Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Firefox and Google Team to Block Malware | Main | Summary of Latest Spam News: Some Good, Some Bad »

Which is Better: BitLocker or Hardware Encryption?

Eweek covers Gartner analyst Neil MacDonald's take on Vista's BitLocker encryption. Overall the assessment is good but there are a few drawbacks. For starters, you have to subscribe to Microsoft's Security Assurance program to get BitLocker to get it "for free" or by the Ultimate version of Vista. Then there are some technical issues:

License restrictions forbid the use of BitLocker where operating system virtualization is installed; it supports only single volumes; and it requires a healthy bite of partition at 1.5GB, MacDonald said. BitLocker also lacks support for both USB drives and CryptoAPI (a set of dynamically linked libraries that isolates programmers from data encryption co
de).

I like to use multiple volumes and operating system virtualization, it just makes life a lot easier if I don't have to lug around more than one laptop. (Ok, the idea of a single laptop is still off in the future, how many of us still travel with client supplied laptops as well as personal laptops.) How about hardware-based encryption?

Dell and Alienware are now selling laptops with Hitachi's Travelstar 7K200 with optional hardware encryption. The Channel Register hits on a couple of advantages of this drive:

First is its impact on system resources, especially power and acoustics, which is similar to existing 5400RPM solutions. Second is its hardware-based AES data encryption. Both of these are important considerations for commercial users, especially with today's increasingly mandated data security practices.

Like BitLocker, this solution won't help with unencrypted flash drives. Another feature is called Quick Erase:

From an operations perspective simply deleting the encryption key renders the hard drive unreadable and could save considerable time in repurposing equipment to new users. This capability is offered through the Quick Erase feature and we suspect will be a capability welcomed by IT managers and support personnel who are tasked with managing laptops and safeguarding sensitive information that may be stored within.

Boy, there's a case of turning lemons into lemonade.

So which is better? For me, it's the hardware encryption. I don't want to be locked into any operating system, virtualization is getting more and more useful, and splitting large drives into multiple partitions is too useful to loose. Of course, I don't have to upgrade an entire salesforce's worth of laptops either. If you go for a software option, check some of the third-party vendors.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/323

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net