how secure is EFS

[arciced]

i'm just curious. I have XP all updated. is it possible for anyone willing to spend enough money to get into encrypted files? can the fbi crack it?

 

[drag]

The NSA could probably crack it.

The FBI not so likely. They probably just would give it to the NSA to do.

What do you want to do, sell laptops on ebay with US nuclear secrets hidden in a encrypted partition or something?

 

[n0cmonkey]

I think it basically depends on the strength of the user's password.

 

[stash]

Yep, EFS is as strong as your password. Your password is at the beginning of a chain of protection that eventually protects the EFS key. Also, if your password is reset by anyone other than you, it will lock everyone (including you) out of the encrypted data.

 

[arciced]

i just downloded steganos 2007. i have a 50character password and it says that the secret service cant break into it.. it also has 256 AES.. the funny thing is, it encrypts files almost twice as fast as EFS

 

[SoulAssassin]

Originally posted by: arciced
i just downloded steganos 2007. i have a 50character password and it says that the secret service cant break into it.. it also has 256 AES.. the funny thing is, it encrypts files almost twice as fast as EFS

Well now that you've posted the length of your password you just made it all that much easier to crack.

 

[bsobel]

Originally posted by: arciced
i just downloded steganos 2007. i have a 50character password and it says that the secret service cant break into it.. it also has 256 AES.. the funny thing is, it encrypts files almost twice as fast as EFS

It works like this. You have something on that machine the goverment wants, they arrest you. They may or may not be able to break the encryption (contrary to alot of theories the NSA doesn't sit around cracking laptops all day for crimes your likely to commit).

Say you commit low/mid level white collar fraud and you encrypted your transaction details. Your arrested, they have your laptop, and frankly the FBI doesnt have the time or interest to crack that box. The judge orders you to give the court your login information. You refuse, your held in contempt of court and jailed until you comply.

Problem (from the courts points of view) solved.

Bill

 

[BigToque]

Originally posted by: SoulAssassin

Originally posted by: arciced
i just downloded steganos 2007. i have a 50character password and it says that the secret service cant break into it.. it also has 256 AES.. the funny thing is, it encrypts files almost twice as fast as EFS

Well now that you've posted the length of your password you just made it all that much easier to crack.

Plus I highly doubt you've memorized your 50 character password and probably have it written down or in an unencrypted text file so you don't forget it