• Smart Card Readers
• Biometric Solutions
• Security Solutions
• Storage Devices
• Government CAC Solutions

• Project Management
• Global Fulfillment
• Integration
• Security Assessment
• Gap Analysis
• Remediation
• HIPAA
• Government

Introduction:

This white paper is designed to help explain why desktop encryption is needed in today's world, the different methods of desktop encryption, and to explore WinMagic's unique SecureDocT disk encryption solution.

The Need for Desktop Security

According to the most recent statistics from Safeware Insurance Inc., Columbus, Ohio, computer thefts cost over $1.3 billion U.S. dollars in 1998 alone. Disturbingly, the lions share of these thefts were laptops, increasing by nearly 13% from $804,791,000 in 1996 to $1,026,501,000 in 1997.

The San Francisco-based Computer Security Institute (CSI), notes that laptop thefts accounted for 57% of all computer losses reported in the organization's second annual Computer Crime and Security Survey.

Results from a 1997 survey conducted by Byte Magazine's research department show that accidental acts by employees account for up to 40% of security breaches.

While the above numbers are startling, there has been no attempt to date to quantify the dollar losses as a result of information theft from these missing computers. It becomes apparent then that the need for security beyond the boundaries of the network increases daily. As an increasing proportion of the workforce (teleworkers, sales forces, etc.) becomes wired, the volume of information subject to the above mentioned risks increases.

In reality, most data security systems are for network security only. Information protection often ends at the PC or Laptop, leaving information on the hard drive vulnerable. If a PC or Laptop falls into the wrong hands, the data protected by virtual private networks, Windows NT, etc., is accessible. That is, unless it is protected by desktop encryption software. Moreover, while there are hundreds of file and disk encryption software packages on the market, most do not protect data properly.

Common Desktop Security Software Problems

Temporary Files

Commercial software packages create temporary files to store data while a file is open, often to store a copy of the original in the event of accidental shut down, etc. Temporary files are a necessity; it is difficult to find a word processor, spreadsheet, database, or other business application that does not make extensive use of them. In fact, even Windows Clipboard, Internet Web Browser, emails and email attachments all rely on temporary files to store data.

Temporary files also help you work faster, making it possible to undo or correct errors, and make changes. In fact, WindowsT now offers the setting of the "TEMP" directory, for those temporary files. Most applications put their software in this "TEMP" directory, but there are some which put their temporary files in their working directory or elsewhere. While these files are extremely useful, they pose a security risk if they are not encrypted when created.

Paging Files

Paging files (also called "swap files" in Windows 95) are used extensively in modern operating systems. The operating system appears to have limitless memory resources available for software applications. This is because when memory resources run low, it automatically writes data onto the hard disk in paging files. When the application is needed again, the operating system copies the data back into memory, and places another applications' data in storage. This means the operating system can put anything onto the hard disk, including plain text copies of sensitive data that is supposedly secured.

A common, unfortunately erroneous, belief is that paging files are difficult to interpret, and the chance of one's data being found in the paging files is minimal. In fact, tests have shown that in typical working situations data can easily be found in paging files, often in multiple copies.

The Recycle Bin

Another place where data can reside is the "Recycle Bin." When a file is deleted, Windows removes it and places it in the recycle bin. Until the recycle bin is emptied, the user can still retrieve the file. However, even when the recycle bin is emptied and Windows shows that the file no longer exists, the physical data remains on the disk. The deleted information can easily be found with inexpensive utility software, and will remain on the hard disk until it happens to be overwritten by new data.

The Windows NT File System (NTFS)

It is often assumed that a file system with built in access control (such as Windows NT) is secure. The fact that users must enter a password to access their personal files leaves many people with the mistaken impression that their files and data are protected. However, even a file system with built-in Access Control List (ACL) security, such as the NT File System (NTFS), provides no protection against an attacker with either physical access to the disk or administrator priveleges on the local machine (which is a very common configuration). With either of these avenues available (a thief would have both), an attacker can simply read the raw data from the disk and then use freely available and inexpensive disk editors to located and read the clear text of any document desired.

Hibernation and Sleep Mode

Hibernation or Sleep modes are often found on laptop computers. This is a feature designed to conserve battery power when a computer is powered on, but not in use. When a notebook computer goes into hibernation mode, it saves all data to the hard disk. This allows the PC to re-create the exact state of the computer from before it entered hibernation mode. Of course, all data in memory at that time, be it program files or sensitive data, is stored on the disk. As a general rule, most desktop encryption programs cannot effectively secure information on a machine with hibernation mode. Sadly, the computers most frequently stolen are laptops.

