Question about encryption

Dont worry, this isnt a post asking which software, I have done a search ;)

But it seems TrueCrypt is widely used and recommended.
However it seems that there is no built in recovery if teachers forget the password/encryption key

Personally, I dont see a massive problem with this - it is their own fault, and anyway, surely sensitive data on USB sticks will only be a copy of something on the internal network?

But the NM wants something where you can recover data. I assume thats onyl available in pretty expensive enterprise level software?

If you use whole disk encryption with truecrypt you create a bootable iso which can be used to recover the machine if the password is forgotten.

Ben

We use Truecrypt here for USB and are about to start implementing it for all laptops.

When encrypting the laptops you can create a recovery cd, as for USB, I make a note of the staff password and lock that document in the school safe.

The whole point of using encryption is so that without a valid key the data can't be recovered otherwise it would be useless.

Truecrypt is enterprise level software.

Ben

Maybe I'm being dense, but surely if it was possible for anyone with the right software to recover the encrypted data it would be a pointless exercise encrypting it in the first place?

Unless you want a "master" password type arrangement, in which case :getmecoat:.

P.S. Would it be worth assigning passwords and keeping an (encrypted) list?

There were no answers when I started typing.

You type too slow dear friend :)

Ben

We use this: CE-Infosys You can customise the start screen with your own image, and it uses a master password for the forgetful.
We're getting hardware-based encrypted flash drives for staff. Probably one of these: Kingston Technology Company - Flash Memory - DataTraveler For Enterprise

Quote:

---

Originally Posted by pooley

as for USB, I make a note of the staff password and lock that document in the school safe.

---

so you assign a set password for everyone or one for each staff member?

only currently looking at USB sticks, not laptops

Truecrypt has the option to backup the volume header infomation.

I'm not sure if this would allow you to encrypt the usb with a password known by you, backup header, allow user to pick new password.

Then if they forgot the password, restore backup header, unencrypt using your password?

Ben

Ok just tested this and that does appear to work.

So as long as you have a backup of the header for each stick you'd be able to recover the data at a later date.

Ben