1
$\begingroup$

When having a company computer that is full disk encrypted, it is common that the boss have a master password / backdoor, so the data always can be decrypted.

I have heard some call this for "scrow" or something similar.

Does anyone know the correct name?

$\endgroup$
5
$\begingroup$

I think the thing you are looking for is "escrow" as in http://en.wikipedia.org/wiki/Key_escrow. Be aware though that the security of your system is reduced to the hardness for an attacker to find the master password which might be much easier than breaking the disk encryption scheme

$\endgroup$
1
$\begingroup$

A good solution would be to hold the master password encrypted by a N+P sharing scheme, where a certain amount of perhaps board members, or third parties, would need to come together to be able to reconstruct the master password. c++ cryptopp does secret sharing (http://en.wikipedia.org/wiki/Shamir%27s_Secret_Sharing) through http://www.cryptopp.com/docs/ref/class_secret_sharing.html

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.