Hidden Partitions

A hidden partition is a portion of the hard disk that an operating system, such as Windows, does not recognize or display a file system for. Software applications sometimes use these hidden partitions to save data. For example, some hibernation mode software continually saves data on the hidden partition instead of as file on a normal partition. This quiet action can create blocks of information in plain text for which there is no security at all.

Free Space and Space Between Partitions

Sectors at the end of the disk that do not belong to any partitions may be displayed as free space. Other unused sectors are found between partitions and extended partition tables. Unfortunately, some applications and virus software use this free space to store programs and data. Even when a disk is formatted, this free space remains unaffected, and the information can be recovered.

METHODS OF PROTECTING DATA

1)     Access Control
2)     Encryption
        a)   Manual File Encryption (File Based)
        b)   On-the-Fly File/Folder encryption (File Based)
        c)   Disk Encryption (Sector Based)

Access Control

Access Control is the most frequent mechanism of data protection, used extensively by network security products. Access privileges offered by Windows NT for files, directories and services fall under this category (please see pg. XX for more about NTFS).

Also used as Access Control is the built-in BIOS password. It is present when a computer starts up. Although it may be enough to guard your PC from amateur hackers, more knowledgeable PC users need but a few minutes to circumvent the BIOS password. A thief can even connect a stolen hard drive to another PC to avoid the bios password altogether and get at the data. In fact, this approach is successful for Windows 95 and NT, regardless of how securely the operating systems have been configured.

"BECAUSE OTHERS MAY SUBVERT OR GAIN ACCESS TO YOUR COMPUTER'S ADMITTANCE KEYS, ONLY ENCRYPTION OFFERS CONFIDENTIALITY."

Encryption

A. Manual File Encryption

Manual File Encryption allows a user to selectively encrypt a file so that others cannot read it. It was built mostly to protect the contents of files sent across the Internet. Because this file encryption can be developed without deep intervention in the operating systems, vendors can offer cross-platform software running on all Windows variants, OS/2, Apple MAC, UNIX systems, etc.

Some file encryption software products make slight interventions into the operating system to help improve the functionality of their file encryption. Files automatically decrypt when Windows starts, and encrypt before Windows shuts down. Directory files can be set up which eliminate user intervention and the risk of forgetting to encrypt or decrypt data. However, this method is slow, especially when it involves a large amount of data to process, as is the case with spreadsheets or databases.

Disadvantages:

Manual File Encryption has serious limitations as a viable data security method for most organizations. Because it encrypts only the original file, temporary and paging files are not protected, and remain in plain text. Also of concern is the lack of transparency, meaning a user must manually encrypt or decrypt the file. This leaves plenty of room for human error, for example, if a user forgets to encrypt a file, thereby leaving it vulnerable.

"FILE ENCRYPTION DOES NOT PROTECT TEMPORARY FILES. IT'S LIKE LOCKING THE OFFICE DOORS BUT LEAVING THE WINDOWS OPEN."

Therefore, Manual File Encryption software may be acceptable for sending a file from computer to computer as e-mail or attachments, but it cannot protect storage data efficiently or completely.

B. Folder Encryption

With Folder Encryption, a user creates folders in which all files are automatically encrypted. Additionally, individual files can be specified for automatic encryption. Users need not decrypt files before working on them, or encrypt files afterwards.

Folder Encryption is more transparent than File Encryption, but both are still file-based. Because Folder Encryption intercepts file access, thus requiring a much deeper intervention into the operating system, it is not offered on as many platforms as File Encryption. Folder encryption software must deal with sophisticated, highly complex file systems where there are numerous access points to information, as well as large variations in the size of files. Some Folder encryption software come with a built in "secure delete" or "wipe" utility to get rid of any paging or temporary files upon computer shut-down.

Disadvantages:

Folder Encryption products do not offer thorough protection for temporary files, paging files, deleted files, hidden partitions, and free space. It is a rare exception that Folder encryption software can automatically encrypt some temporary files, and this often requires manual configuration.

If a "secure delete" or "wipe" utility is supplied with folder encryption software, some of the file content is cleared and no longer available for usage. An unfortunate side effect of this is that the Windows feature of undeleting a file can no longer be utilized in case of necessary retrieval.

"FOLDER ENCRYPTION IS NORMALLY NOT ECONOMICAL WITH CPU AND DISK RESOURCES"

The overhead power required by the CPU to check file access and the memory demands on the disk itself (more than 2KB per file for some products) make Folder Encryption very cumbersome and slow to use.

In short, although Folder Encryption can protect your files transparently, it is a time consuming and resource demanding method for protecting data. And lack of protection for paging files and temporary files are still the greatest concerns.

