Replies

Is the key stored on the laptop? 128 bit encryption can be cracked rather easily, 256 bit is harder, though most PGP systems use 2048 bit encryption, but that's a 128 character string, quite a lot of typing for someone to use on an everyday basis. If it's 8 characters, that's 128 bit encryption, something I can crack using my laptop and about 20 hours of time, depending upon the sample size. If I have a huge sample of text or word documents, it can be cracked within 10 minutes; faster with word documents.

And if I can do it with simple tools, so should most government agencies. If a border agent found your data all to be encrypted, it would seem to me to be more likely for them to seize and keep the laptop until they can either crack the code, or get you to give it up yourself.

"Is the key stored on the laptop? 128 bit encryption can be cracked rather easily, 256 bit is harder, though most PGP systems use 2048 bit encryption, but that's a 128 character string, quite a lot of typing for someone to use on an everyday basis. If it's 8 characters, that's 128 bit encryption, something I can crack using my laptop and about 20 hours of time, depending upon the sample size. If I have a huge sample of text or word documents, it can be cracked within 10 minutes; faster with word documents."

"And if I can do it with simple tools, so should most government agencies. If a border agent found your data all to be encrypted, it would seem to me to be more likely for them to seize and keep the laptop until they can either crack the code, or get you to give it up yourself."

- - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Thanks for the tips. I hope all who use PGP check the strength of their encryption and take the obvious lesson about the importance of having a suitably long key. Mine was long, but not quite long enough. Now it is (with some extra for good measure).

As for the border security, I will avoid crossing any check point, internal or at the border, with sensitive data, encrypted or not, given this extension of power that the state has granted itself. There are relatively easy ways to avoid the need for this, as you are no doubt aware. What I don't have cannot be seized. If your scenario develops, the seizers can satisfy their urge to pry open the PGP-locked box and I can enjoy their discovering that the container is empty. PGP seems to be pretty good privacy, but some further review will be needed to assure that the cache-wiping and "deleted file" wiping utilities are working as advertised.