only $13 / month

Alertsec Xpress is the web-based service powered by Check Point Full Disk Encryption - the global leader in encryption for laptops.

Buy now or download the 30-day free trial. Read More...



Encryption

An encryption key is the piece of information that determines the outcome when data is processed through an encryption algorithm. Alertsec Xpress is using AES (Advanced Encryption Standard) as the encryption algorithm and the key used for encryption is unique for each PC and created locally on installation. Whilst algorithms are standard and widely known, the key is kept secret at all times.

To prevent a key from being guessed, keys need to be generated truly randomly and contain sufficient entropy. Check Point Full Disk Encryption is using a truly randomized tool to collect information on the PC when creating the encryption key. This and other cryptographic processes have been certified in the Check Point Full Disk Encryption software through the rigorous certification standards FIPS 140-1 and Common Criteria EAL4.

When the encryption takes place, the key specifies the particular transformation of data. (While decryption reverses the process). Hard disk encryption pre-define how data is going to be encrypted when it is stored on a hard disk and this "preparation" is done at installation, whether there is information already stored on the disk or not. This is why the initial installation takes some time versus the on-the-fly encryption/ decryption experience during normal use.

Alertsec Xpress is using a 256-bit key as standard. This offers 2 256 (or 115 800 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000) possible keys, which is considered very strong. Even if a computer can try 1 Billion keys per second, it would still take 3.5 x 1060 years (or 3 500 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000) to try all different possibilities.

To make things even more safe, each sector of the hard disk (which contain millions of sectors) is encrypted with a unique key, which means that a hacker has to start all over again for the next sector - and they do not even know if the sector they are hacking contains any information worth hacking!