- Fwd: Encrytped USB Key quick win solution Jed R. Mallen (Oct 15)
- RE: Encrytped USB Key quick win solution Steve Freeman (Oct 05)
- RE: Encrytped USB Key quick win solution Smith, Ryan (Oct 01)
- <Possible follow-ups>
- RE: Encrytped USB Key quick win solution Paul Jenkins (Oct 01)