Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

When having a company computer that is full disk encrypted, it is common that the boss have a master password / backdoor, so the data always can be decrypted.

I have heard some call this for "scrow" or something similar.

Does anyone know the correct name?

share|improve this question
add comment

2 Answers

up vote 5 down vote accepted

I think the thing you are looking for is "escrow" as in http://en.wikipedia.org/wiki/Key_escrow. Be aware though that the security of your system is reduced to the hardness for an attacker to find the master password which might be much easier than breaking the disk encryption scheme

share|improve this answer
add comment

A good solution would be to hold the master password encrypted by a N+P sharing scheme, where a certain amount of perhaps board members, or third parties, would need to come together to be able to reconstruct the master password. c++ cryptopp does secret sharing (http://en.wikipedia.org/wiki/Shamir%27s_Secret_Sharing) through http://www.cryptopp.com/docs/ref/class_secret_sharing.html

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.