As usual, great analysis and consideration of options. I do use a TrueCrypt partition for some data, but I agree...it's not simple enough to breach most people's activation threshold. Very interesting ideas here.

I'm starting to REALLY get concerned about some of the "privacy vs. security" tradeoffs that people now just shrug and accept. I wonder when we reach the point of "very difficult to return from". I do actually believe/hope that we will swing back from this, but I expect it will take a crisis, Watergate-style, to highlight the abuses and potential problems sufficiently.

Nice article, and I'm glad someone is taking a serious look at the problem. I have an idea, and some additional analysis.

The idea: Use a physical key, and send a duplicate key ahead via FedEx or some other delivery service rather than trying to travel with a key. That won't protect you if you've been specifically targeted by the authorities (since the key could be intercepted enroute), but it will frustrate fishing expeditions.

The analysis: In many developed countries, the threat is unique to the short time after you've physically crossed the border but before you've cleared customs. Once you clear customs, if the authorities want to compel access to your laptop, they need a warrant or some other specific legal authority (under normal circumstances--I'm considering the case of a businessperson or lawyer who has sensitive documents, not the case of someone who might attract scrutiny from agencies more accustomed to operating outside the law). So for many travelers, a sufficient level of protection needs only to deflect the customs agent's attention enough to get cleared. Customs can't go back and demand access once a traveler has passed into the country (in many countries).

The catch is that any obvious protection or encryption will, in itself, attract the attention of customs, and in some backward places (like the United States), Customs can detain you indefinitely until they're satisfied you've handed over all the goods. Any scheme which is visible to a customs agent is likely to cause great problems to the traveler: it's like trying to clear customs while carrying a welded-shut steel box. They will be intensely curious as to the contents of the box, and don't expect to go anywhere until someone fires up a cutting torch.

So what you really need is a combination of encryption plus the electronic equivalent of a cloaking device.

Ideally, the computer should function perfectly normally if booted or accessed without the special key, but sensitive files simply won't appear in the filesystem. Unless customs is specifically targeting you, this should get you safely through (and even if they make you leave a disk image behind, the encryption should protect the secrets against a more detailed analysis).

I think ST's comment above sums it up: any obvious protection or encryption will in itself attract the attention of customs, and in some places Customs can detain you indefinitely until they're satisfied you've handed over all the goods.

The problem is not hiding the goods, the problem is getting through customs. That means being a sufficiently good smuggler that Customs don't know and are extremely unlikely to discover that there are hidden things. It's not enough to simply hide them and say "ha ha I win". So work-arounds like hidden partitions and the internet remain the most effective way for data that you really do want to get through.

AFAIK Customs always have the option of simply saying "no, you can't bring that in". At which point you can turn round or sometimes they let you dispose of the objectionable item. It's extremely unlikely that they will let you through after failing to obtain decrypted data that they've asked for.

My solution is simply not to travel to states with poor politics, like China and the US. That's cost me one possible job so far but I'd rather lose a job than my life. Unfortunately both the US and UK have demonstrated that China and Burma etc really have nothing to worry about when freeing up their media, torture and disappearance still work just fine in a "free" country. This is just another example...

If you have data you don't want customs to see why would you carry it with you? Why not just store it on a server (in a data center, back at home, anywhere) and access it as you need to (via an encrypted link, of course). Or maybe the encrypto gadgetry is just more fun :-)

Moz (above) is right that the real problem is getting through customs. Continuing his thought process, one realizes that it would be very difficult to design a product that both protects your data and is invisible to Customs. Once any product becomes even a little popular, customs will know to look for it specifically. Determining whether you have AntiCustoms Disk Proptection installed on your system will probably far easier to answer than the question of what you have encrypted, but once they determine that you have "something to hide", your life can quickly become miserable regardless of what that something is.

So, I don't yet see a lot of hope. While technically-knowledgable people can invent personal systems that customs won't find, I don't see how the majority of people could benefit from this. In fact, having a "benefit" like this only available to a few people becomes an impetus in its own right to declare it illegal.

What's on encrypted hard disks is none of their business. I am a crytographer, cryptanalyst for a government, and all my computers and laptop are encrypted with high levels of security and encryption. There is no way customs of any country would have me decrypt one of my laptops, ever. Because doing so would have me sent to prison for life in my country, as high treason charges. Some companies work in special areas (weapons, and high level industrial secrets) and do encrypt laptops that leave the company.