Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).
-5
votes
2answers
77 views
Is it possible to encrypt a virtual machine using virtualbox? [closed]
Is it possible to encrypt a virtual machine using virtualbox, and not leave accessible to the users of the machine where it hosted, and not allow any file to be extracted it with some program ?
The ...
10
votes
2answers
473 views
How to encrypt data on the server?
I have some data on the server (running Linux) which needs to be encrypted (company policy). This data is being served by an application running on this machine. Now I consider a few possibilities:
...
3
votes
1answer
105 views
Recognizing PGP-encrypted disks
I am studying various disk encryption schemes (such as PGP, MS Bit Locker, BestCrypt and TrueCrypt) on my Windows OS.
I am interested to know how an encrypted partition/disk/file with a particular ...
5
votes
2answers
123 views
Full-disk encryption and theft mitigation?
Is it possible to combine the security of full-disk encryption (e.g. Truecrypt) with the honeypot-like performance of anti-theft tools (e.g. Prey)?
In other words, is it feasible to have both strong ...
3
votes
1answer
196 views
Remote System Administration of an Encryption-Switch-Encrypted Infrastructure
I can't seem to find a decent explanation anywhere of the practicalities of remote system administration (e.g. SSH) of an encryption-switch-encrypted SAN-stored infrastructure.
The environment will ...
1
vote
1answer
104 views
Is there a way to encrypt an existing ext4 filesystem with already data on it? [duplicate]
I have a big drive with already data on it, that I would like to encrypt (ext4).
Is there a way to encrypt that disk without having to move the data to another drive first?
Or maybe, this would be ...
4
votes
1answer
136 views
Accessing hidden partitons
I have two disks. They're both bootable and run Linux.
When I physically mount the disks, I can see scsi devices get added. /dev/sdb and /dev/sdc. However the partitions are not detected. I can't see ...
4
votes
3answers
151 views
Should a full disk encrypted hard drive on a live system be considered encryption at rest?
If you are specifying requirements that a certain classification of data be encrypted while at rest (on storage), should the requirement be considered met if the data is stored on an live (turned on) ...
2
votes
2answers
143 views
Is it safe to suspend my computer if I'm using encrypted hard drive?
I'm using disk encryption to protect my data and sensitive information - but only one partition.
I used to suspend my computer instead of shutting it down because of very fast resume and very low ...
1
vote
1answer
130 views
Dual Linux System with Whole Disk Encryption
(This is a continuation of my question on Ask Ubuntu.)
My goal is I want to have a Xubuntu/Ubuntu dual boot, with a catch - I want the disk to be fully encrypted with the dm-crypt (native supplied) ...
0
votes
0answers
58 views
Which is efficient disk or volume encryption system? [closed]
Referring to https://wiki.archlinux.org/index.php/Disk_Encryption#Comparison_table to compare different disk encryption solution available in market. Our requirement is to encrypt the EBS ...
1
vote
1answer
252 views
SSD enrcyption with ATA password - AHCI mode?
I have seen articles advising that in order to make the most of an SSD, it should be connected in AHCI mode.
Some SSDs allow the ATA password to encrypt the encryption key so my question is this - ...
3
votes
2answers
137 views
Remedy for not having filled the disk with random data?
Filling a large HDD with /dev/urandom prior to encryption can be extremely slow (even with netcat, multiple instances in parallel, etc) and for this reason I'm sure a lot of users skip this advice ...
3
votes
1answer
99 views
Is this a security risk for us to lost TPM or others to access to reset BIOS ?
In the previous post Physically secure the system case it is recommended to physically protect the system. But in case stolen laptops where intruder have physical access to TPMs. What are the security ...
6
votes
2answers
499 views
SSD Encryption - Difference between models
I understand that most SSDs which support encryption usually encrypt all data, but that only some actually encrypt the encryption key with a user BIOS password. This means that the models which don't ...
3
votes
1answer
269 views
Full Disk Encryption within a VM, how secure is it?
Just a quick query on basically how to secure a VM for a home computer for a number of uses (such as securing work related data in a good enough fashion whilst in its native environment).
I'm not ...
3
votes
3answers
740 views
Securing my USB flash drive with Truecrypt and FreeOTFE
I want to know if I encrypt my flash with Truecrypt "Encrypt a non-system partition/drive" option and then mount it and then make a container with FreeOTFE on the Truecrypt encrypted drive and then ...
