[wellylug] Paranoid....

[Donald Gordon]

On Sat, 17 Jan 2004 22:36:28 +1300 Jethro Carr <dodocaptain at paradise.net.nz> wrote:

> I want to encrypt all my filesystems, so my data is highly secure, and
> very hard to hack.

I hate to break it to you, but encrypting your filesystems will not
guarantee that your data is highly secure and very hard to hack.  For
instance, once your machine is up and has had its encrypted filesystems
mounted, any hacker who breaks in can access them.  And devices like the
KeyGhost make recovering your passphrase easier.

> I want to have these things:
> - Password protection

Will a simple password be enough?

> - Encrypted data
> - Fast (Prefably, no speed delay)

These two aren't possible in combination.  Encryption and decryption
does take time.

> - Secure, so bootable os's, like knoppix, can't access it.

What do you mean by this?

> I know that there are a few different methods, or systems avalible.

Rather than engaging in mindless paranoia, I suggest you sit back and
work out what threats you're trying to protect against, and then present
*those* and ask for suggestions for mitigating them.

donald