.

Disk Encryption

<<

mn_kthompson

User avatar

Jr. Member
Jr. Member

Posts: 58

Joined: Tue Sep 19, 2006 1:59 pm

Location: Mankato, MN

Post Wed Sep 20, 2006 1:55 pm

Disk Encryption

I'm not sure if i'm posting in the proper place so forgive me if this should go elsewhere.

I'm evaluating hard disk encryption software for the University that I work for and there is one that I really like, Pointsec for PC.  I've encrypted the disk on a testing laptop and gone over it with a Helix CD and i wasn't able to do anything, which is to be expected.

The question is, how could I verify that things are actually encrypted?  I know, this is a reputable product with certifications from everyone under the sun and I'm sure they're not cheating me, but hacking is about curiosity and learning new things.  How do I know that the software really encrypts the disk and doesn't just mess with the partition table or make some modifications to the MBR while leaving all of my precious data in the clear?  What would it take (other than independent certification) to satisfy you that the data was encrypted?  How would you verify it?

Thanks!
<<

LSOChris

Post Wed Sep 20, 2006 2:19 pm

Re: Disk Encryption

take a dd image of the whole disk and then mount it in linux

Return to Forensics

Who is online

Users browsing this forum: No registered users and 0 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software