2
votes
1answer
172 views
Is Dual Factor possible during boot with whole disk encryption on Mac FileVault 2
Mac FileVault 2 is the default disk encryption for newer Macs that occurs in the EFI pre-boot phase. The challenge here is that most smartcard drivers are loaded after the OS loads.
Is anyone aware ...
0
votes
1answer
168 views
Another method to erase hard drives securely? [duplicate]
Possible Duplicate:
Use truecrypt to make data unrecoverable
The other day I was thinking, and I looked up this question because I was pretty sure a question similar to this had been asked. ...
0
votes
0answers
125 views
TrueCrypt Windows FDE Multi-Boot [closed]
I tried to achieve Matt's setup in my VM with Ubuntu and Debian (both having their separate /boot partition). Everything worked smoothly, but enabling TrueCrypt-FDE on Windows, I could still access ...
1
vote
1answer
88 views
Determing and deciphering an encrypted drive (knowing the password)
I have a Western Digital external drive (my passport essential 500GB), which comes with a little software that allows you to encrypt your data (which I did sometime ago). Unfortunately, this software ...
2
votes
2answers
204 views
Possible implementations of networked+encrypted filesystem
Is it possible to implement scheme where remote server just share its filesystem (or resizable container file in it) and it's locally encrypted and mounted? And what is best practical method? (On ...
8
votes
5answers
464 views
Encrypt Virtual Machine in the cloud
I am no expert when it comes to security in virtualized environments.
However a problem I always saw is: What happens if the host OS gets hacked and an attacker gains administrative privileges?
How ...
4
votes
1answer
331 views
Can a Bitlocker To Go user pin be brute forced?
I have a external hard disk and protected a partition on it with Bitlocker To Go. I printed the recovery code but I lost it. I can't remember the user PIN either. If I could only know the first ...
3
votes
1answer
232 views
Does setting a firmware password add security if FileVault 2 is enabled?
On an up-to-date OS X computer with FileVault 2 (whole-disk encryption, minus the recovery partition), is any security gained by setting a firmware password, as well?
4
votes
2answers
1k views
What does HP DriveLock do to your password?
While looking at various hard drive encryption methods, I discovered that HP's "DriveLock" is not quite the standard ATA security system. While I did get confirmation from HP that it does indeed use ...
6
votes
6answers
2k views
How secure is FileVault 2 while the computer is in sleep mode?
How secure is Apples disk encryption FileVault 2 when someone has physical or network access while the computer in sleep mode or is running a screen saver? Are there ways to circumvent FileVault 2 ...
4
votes
2answers
247 views
Detect changes in /boot when using full disk encryption
When running a fully encrypted linux system using dm-crypt, the /boot partition has to be unencrypted to boot, as far as I know. I've setup a server that can be unlocked remotely by connecting to a ...
2
votes
1answer
167 views
How does disk encryption mounting work with large disk and low RAM?
For example with Truecrypt or bitlocker, when my hard disk contains 500 GB encrypted data and 256 MB Free RAM, how is the data decrypted/disk mounted when I turn on my computer?
If the entire disk is ...
1
vote
1answer
177 views
Is using decrypt_derived more secure than a keyfile?
Say I have two partitions on a Linux system, a root partition (/) and a /home partition. Both of them are encrypted with LUKS.
The /home partition needs only to be decrypted if / is unlocked and ...
3
votes
1answer
399 views
Reasonable (BruteForce) Attempts/Second Estimate?
I've read various articles on password strength and passwords vs pass phrases (including the one from XKCD and its thread here), but most of those articles seem to be focused on online passwords, and ...
11
votes
2answers
5k views
Multi-boot with full hard drive encryption and pre-boot authentication
How would I set up a multiboot system which supports full hard drive encryption and pre-boot authentication.
I have a system with Ubuntu, Windows 7, Windows XP, and I would like to install Red Hat. ...
4
votes
2answers
2k views
Full disk encryption and multi-factor authentication
All serious full disk encryption schemes I have looked into use a static password for authentication. For example, TrueCrypt supports two-factor authentication with keyfiles, but not for system ...
6
votes
7answers
2k views
Physical computer security, how to disable USB ports when the computer is 'locked'?
Lets say my PC & server is in an environment where a theoretical attacker has physical access to the machine while I'm not there. Now the data is encrypted on the hard drive with TrueCrypt. ...
