View Single Post
  #14 (permalink)  
Old 11-08-2006, 10:26 PM
Arthur T.
Guest
 
Posts: n/a
Default Re: So why don't we use full disk encryption on all mobile devices?

In
Message-ID:<1162681910.538093.272460@e3g2000cwe.googlegrou ps.com>,
"Saqib Ali" <docbook.xml@gmail.com> wrote:

>> What version of Compusec did you benchmark? I haven't
>> installed it, yet, but the documentation of CompuSec 4.21 says,
>> "Fast AES Algorithm with 128 or 256 bit key length."

>
>I had the 4.21 (Free) version installed. And 128bit was the only
>option. Maybe I missed something.
>
>Let me know if are able to install the product successfully and encrypt
>using 256bit AES


I installed it, didn't like it, and uninstalled it. I didn't
try encrypting the drives, but I tried using 256-bit strings for
the securityinfo.dat file, and couldn't make it work.

Of course, even 128-bit encryption is overkill since the
password is a maximum of 16 alpha-numeric characters. I work that
out to be just over 95 bits worth. Even worse, you *must* have
two passwords (one for password recovery), so I figure that brings
it down to just over 94 bits.

Also, there's something akin to a back-door in Compusec. In
their Yahoo support group, one message said:

>Hi, may I recommend you to send your Securityinfo.dat file to:
>
>support.sg@ce-infosys
>
>Send it with a request to have them extract your UserID and password
>reset code.
>
>Let us know if you encounter any problem.
>
>CE-Infosys




--
Arthur T. - ar23hur "at" intergate "dot" com
Looking for a good MVS systems programmer position

Reply With Quote