C. Disk Encryption

The greatest difference between sector-based disk encryption software and the previous two methods of desktop security is that disk encryption is volume-based (volume = drive), not file-based. In other words, every file saved on the hard disk will be encrypted. Disk encryption software transparently encrypts the data before writing it onto the disk.

The point where data is intercepted and encrypted or decrypted is an important consideration. Operating systems normally use one specific point to access the disk at the sector level. This means that Disk Encryption products can easily capture and encrypt all information (including temporary, paging, and recycle files), a difficult task for the competition.

A common misconception is that a system is much slower with encryption than without encryption. With the improved computing performance and intelligent disk caching features of newer Operating systems, speed becomes a non-issue for disk encryption products. A WinStone benchmark of 10% reduction in system speed means that the reduced performance is unnoticeable to the naked eye in all but the most unusual of circumstances.

Disadvantages:

The purpose of Disk Encryption is to make sure sensitive data is never written in clear text on a disk. A common misconception is that disk encryption products can control access to different files, folders, etc. Disk encryption, however, is not intended to control user access as thoroughly as, for example, Windows NT. It is a good idea to use access control software to facilitate restrictions for files and folders on a network, and leave the security of the desktop to a credible Disk Encryption product.

Boot Protection

If an entire hard disk is protected by encryption, the computer will not start unless there is some method in place to load Windows Start-Up files. To satisfy this need, disk encryption software must use Boot Protection.

Boot Protection allows a user to authenticate before the PC can boot. In other words, a user enters their password before DOS or Windows even starts. Boot Protection products (e.g. BIOS password) are traditionally offered without encryption, and are normally only a basic access control mechanism. However, Boot Protection alone can be circumvented by simply transferring the hard disk to another PC. From there all information can be accessed.

Boot Protection is an important addition to Disk Encryption packages because it is provides pre-boot logon of the encryption software. After a successful login, the encryption software package can then decrypt the needed to load Windows boot files and then system files to boot and start Windows (or DOS and then Windows 95/98). If, however, someone tries to circumvent the Boot Protection feature, they will run into a wall of encrypted information, which they are not able to decipher.

Please note that if a disk encryption package does not use a boot login before the computer starts, it does not fully encrypt the entire hard disk. In this case, the software does not encrypt Windows boot and system files. While it is theoretically possible to locate the Windows boot and system files needed to run before a boot logon screen (user authentication), in practice it is very difficult, and would place severe restrictions on even the most common place upgrades to systems files. Therefore disk encryption software with no Boot Protection should be avoided.

Encryption Method Matrix

^* varies with manufacturer

Disk Encryption: The Logical Choice

Since Disk Encryption software does not consider files individually, all data on the disk is encrypted. This includes temporary files, database files, executable files and documents. It requires the least memory overhead on a disk (less than file or folder methods), and CPU usage is extremely economical. The reason disk encryption is superior in this area is because the necessary information that must be extracted to perform decryption only needs to be retrieved once for an entire encrypted hard drive. For File/Folder Encryption methods, however, the software must extract unique encryption key information and calculate the session key before decrypting the data in each file or folder.

Disk Encryption's Evil Twin: Virtual Drive/Disk Encryption

The concept of virtual drives has been implemented in compression utilities such as Stacker or Microsoft DriveSpace. The software creates a large hidden file, which it then organizes and presents to the Windows operating system as a usable logical drive. Software can then be placed on the virtual drive, where it can be compressed to save disk space.

Several encryption software packages also use virtual drives to secure information. Users specify a file that is then opened as a useable drive that eases the need to partition a hard disk. All information is placed on the virtual disk, where it is encrypted.

Virtual Drive encryption has several disadvantages:

-     It tries to provide the same features and functionality as disk encryption, but uses substantially more overhead. Disk accesses to the virtual drives must be redirected to another physical file, thus slowing down system performance.
-     The operating system does not recognize a virtual drive as an actual physical disk. As a result the operating system refuses to create temporary or paging files on a virtual drive.
-     Virtual Drives cannot co-exist with a compressed drive.
-     By far the largest drawback, Virtual Drive encryption suffers the weaknesses of Folder encryption. It cannot thoroughly protect Temporary & Paging files.
-     Another weakness inherited from its folder encryption roots, Virtual Drive encryption lacks security because sensitive information can still be found on the disk. It is also not flexible enough to give access control on a file level to individual users.
-     The fact that the virtual drive is in reality a file also makes it vulnerable to accidental or malicious deletion from applications.

Summary

To safeguard information as it resides on a disk, Disk Encryption is the most reliable solution. Full disk encryption is needed to ensure that no sensitive data can be found on the disks.

