Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 43 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Hardwarearrow HHD PGP Encryption
EH-Net
May 23, 2013, 04:46:45 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: HHD PGP Encryption  (Read 5233 times)
0 Members and 1 Guest are viewing this topic.
Thegmandrive
Newbie
*
Offline Offline

Posts: 43


View Profile
« on: February 23, 2009, 02:54:51 PM »

I have a question on HHD encryption. I have a Mac and used it’s on board File Vault.
http://en.wikipedia.org/wiki/FileVault

I my HHD is pretty full, and found File Vault bogged down my system, not horribly noticeable, but It would lag on opening programs, where it did not do that before I enabled File Vault.  Also I found File Vault was not customizable. For example, say I wanted to just encrypt a folder. File Vault does not give that option.  So I opted to try PGP Whole Disk Encryption http://www.pgp.com/products/wholediskencryption/index.html

So far I found it to be very customizable, and it works very well with my mail client. My question is how secure do you think it is? I found this Wiki page http://en.wikipedia.org/wiki/Comparison_of_disk_encryption_software with comparisons to different software, and it looks like PGP whole disk encryption is pretty solid. My “pass phase” is between 15 – 25 words long with numbers and symbols… I know that is probably over kill, but nobody is going to use a brute force attack against that.

My question is, if someone took my HHD out, and connected it to there laptop/desktop they would see an encrypted section, I’m assuming with this PGP encryption, the data would just be jumbles, how long would it take to crack the PGP encryption?
Logged
timmedin
Sr. Member
****
Offline Offline

Posts: 469



View Profile WWW
« Reply #1 on: February 23, 2009, 09:52:58 PM »

In your case there is no chance for side-channeling or a cold boot attack so there is no short cut. Attacking the encryption on your hard drive would be computationally infeasible. Maybe the NSA would be able to do it, but that is about it. There are two attack vectors for decrypting your hard drive.

The first attack would be on your pass phrase. Your pass phase probably uses English words and uses substitutions like a->@, e->3, etc. Not that attacking your pass phase is easy, but it probably contains less entropy (randomness) than the 256 bit AES key.

The other attack would be against the AES key. There are no short cuts here and you would have to try every possible key in order to find the right one. This is not an easy task. To put it into perspective there are around 2^256 atoms in the universe. That is essentially playing the lottery where you have to find one atom in the entire universe. You can keep trying, but it you would have to be [nearly] infinitely lucky. This is not going to happen.

Even if a quantum computers become a reality, the effective strength of the key is only change from 2^n to 2^(n/2), and a 128 bit key is still considered strong enough.

The quickest and most reliable method to crack this encryption is the rubber hose method.
« Last Edit: February 23, 2009, 09:57:15 PM by timmedin » Logged

twitter.com/timmedin | http://blog.securitywhole.com
jason
Hero Member
*****
Offline Offline

Posts: 1012



View Profile WWW
« Reply #2 on: February 24, 2009, 03:34:03 PM »

You might also want to check out truecrypt for the mac...
Logged
Thegmandrive
Newbie
*
Offline Offline

Posts: 43


View Profile
« Reply #3 on: February 24, 2009, 03:53:55 PM »

You might also want to check out truecrypt for the mac...

After doing further research it looks like the features are fairly comperable for the PGP Encryption software and Truecrypt.

Do you have an opinion on which one you think is better?
Logged
jason
Hero Member
*****
Offline Offline

Posts: 1012



View Profile WWW
« Reply #4 on: February 28, 2009, 10:17:41 PM »

I've used PGP before for this, but only on Windows platforms. I've been using truecrypt for the last few years on both windows and linux and like it at least as well, if not better.
Logged
Thegmandrive
Newbie
*
Offline Offline

Posts: 43


View Profile
« Reply #5 on: February 28, 2009, 11:14:06 PM »

I tried truecrypt, and I love it, I like it better than PGP, thank you for the suggestion.
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.051 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.