whole disk encryption on multi boot laptop

[paul haigh]

Dear List,

I have a Lenovo T61 laptop which has the folllowing Os's:
XP
Ubuntu
Backtrack3

Due to my work environment I need to implement a whole disk encryption
solution.  I would like to do this without having to rebuild the box,
however I can if necessary.  Does anyone have any suggestions on the
best way to pursue this?

Any help is greatly appreciated.


Thanks!

-paul

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[stoneyted]

Paul,

To avoid rebuilding the machine and to maintain operating system
compatibility I think you will need to use a hardware based disk
encryptor.  You will need to swap the hard-disk over in your laptop,
but once you do that you just need to image onto the drive and all
your settings will be carried over.

A range of drives with FIPS 140-2 and CAPS security evaluations are
available from Stonewood.

http://www.stonewoodgroup.co.uk/index.php/encryption/

Best Regards,

Tony Stead.

On Thu, Oct 15, 2009 at 1:08 PM, paul haigh <pmphaigh@...> wrote:

> Dear List,
>
> I have a Lenovo T61 laptop which has the folllowing Os's:
> XP
> Ubuntu
> Backtrack3
>
> Due to my work environment I need to implement a whole disk encryption
> solution.  I would like to do this without having to rebuild the box,
> however I can if necessary.  Does anyone have any suggestions on the
> best way to pursue this?
>
> Any help is greatly appreciated.
>
>
> Thanks!
>
> -paul
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>
>

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[Lou Cipher]

Paul,

I would recommend looking into hardware based FDE drives. There are
several manufacturers that offer these.

1) Create a bit-by-bit ghost image of your current drive;
2) swap the current drive with a hardware based FDE drive;
3) restore the image on the new drive;
4) Initialize the new FDE from your Windows partition.

This is a how I got FDE on both of my computers. Please feel free to
email me directly, if you have questions about my setup.

Thanks
saqib
https://www.ibm.com/developerworks/mydeveloperworks/blogs/CloudComputing/



On Thu, Oct 15, 2009 at 5:08 AM, paul haigh <pmphaigh@...> wrote:

> Dear List,
>
> I have a Lenovo T61 laptop which has the folllowing Os's:
> XP
> Ubuntu
> Backtrack3
>
> Due to my work environment I need to implement a whole disk encryption
> solution.  I would like to do this without having to rebuild the box,
> however I can if necessary.  Does anyone have any suggestions on the
> best way to pursue this?
>
> Any help is greatly appreciated.
>
>
> Thanks!
>
> -paul
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>
>

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[securityfocus-25]

I have performed full hdd encryption on a laptop of mine but only having ubuntu & xp. I didn't see the reason why I would want to put BT3 installed on the hdd when it is meant to be on a boot-cd or I kept mine on a flashdrive. However, check out BT4 they switched to debian based and it is meant for installing on the hdd or flashdrive. Updating is easy just as you would with ubuntu, same debian repositories. However, I have yet to check out its encryption methods.

You can fully encrypt your windows partition as you have it now without reinstalling the OS with truecrypt: http://www.truecrypt.org/

I don't know about having full hdd encryption w/ your 3 OSs in their current state. I would recommend having XP & ubuntu then possibly installing BT4 to the drive or flashdrive. I'm almost certain that you will need to reinstall the ubuntu partition at least and possibly backtrack3/4

With Ubuntu you can set up an encrypted home dir after the OS is installed depending on your version. But for full hdd encryption you need to reinstall. Use an alternate installer disc (not "desktop CD") to manually setup encrypted LVM partition.

Steps outlined here: http://oei.yungchin.nl/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/

Remember to backup all your data before attempting any of these procedures or others you may find via Google. Again, you can keep your windows partition and encrypt it fully but will need to rebuild the linux OS's.

Hope this was somewhat useful. Good luck!


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[asndpp]

Use tools like safeboot and mcafee end point encryption to achieve this.

Regards,
Durga Prasad.

On Sat, Oct 17, 2009 at 1:15 AM,  <securityfocus@...> wrote:

> I have performed full hdd encryption on a laptop of mine but only having ubuntu & xp. I didn't see the reason why I would want to put BT3 installed on the hdd when it is meant to be on a boot-cd or I kept mine on a flashdrive. However, check out BT4 they switched to debian based and it is meant for installing on the hdd or flashdrive. Updating is easy just as you would with ubuntu, same debian repositories. However, I have yet to check out its encryption methods.
>
> You can fully encrypt your windows partition as you have it now without reinstalling the OS with truecrypt: http://www.truecrypt.org/
>
> I don't know about having full hdd encryption w/ your 3 OSs in their current state. I would recommend having XP & ubuntu then possibly installing BT4 to the drive or flashdrive. I'm almost certain that you will need to reinstall the ubuntu partition at least and possibly backtrack3/4
>
> With Ubuntu you can set up an encrypted home dir after the OS is installed depending on your version. But for full hdd encryption you need to reinstall. Use an alternate installer disc (not "desktop CD") to manually setup encrypted LVM partition.
>
> Steps outlined here: http://oei.yungchin.nl/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/
>
> Remember to backup all your data before attempting any of these procedures or others you may find via Google. Again, you can keep your windows partition and encrypt it fully but will need to rebuild the linux OS's.
>
> Hope this was somewhat useful. Good luck!
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>
>

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[Alexander Klimov]

On Thu, 15 Oct 2009, paul haigh wrote:
> I have a Lenovo T61 laptop which has the folllowing Os's:
> XP
> Ubuntu
> Backtrack3
>
> Due to my work environment I need to implement a whole disk encryption
> solution.  I would like to do this without having to rebuild the box,
> however I can if necessary.  Does anyone have any suggestions on the
> best way to pursue this?

The XP part is easy: TrueCrypt can encrypt in-place.

The modern way of Linux FDE is thru cryptsetup and LVM (you need an
unencrypted /boot partition). In theory, as far as there is enough
buffering, you can also encrypt in-place by dd: read from original
partition device and write to encrypted device mapped on the same
place, but in practice it is much safe and faster to get an external
HDD, copy Linux data to it, setup FDE for Linux, and copy data back.
In any case you will need to restore your boot-loader (remember to
read docs on TC boot-loader), but there is no need for "rebuild".

--
Regards,
ASK

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[Alexander Klimov]

On Tue, 24 Nov 2009, Adam Mooz wrote:
> For this level of encyption it might be easier for you to get a
> harddrive with hardware encryption

As a professional paranoid I would not recommend using hardware FDE
for anything more than "keeping your kid sister out": you can never be
sure what backdoors are incorporated into them.  In addition to
intentional backdoors (that, presumably, can be used only by the
authorities) you should be afraid of stupidity: there are known
examples (see Drecom) when a "128-bit AES hardware data encryption"
turns out to be a xor of every sector with the same mask.

By the way, some most vocal hardware FDE proponents on this list
actually work for companies that sell hardware FDE -- caveat
emptor :-)

--
Regards,
ASK

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------