Replies to post #123425 on Wave Systems Corp. (fka WAVXQ)

[rachelelise]

mjan

No doubt there will be a need for key management software for an enterprise. Today Wave would be the answer. However tomorrow there will be other players offering such software as well. Wave will need to continue to improve the value of its products and tie in relationships so that they are not easily displaced.

Interestingly my company will be introducing a product by Pointsec to encrypt our files/drives. It is unclear whether it can utilize TPMs - I periodically challenge my IT department especially following security notices. We're supposed to encrypt and password protect everything but they don't offer any help in terms of how to do it and the implications for working with clients. Just demonstrates the difficulty of implementing and enforcing security policies in the real world.

[orda]

Not if MS


can get away with getting people to just use their technology.

[SheldonLevine]

Mjan, re: BitLocker

No, Wave's key management software would not be required. BitLocker is integrated with Active Directory to the extent that SRKs (System Recovery Keys) can be saved in Active Directory per user.

More detailed information here:
http://www.investorshub.com/boards/read_msg.asp?message_id=11455865

Regards

SL

[wavxmaster]

mjan112

Perhaps these posts will help! I also was trying to try to understand what the benefits of Seagate 5400FDE/Wave were against Bitblocker. I think the Wave/STX solution gives added protection(TPM), constant protection, more robust options, plus this coupled with no loss in CPU speed due to how encryption is accomplished. Thanks SL!

Posted by: SheldonLevine
In reply to: rachelelise who wrote msg# 122749 Date:6/6/2006 10:34:11 AM
Post #of 123397

rachel, et.al., re: BitLocker

Microsoft allows SRK's (System Recovery Keys) to be stored in Active Directory; SRK's are also allowed to be saved to a USB device, a file, or printed out on paper. The SRK can be used to decrypt the drive and/or continue normal operations using BitLocker functionality.

Microsoft DOES NOT address the backup of individual keys generated by the TPM, nor does it allow for key migration or roaming. Wave's products can backup, migrate, and enable roaming for any key used by the TPM. In addition, key data is never exposed as it is (can be) in Microsoft's implementation. The functionality of Wave's key management products is extensive compared to the very limited functionality currently offered by Microsoft.

You wrote: "The intriguing question will be whether Seagate's FDE product will be viewed as so superior that it garners lots of sales and Bitlocker becomes the lower quality but cheap alternative."

That is exactly what I expect to happen. When the details are examined closely, the entire BitLocker system appears to be a rudimentary implementation at best.

Here is the best article I have seen to date regarding the technical details of BitLocker.
http://www.microsoft.com/technet/windowsvista/security/bittech.mspx

Apologies in advance for not offering anything more concrete but I am pressed for time.

Regards

SL

Also:

Posted by: SheldonLevine
In reply to: wavxmaster who wrote msg# 122770 Date:6/8/2006 12:47:46 AM
Post #of 123397

wavxmaster, re: BitLocker

Two seperate pieces, formerly known as "Secure Startup" and "Full Volume Encryption" are now referred to as "BitLocker".

From 6 months ago, regarding partition requirements and key management utilities:
http://www.investorshub.com/boards/replies.asp?msg=8707516
From 8 months ago, same as above:
http://www.investorshub.com/boards/read_msg.asp?message_id=8023355
From 9 months ago, regarding Secure Startup/TPM:
http://www.investorshub.com/boards/read_msg.asp?message_id=7727853

I don't think that BitLocker TPM support is new...
Apologies in advance if I'm not following your line of reasoning.

Regards

[RootOfTrust]

Attn: mjan112:

Have you discussed Seagate FDE with your IT guys? Clearly it is superior to BitLocker. For one thing, the encrytion is hardware-based and there is no loss of CPU speed from the encrypting, like there will be with software-based encrytion like BitLocker.

Hope your guys are not dismissing third party FDE as unneccsary when Bitlocker will be available as part of the Vista OS. If so they are wrong...once again!

Hardware-based trust on drives is going to be a big step forward from software-based security.