0
votes
2answers
238 views
In TrueCrypt Hidden / Normal overriding?
If I have a normal TrueCrypt volume, and I want to create a Hidden volume inside of it, how do I stop the 2 from overriding each other? Or do I just have to manually make sure the inner volume does ...
5
votes
2answers
270 views
Erasing a hard-disk, encrypting it as alternative?
I was pondering about this, sometimes people ask me to erase data on their drive. So I use a shredding program, which takes a long time. However what if instead of shredding all the files, I'd just ...
3
votes
3answers
1k views
TrueCrypt -vs- MacOS encrypted sparse image - equally secure? Other alternatives?
I'm currently trying to find my personal best solution for storing passwords and other sensible data. Recently I've used 1Password on iPhone and Mac but I'm not really satisfied with its predefined ...
4
votes
2answers
240 views
Securing data on laptop's hdd
I was wondering which is the best way to secure/encrypt data in the hard disk on a laptop that runs Ubuntu Oneiric? Setting LVM encryption?
I am mostly concerned about having my laptop lost or what ...
5
votes
1answer
854 views
Device versus file based encryption in TrueCrypt for a flash drive?
Are there security tradeoffs to be considered in deciding between encrypting an entire flashdrive with TrueCrypt versus storing a file encrypted container? The security goal is to be immune to the ...
4
votes
2answers
2k views
How expensive is it to guess a 15 character password, and should I be worried?
I'm currently using AES encryption (at home) on GNU/Linux (one of LUKS AES-256 variants with xts) and on Windows 7 (Truecrypt) with a 15 characters password (alphanumeric lowercase only plus _).
...
2
votes
2answers
181 views
Advice on buying an encrypted disk
How do I find an encrypted disk to buy?
What factors should I be aware of in selecting one?
Is there any proof that buying one likely to draw any attention?
How do I know there's not a backdoor?
...
5
votes
4answers
294 views
How do you guarantee that you don't lose a keyfile?
I am toying with the idea of adding keyfiles to various things I encrypt. However whats been keeping me from adopting them is garanteeing that I don't loose the keyfile while still keeping security.
...
4
votes
4answers
445 views
Are backups of truecrypt volumes with different pass phrases a security risk?
Lets say that I periodically change the pass-phrase on a truecrypt volume. The volume is regularly backed up, so my backup system has many copies of that volume, many of which have a different volume ...
4
votes
2answers
502 views
What cryptographic module does Sql Server 2008 use to run in Fips 140-2 compliant mode by default?
One can configure Sql Server 2008 to run in FIPS 140-2 compliant mode, in the same manner as running Bitlocker in FIPS 140-2 compliant mode. Which is to activate FIPS 140-2 compliant mode in the ...
2
votes
2answers
170 views
What does “if the Crypto Officer performs this operation” mean in this BitLocker security policy?
In the document Windows Server 2008 R2 BitLocker™ Drive Encryption Security Policy For FIPS 140-2 Validation, in the section 6.1.2 FIPS 140-2 Security Rules bullet point 2 it says:
BitLocker™ will ...
6
votes
2answers
685 views
Is BitLocker on a virtual machine still FIPS 140-2 compliant?
BitLocker can be used as a cryptographic module to fulfill FIPS 140-2 security level 1 compliance.
In a common setup, USB thumb drives can be used to unlock drives encrypted by BitLocker on startup.
...
27
votes
7answers
30k views
Are there actually any advantages to Android full-disk encryption?
So, since Android 3, devices can perform boot-time, on-the-fly encryption/decryption of the application storage area (NOT the SDcard/removable storage) - essentially full-disk encryption. This ...
0
votes
3answers
697 views
Why do some LUKS tutorials mention overwriting the partition with random data?
On a lot of tutorials on luks encryption, people say to override the partition with random data, so that data is not recoverable after encryption. I don't understand that. Will the random data be ...
3
votes
1answer
2k views
Is it possible to auto mount entire truecrypt drive
Truecrypt can easily automount if your drive is not entirely encrypted and your data is a standard file. However I have my entire removable storage encrypted and so to the OS, it is seen as an ...
3
votes
3answers
255 views
Encrypting an email server's local drives or filesystems
Planning to deploy a remote hosted mailer (Zimbra based) I need to make sure the local data on the machine is encrypted. Currently, the plan is to use the built in LUKS to encrypt /opt/zimbra and ...
