Cryptography

The SANS ISC posted an article titled “Pontsec Disk Encryption Cracked”. Really? Cracked? I was thinking that there was some new cool uber l337 hax0r tool that breaks disk encryption from boot…and no, this isn’t the cold boot attack that has gotten all the attention lately. This is the firewire attack (winlockpwn tool) on Windows […]

Well, that didn’t take long…a tool to dump the memory and pull the encryption keys off of encrypted hard drives has been released. Like I said in a previous post, it was only a matter of time and the risk/threat vector of this vulnerability starts to change with the release of a tool. On a

I am sure everyone has heard about and watched the YouTube video of the Princeton researchers that conduct cold boot attacks on encrypted hard disks. If you haven’t, I highly suggest you do. As everyone agrees…this is a very significant vulnerability and every organization that uses software to encrypt hard disks should look at ways

Big news from the TrueCrypt Foundation yesterday…the new version of TrueCrypt (v5.0) supports full disk encryption and/or encryption of the system partition using pre-boot authentication. In addition, Mac OS X support was added and a GUI interface for the Linux version is now included. From the TrueCrypt web site: “TrueCrypt can on-the-fly encrypt a system

Pretty unique file encryption program available for Mac and Windows now available. It’s called Drop Secure Professional 2.0. What makes this program different then others is that it: “…starts by dividing up the file into small chunks. By default, those chunks are 256 bytes long. Each chunk is encrypted with a separate cipher, using a

A few months ago I heard on the “Security Now!” podcast that there was a really good open-source encryption application that is so good that it is literally scary. It is so good, and so well done that you can use it for “plausible deniability“. In TrueCrypt, this provides you with (from the TrueCrypt website):