Educause Security Discussion mailing list archives

Re: Product request - Enterprise whole disk encryption for laptops


From: Mark Newman <mnx () UTK EDU>
Date: Mon, 17 Jul 2006 12:18:20 -0400

I would imagine that MS's EFS would do a much better job at
~approaching~ "doing the right thing" than any rotational cipher...of
course, there are loopholes with EFS but, using any rotational cipher
and feeling like you've done anything more than just checking off a box
is self-defeating....rotational ciphers (and others) are what I call
'crayon encryption' (i.e. with a box of Crayolas and enough printer
paper, a child could break it) - note: my personal preference is a pen

...and there are those that believe that compression is a form of
encryption...

Mark Newman
University of Tennessee - Knoxville

On Mon, 2006-07-17 at 11:45 -0400, Valdis Kletnieks wrote:
On Mon, 17 Jul 2006 10:53:48 EDT, Jeff Kell said:
Valdis Kletnieks wrote:
Unfortunately, Adobe v. Skylarov (or was it v. Elcomsoft and Skylarov only
got caught in the middle?) set a precedent that rot-13 was "encryption",
at least for DMCA purposes.  Blech.

Or it is really encrypted on the laptop, but the passphrase is taped to the
bottom, or the certificate is on the USB thumb drive still plugged in, or the
two-factor smart card is left in the laptop case, or... you get the idea.

I meant that some sites might get the mistaken impression that rot-13 was
enough crypto to use the "it was encrypted" loophole in many notification
requirements to avoid having to actually Do The Right Thing....



Current thread: