SafeGuard Easy multi-platform 4.5x
Windows 2000 Professional, Windows XP
Are the harddisk or floppy disk encryption keys stored on the harddisk?
All keys are kept in a secure encrypted area of the SafeGuard Easy kernel encrypted under a "key encryption key" (KEK). The KEK itself is not stored on the harddisk, but derived at run-time from the password which the user enters at the PBA logon.
Without the correct password, the keys and therefore the data cannot be decrypted and the disk/floppy remains perfectly safe.
SafeGuard Easy has undergone in it's history several official security evaluations of ITSEC and Common Criteria which have confirmed the cryptographic security of the product.