LaptopDesktop Encryption with PGP Whole Disk Encryption.ppt

Laptop/Desktop Encryption with PGP Whole Disk Encryption Harvard Townsend Chief Info Security Officer Kansas State University harv@ksu.edu December 12, 2008 Agenda Why is encryption important? Why now at K-State? Encryption terminology Why PGP rather than freeware? Which computers should be encrypted? Overview of PGP deployment plan Overview of PGP Whole Disk Encryption product Product demo * * Why Now at K-State? Thefts are happening at K-State 16,000 laptops lost or stolen per week in U.S. and European airports! State law requiring notification if Personal Identity Information (PII) breached Three notification incidents, several scares Don’t have to notify in encrypted New data classification policy mandates it for confidential data Encryption products mature, affordable * Terminology Encryption - process of transforming information (referred to as plaintext) using an algorithm (called cipher) to make it unreadable to anyone except those possessing special knowledge, usually referred to as a key. Decryption – transforming the information back into a readable format * Terminology Encryption key – the secret code used to encrypt and/or decrypt information; you’re in big trouble if you lose/forget this… unless you have a key recovery system Whole disk encryption (WDE) – all data on the drive is encrypted, including the operating system; master boot record often unencrypted; aka “full disk encryption”; are hardware WDE solutions * Terminology Volume or file/folder encryption – information in a specific file, folder, or volume is encrypted, not the entire disk. Usually the operating system volume is not encrypted. Leaves you vulnerable to temporary files, cache files, forgotten files AES 256 - Advanced Encryption Standard w/ 256 bit keys; descriptive of the algorithm used to encrypt the data; the longer the key, the harder it is to crack * Why PGP Whole Disk Encryption? SIRT evaluation process selected PGP Met requirements Supports Macs now Attractive price Superior