Re: AES in M2Crypto advice

Ng Pheng Siong <[email protected]>
Newsgroups gmane.comp.python.cryptography
Message-ID <[email protected]>
On Tue, Jun 03, 2003 at 12:13:17AM +0700, Jason H. Smith wrote:
Content-Description: signed data
> The problem is, the system administrator, or an intruder, should not have
> access to, say, the CEO's laptop image; so there's the encryption
> requirement.

IMHO, it is more important that the thief who steals the CEO's laptop or
the subsequent black market buyer do not get access to the files on it.

Install a crypto filesystem type thingy on the laptop and train the CEO to
use it properly. Then just backup the disk image normally; sensitive stuff
should already be secured by the crypto filesystem. You can escrow the
passphrase with the corporate lawyers or, ahem, a trusted third party. (Not
your $25 SSL cert vendor, fer sure. ;-)


> Thanks for the implementation advice, as well.  I'm relatively new to
> Python and GUI programming.  So I'm still boggling over the correct
> approach.

Yes, having fun is important too. ;-)

--
Ng Pheng Siong <[email protected]>

http://firewall.rulemaker.net  -+- Manage Your Firewall Rulebase Changes
http://www.post1.com/home/ngps -+- Open Source Python Crypto & SSL
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.