Re: Hard drive encryption in windows

[Rob Thompson <my.security.lists () gmail com>]

No EFS is not good.

For starters it is only encrypting the data that you tell it to.  What
if that file that you are accessing is copied over to the Swap File? 
Now you have an unencrypted copy on your computer, and a false sense
of security.

Also, there are tools freely available on the internet, with just a
VERY SMALL amount of looking that will break into the EFS.

Granted it is better than nothing, but if I were you, I wouldn't rely
on it strictly as a safe alternative.  It's better if you have nothing
else at the time and are in a pinch.

Make sure you use it in accordance with a secure erasing system,
something like Eraser.

Rob.

On 9/22/05, Beauford, Jason <jbeauford () eightinonepet com> wrote:
> EFS is no good?
>
> http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs
> /en-us/encrypt_overview.mspx
>
> JMB
>
>         |   -----Original Message-----
>         |   From: Cesc Santasusana
>         |   [mailto:cesc.santasusana () nl thalesgroup com]
>         |   Sent: Thursday, September 22, 2005 10:36 AM
>         |   To: <
>         |   Subject: Hard drive encryption in windows
>         |
>         |   Hi,
>         |
>         |   I am looking for a solution to encrypt the hard
>         |   drives which contain confidential info. Ideally,
>         |   this tool would be transparent and usable on all
>         |   the drives on the computer/laptop  (from c: to z:).
>         |   Ideally it would be easy to set up and manage, not
>         |   a problem if the tool is not free. Any experience
>         |   on this? What algorithm(s) does it use?
>         |   Another option would be to use external encrypted
>         |   drives to store the info. What are the options here?
>         |
>         |   I am looking for some background information, to
>         |   short-list all the options.
>         |
>         |   Thanks for the help!
>         |
>         |   Cesc
>         |
>         |
>         |
>         |   Unclassified
>         |
>         |


--
Rob