Does anyone have any advice regarding 256 bit full disk encryption software for Macs? The other discussions on the topic are years old, so I would like some current input. Thanks for your help in advance.
MacBook Pro, Mac OS X (10.6.8)
Upgrade to Lion and use FileVault for full disk encryption.
FileVault in Lion uses:
The disk encryption in Mac OS X uses the government-approved encryption standard, the Advanced Encryption Standard with 128-bit keys (AES-128).
Mountain Lion should improve on this according to released documentation.
FIPS 140-2 certification is in progress
Encryption in Mountain Lion is in the process of being certified for FIPS 140-2, the government security standard.
I think TrueCrypt will work best for you.
It is 256 Bit Full or Partial Disk Encryption. You can even make your partial encryption hidden if you wish to do so.
Here's a link to their site. TrueCrypt.
FileVault 2 provides full disk encryption utilizing the AES-XTS-128 encryption algorithm with a 256-bit key following NIST guidance in NIST SP 800-38E
http://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf
Depending on your Mac, you might not want to upgrade to OS X 10.7 or 10.8 as it will not run the PowerPC based software your currently using costing a bundle to replace it all, also they will slow down your machine if it's not a more recent issue. You don't want to upgrade OS X without AppleCare defending your possibly bricked logicboard that's for sure.
Filevault encrypts the boot drive, however in doing so makes it near impossible to fix if you have a software issue and need to recover files directly or by using specialty software. Also it robs the machine of performance even more than the Lions do. So you will really need a SSD to work best with 10.7/10.8 and Filevault, then it has to be freshly installed. Filevault needs 50% free space on the boot drive, then it's going to write to the slower 50% half of the hard drive where performance is terrible compared to the first 50%.
Also Filevault is cracked under certain conditions, and if someone gets their hands on the machine (like the law) and knows what they are doing.
If you take your Filevaulted machine to Apple to fix, they are going to require the password to fix the machine obviously.
Software based encryption is vulnerable, you might want to instead place your sensitive data on external self-encrypting hardware that doesn't rely upon software or computer hacks/bypasses (ike freezing the RAM) to get to it.
http://www.datalocker.com/products/datalocker-dl3.html
Iron Keys for portable USB self encryption, both work with any computer, so your not locked into one platform.
With the senstive data off the computer and on a external device, there is the option of removing, hiding and securing the device. If used with a computer that's never connected to the Internet, it's safe from snoopers, except from a survelliance van parked outside your door.
Need 256 Bit AES Full Disk Encryption for a Mac. The other discussions regarding this issue are very old. Does anyone have any current advice regarding encryption software?
