Data Encryption Memory sticks

[witch]

The head has started to worry about the sensitive data teachers carry around on their memory sticks and has asked me to find some sort of encryption software, preferably free that will make the info safe if it 'falls into the wrong hands'

Has anyone got any ideas of what I can use?

[Netman]

I use axcrypt http://www.axantum.com/AxCrypt/

[plexer]

I use truecrypt.

 

Ben

[dhicks]

Has anyone got any ideas of what I can use?

 

See also TrueCrypt (http://www.truecrypt.org/), which encrypts a whole volume at a time.

 

I use truecrypt.

 

Edit: Beat me to it!

 

--

David Hicks

[elsiegee40]

Thanks for starting this thread WITCH and for the replies. Truecrypt looks like the solution to a little problem we have here!

[witch]

I don't think I quite understand how you do it? Do you put it on the stick, the computer, or both? And what about putting the stick in a computer that doesn't have the encryption software?

This is really dim of me - blame Monday/teenagers/life!!

[Geoff]

The software is on the machine. The stick is the encrypted device. If you put the stick in a machine that doesn't have the softwware you can't decrypt it.

[dhicks]

Do you put it on the stick, the computer, or both? And what about putting the stick in a computer that doesn't have the encryption software?

 

TrueCrypt encrypts whole volumes (i.e. whole memory sticks) at a time. You'll need the software installed on any computer you want to be able to read the volume with. Axcrypt encrypts a file at a time, and has an option to make self-decrypting files.

 

--

David Hicks

[skunk]

Truecrypt can run in traveller mode I believe, where you set it up to carry around the software on the stick.

[mavhc]

You need admin rights to run Truecrypt in traveller mode version though. I have an autorun file to ask for the password on startup, but it doesn't use an already installed version if that exists, so still fails if you don't have admin rights.

 

In that case you'd need to run the actual program and mount the drive that way, even less user friendly, my users can't cope with unmounting 2 drives in order.

[Midget]

how about Pretty Good Privacy ? OpenPGP is opensource and there are some GUI versions as well

[witch]

I was going to ask about admin rights as the teachers have admin rights on their own laptops but not on the school machines.

Also I can see a problem as they would have to install it on their home machines, and, frankly, I am not sure how many would manage that.

Still - that is the sort of thing the head wants to know. I think doing the whole stick would be a good idea as after all it is the property of the school. They can use their own stick for anything unencripted.

Thanks guys

[pete]

Have a look at Toucan from http://portableapps.com/apps/utilities/toucan which should run without any need for admin privileges.

 

nb: haven't used it myself, I use gpg.

[Lalka]

The head has started to worry about the sensitive data teachers carry around on their memory sticks and has asked me to find some sort of encryption software, preferably free that will make the info safe if it 'falls into the wrong hands'

Has anyone got any ideas of what I can use?

 

I would recommend Rohos mini-free encryption software. :)Rohos Mini Drive creates hidden and encrypted partition on the USB flash drive memory. You work with the files on the hidden partition without opening a special program. Those who have megabytes of sensitive files on the USB drive and seriously concerned with a data security, cannot imagine their USB stick without the hidden volume that is created using this tool.

 

It doesn’t require Administrator Privileges to open password protected USB drive partition! Easy to setup, easy to use. Intuitive USB flash drive Setup Wizard automatically detects your USB flash drive and setup an ecnrypted partition properties. You just need to provide a protection password. One click - and you can save your first file into protected volume. Encryption is automatic and on-the-fly.

They've got a new feature - virtual keyboard, no worries if there is a key logger:p I've been using it for months now and consider it a great program

[RabbieBurns]

I bought a fingerprint enabled usb device that only opens up the secret partition once a registered fingerprint has been swiped to test out.. seems pretty good so far...

[Geoff]

Have you tried it with gummi bears?

 

Gummi bears defeat fingerprint sensors | The Register

[RabbieBurns]

Can't say I have yet..

 

Although if I lose it and someone finds it in the street then they wont know who it belongs to to lift a fingerprint from I guess

[SYNACK]

Can't say I have yet..

 

Although if I lose it and someone finds it in the street then they wont know who it belongs to to lift a fingerprint from I guess

 

Unless they manage to pull the right print off the surface of the usb key

[JohnMason]

Easylock might be what you need. It features strong encryption, is installed on the stick itself, and doesn't need admin privledges on the main computer in order to run.

 

Of course, i think anyone worried about gummy bear fingerprint stealing is a little :tinfoil3:anyway. It's more likely that casual theft / access will be a problem.

[pooley]

Sorry to bump an old thread.

 

Any recommendations for USB encryption at a school where we use Mac OSX and XP.

 

Looking at truecrypt now, just thinking in my head how easy they (them technophobic teachers) will be able to use it.

[CyberNerd]

;

Becta released a load of documentation on how to use Truecrypt

http://schools.becta.org.uk/upload-dir/downloads/data_encryption.odt

[bossman]

WoW!! 54 pages of information to peruse from Becta looks like it will be a long night.

They must think IT staff at school have nothing better to do?

 

Does anyone out there know how long it would take to deploy, test and implement data encryption throughout the school and at what cost including training to the school.

I do feel this needs some common sense approach as the teachers and staff will not understand why their laptops and usb pendrives have to be encrypted resulting in unforseen problems with forgotten passwords etc etc.

 

Would it not be more attainable if we were to pinpoint those staff members who come into contact with L2 data and just encrypt the data for their needs as the other members of staff will have no access to this level of confidential data?

[pooley]

Would it not be more attainable if we were to pinpoint those staff members who come into contact with L2 data and just encrypt the data for their needs as the other members of staff will have no access to this level of confidential data?

 

That's what I intend to do here, have passed on Dicument to LEA as I think this should be an LEA initiative but not holding my breath.

 

Encrypting pc's / laptops on a whole school setup is pointless, USB pens are used to take L2/L3 data to and from school so they are my main target for encryption right now.

[plexer]

Norfolk LEA are currently looking at the issue of encryption and using Truecrypt to acheive this.

 

If I hear any more about this I'll post back.

 

Ben

[GrumbleDook]

Would it not be more attainable if we were to pinpoint those staff members who come into contact with L2 data and just encrypt the data for their needs as the other members of staff will have no access to this level of confidential data?

 

*All* teaching staff are likely to come across IL2 data due to differentiation and planning for students with particular educational needs (not just the traditional SEN but also those who have internally had behavioural information shared about them between staff). There is an increasing likelihood that other staff will have come into contact with this information via administrative tasks or supporting teachers.

 

Becta usually get slated for not including broad enough information ... it makes a change for them to be slated for including too much.

 

That level of information about TrueCrypt is to enable schools to get a quick win with regards to portable information. As for the total cost for a school to move to a full solution and the time taken ... I don't think there is a school that meets all the requirements yet. There is no allocated money for this (since schools should have been doing it anyway) but a number of LAs are looking at how they can bulk purchase solutions to help schools.