drivecrypt plus pack provides true real-time "on the fly" 256-bit
disk encryption. providing advanced fde (full disk encryption) as
opposed to vde (virtual disk encryption) or "container"
encryption, dcpp is an important evolutionary step in the field
of transparent data protection.
dcpp allows you to secure your disk(s) (including removable
media) with a powerful and proven encryption algorithm (aes-256)
at the sector level, ensuring that only authorized users may
access it. the encryption algorithm used by dcpp is a trusted,
validated algorithm chosen by the national institute of standards
and technology (nist) and stated to be the cryptographic standard
for years to come. aes-256 is a fips-approved symmetric
encryption algorithm that may be used by u.s. government
organizations (and others) to protect sensitive information.
dcpp is automatic and completely transparent to the user. not
only does this decrease user involvement and training
requirements, but also it creates the foundation for enforceable
security. the careful integration of boot protection and
automatic encryption provides a high degree of security with
minimal impact on users. boot protection prevents subversion of
the operating system (via floppy boot-up, for example) or the
introduction of rogue programs while sector by sector encryption
makes it impossible to copy individual files for brute force
attacks. dcpp safeguards the operating system and the important
system files (which often contain clues to passwords for
windows).
dcpp is the fastest and most feature-rich real-time encryption
system available, special care has been taken to render all
cryptographic parts as invisible & transparent as possible.
pre-boot authentication
-----------------------
the user is authenticated by means of pre-boot authentication
(pba) before the system is started and therefore before the
operating system is booted. this kind of authentication cannot be
manipulated, pba therefore guarantees maximum security. neither
keys nor passwords are stored on the pc's hard disk. all of the
information required to boot the operating system is derived from
the password. this makes the use of hard disk tools for analysing
the hard disk completely ineffective. pba in provided by a system
call bootauth and is a fully graphical login screen.
full disk encryption
--------------------
automatic & transparent full disk encryption (fde) offers several
key advantages relative to file encryption. fde secures the
system and temp files that often contain sensitive data but are
missed by file encryption. even removing the drive itself does
not give access to any file or directory structure. fde is
performed sector by sector without creating temp or backup files:
as a result, large files will decrypt without delay whereas file
encryption is normally much slower. fde also avoids such time
consuming tasks as secure deletes of temp files or work files in
clear text, and obviates the need to do a full delete on disks to
be discarded.
how does it work
----------------
as data is read from the hard disk, dcpp automatically decrypts
the data before it is loaded into memory. when data is written
back to the hard disk, it is automatically re-encrypted. this
process is completely transparent to the user or any application
programs, the data is caught "on the fly" as it transfers back
and forth between the hard disk and memory. consequently, users
don't need to remember to decrypt or re-encrypt their data, or
change the normal operation of their pc. in addition, only
individual sectors are decrypted at any one time, not the whole
hard disk. other products that claim to be "on the fly" decrypt
an entire file and load it into memory, creating significant
security risks. dcpp is smarter and more secure because it
decrypts only the specific sectors of a file that are in use.
unprotected data never resides on a dcpp encrypted disk.
hidden operating system
-----------------------
dcpp is the only software on the market, able to hide an entire
operating system inside the free disk space of another operating
system. you can practically define two passwords for your dcpp
encrypted disk: one password is for the visible operating system,
the other for the invisible one. the first "fake" password gives
you access to a pre-configured operating system (outer os), while
the other gives you access to your real working operating system.
this functionality is extremely useful if you fear that someone
may force you to provide the dcpp password; in this case, you
simply give away the first (fake) password so that your attacker
will be able to boot your system, but only see the prepared
information that you want him to find. the attacker will not be
able to see any confidential and personal data and he will also
not be able to understand that the machine is storing one more
hidden operating system. on the other hand, if you enter your
private password (for the invisible disk), your system will boot
a different operating system (your working system) giving you the
access to all your confidential data.
the creation of a hidden operating system is not obligatory and
as such, it is not possible for anyone who does not have the
hidden os password to know or find out, if a hidden operating
system exists or not.
encrypts the whole operating system
-----------------------------------
. full disk encryption (encrypts parts or 100% of your harddisk
including the operating system)
. pre-boot authentication (before the machines boots, a password
is requested to decrypt the disk and start your machine)
. allows secure hiding of an entire operating system inside the
free space of another operating system
. strong 256bit aes encryption
. usb-token authentication at pre-boot level
features and benefits
---------------------
. boot protection
. pre-boot authentication: login before starting the operating
system
. multiple os boot support (microsoft)
. invisible operating system (allows hiding the entire operating
system
. full or partial hard disk encryption
. sector level protection
. complete "power off" protection i.e. unauthorised users are
prohibited from starting up the pc
. aes 256 bit encryption
. no size limitation for encrypted disks
. manages an unlimited amount of encrypted disks simultaneously
. allows steganography to hide data into pictures
. trojan and keyboard sniffer protection preventing passwords
from being sniffed / captured (red screen modus)
. anti dictionary and brute-force attack mechanisms (due to the
nature of dcpp, it is the most difficult system to attack
compared to anything else available.)
. encrypts almost any kind of media (hard disks, floppy disks,
zip, jaz, etc...)
. administrator /user specific rights
. usb-token authentication at pre-boot level (aladdin r2 and
rainbow usb-token)
. facility to validate the integrity of the encryption method
. recovery disk for "disaster recovery"
. easy to install, deploy and use
. completely transparent to the user
. minimal administration and user training
Download File Size:6.85 MB
|