THE SECUREDOC DIFFERENCE

With the wide use of personal computers and laptops, the desire to keep data confidential has become a valid concern for individuals and enterprises. SecureDoc Version 2.0 Disk Encryption software for Windows 95/98 and Windows NT is especially designed to protect the data on your PC's floppy and hard drives. It is superior to other encryption products and technologies, and offers many exciting new features:

SecureDoc: All Inclusive Protection

One of the greatest advantages of SecureDoc is its patent-pending technology, which protects sensitive information including that left by the operating system in the paging and temporary files. SecureDoc also protects the deleted files in the recycle bin and back-up files. Only SecureDoc provides users with the all-encompassing protection against external and internal security breaches as well as accidental losses by employees.

Powerful Features

Memory Efficiency

Disk encryption is the most powerful method for encrypting data on disks. No memory overhead on the disk is required, and CPU efficiency is maximized.

Transparent Operation

After installing SecureDoc, the encryption process is transparent. This means the computer user does not need to worry about the encryption process because it takes place automatically in the background.

"IF ENCRYPTION IS NOT TRANSPARENT, USERS WILL JUST NOT BOTHER."

Two-Factor Authentication

Access is granted only to users in possession of known facts (password) and the encryption key (a floppy disk containing the Key Database File). With its key database residing on the floppy disk, SecureDoc offers a much higher level of security than conventional password-based encryption products.

Key Management

Role-based key management permits data sharing among multiple users, each of whom may have their own individual access. The robust Administrator mode allows a large enterprise to manage keys for access, backup and recovery. This serves to decrease internal accidents and fraud because authorized users are granted access to sensitive data, while other users of the same PC can retrieve non-sensitive data only.

Windows Compatibility

SecureDoc is available for both Windows 95/98 and Windows NT. It can encrypt FAT, FAT32 and NTFS drives. Encrypted drives can contain both compressed drives (Windows 95) and directories (Windows NT).

Architectural Standards

The ultimate challenge in designing a security applications is an INTEGRATED secure solution where users only need authenticate once to open all resources, be they Windows log-on, Network log-on, log-on to access encrypted disks and files, Database log-on or log-on to other applications. To achieve this, the international PKCS #11 standards for security products have been devised. They allow quick and easy compatibility. They are the most widely used cryptographic API in the world, supported in the Open Card Framework proposed by Sun, IBM, Netscape and Oracle, Entrust and other security vendors. It is also used in the Intel CDSA standard, recently adopted by the Open Group.

WinMagic is proud that SecureDoc is designed based on the PKCS #11 standards. Because of them, SecureDoc can easily facilitate integration with other products such as:

-     Smart Cards for use in Electronic Commerce,
-     PCMCIA cards, biometric devices, and other hardware tokens
-     hardware accelerators,
-     Applications such as Email, browser, and Public Key Infrastructure applications.

SecureDoc can also be expanded to work with Microsoft CryptoAPI.

Security Design

SecureDoc is designed with all security safeguards in mind. Patent pending technology protects data without system degradation, yet provides a seamless, user-friendly encryption solution. For example, thoughtful design provides protection against plain text attacks for encrypted information on sectors with the same data.

Robust Exception Handling

If for some reason an error occurs (e.g. a disk is taken out during the encryption process, or there is a power failure), procedures are in place to recover the data.

User-Interface

SecureDoc emphasizes ease of use. It is designed for Windows 95 and NT 32 bit mode. It does not employ DOS programs (unlike some other disk encryption software that were simply migrated from old DOS software). Configuration is easy and simple to understand.

Algorithms Used

For encryption, Tripe DES (168 bit), DES (56 bit) and CAST-128 are used. The hashing algorithm is RIPEMD 160. RIPEMD 160 is a well-respected algorithm, and considered much stronger than the old industry standard MD5.

Drive Locking

This added feature gives an administrator the option of disabling Read/Write access to individual drives. It helps:
-     stop data from being copied onto floppy disks
-     prevent the transmission of viruses by placing restriction the copying of data from floppy disks
-     avoid transmission of viruses and stops hacker access by disabling individual drives when surfing the Internet
-     protect against accidental or malicious data alteration or deletion by employees.

Formal Evaluations

To determine whether a security product does as its vendor claims, a purchaser has three options: trust the vendor, test the product, or rely on an impartial third party with the experience and knowledge to evaluate the product. WinMagic believes that receiving third party certification is the only reliable way to prove the strength of our products.

SecureDoc has been reviewed and endorsed by Bruce Schneier, world-renowned crypto-analyst and creator of the BlowFish and Two Fish algorithms. He has verified the strength of SecureDoc's construction, and testified there are no security holes.

CONCLUSION

SecureDoc is the only software available on the market that not only protects the temporary files and paging files but also offers sophisticated key management and standards compliance. Trust SecureDoc 2.0 to secure your sensitive data on your computers.