Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).

learn more… | top users | synonyms

1
vote
3answers
50 views

Moving /boot to USB and Preventing booting from other USB devices (Allow boot from only one USB)

I'm going to move my /boot/ folder to a USB to as a security measure to protect against Full Disk Encryption exploits. My question is, is it possible to only allow boot from USB from a single USB ...
1
vote
0answers
30 views

Mcafee endpoint encryption doesn't see previously encrypted partition after Windows 7 reinstallation

My partitions C and D were encrypted and Windows 7 was installed on C. I copied all important files to D and then changed harddrive controller from IDE to AHCI, removed C and created it again and then ...
0
votes
1answer
28 views

Is there an AES 256 LUKS encryption option in Fedora? [closed]

I have certain information on my drive that I don't want anyone (not even me ;) ) to gain access to. I read recently that Fedora only offers EAS 256 LUKS encryption. This just isn't secure enough ...
5
votes
1answer
62 views

Hardware-based full disk encryption without pre-boot authentication [closed]

I am looking for a possibility to sanitize large amounts of data on regular hard-drives and SSDs. Instead of overwriting the data several times (on regular hard-drives, which could take days and ...
0
votes
0answers
9 views

DiskCryptor error. Can it be fixed? or what equivalent disc encryption software should be installed? Thanks [migrated]

DiskCryptor is giving me the error: "Not enough space after partitions to install bootloader. Install bootloader to first HDD track?". Then after clicking YES, I get "Error code: 20" then upon ...
0
votes
0answers
70 views

How to demonstrate disk encryption? [closed]

I'm having security classes and in one of the works I need to create a fictitious Company and demonstrate one security tool/improvement. I have two Windows Virtual Machines. (And Kali, Mint, Fedora ...
1
vote
1answer
77 views

Encrypting tails USB boot disk (preeboot password on live)

To use tails, I have always used a DVD, because of the fact I know it will not be tampered with, at least within reason. However there are endless reasons why a USB boot option would be faster, and in ...
12
votes
1answer
471 views

Is there a reason to use TrueCrypt over VeraCrypt?

I am looking to encrypt a few drives of mine, and my ONLY interest is security. It is OK if my VeraCrypt volumes are not compatible with TrueCrypt, and vice versa. There is a lot of talk about ...
19
votes
4answers
1k views

Why use a Smartcard for (Two Factor) Auth instead of another medium?

I recently installed Bitlocker on my Windows 8.1 machine, using only a password. I was thinking of getting something other than just a password for my storage drive, something physical, like a USB, SD ...
0
votes
2answers
93 views

Trust level of whole disk encryption software

For example, if we take this software into account: Symantec Endpoint Encryption Sophos Safeguard Encryption How can we trust suppliers of whole disk encryption software in the lights of the ...
2
votes
2answers
64 views

Old floppy disk protection

can somebody explain in detail how old floppy disks copy protection works? Someone told me that it was based on an error on a trace of the floppy that was read only during the copy (and never when the ...
0
votes
1answer
68 views

Is automatic login with full disk encryption a risk?

I use full disk encryption on Linux and wonder whether there is any security risk ob having automatic login on the Linux itself. In case somebody breaks the encryption of the drive, they can read all ...
3
votes
4answers
141 views

How do I encrypt external drive with Password which is compatible with both Linux and Windows? [closed]

I wanted to encrypt my external drive with password, which is compatible in both Linux and Windows. Truecrypt is an option. But the development of it is stopped few months back. I came across ...
2
votes
3answers
42 views

Encryption while logged in

If I'm using full disk encryption on my home computer, and it's online, are the hard drive contents encrypted when I'm logged in and using the machine (from the perspective of an online attacker - no ...
3
votes
1answer
110 views

Hardware encrypted external HDDs

I'm planning to buy an external HDD with hardware encryption, namingly the WD My Passport Ultra 2TB. On the WD website the information about the encryption is sadly scarce so I'm asking here. How ...
1
vote
2answers
2k views

Why is VeraCrypt more secure than TrueCrypt?

TrueCrypt retired with a mysterious "Using TrueCrypt is not secure as it may contain unfixed security issues" (source) Yesterday Slashdot reported VeraCrypt as a better replacement (source) since it ...
0
votes
1answer
113 views

Debian encryption is as safe as Truecrypt. Is this correct?

When I try to install latest debian to my pc, the wizard ask me to input a password to do FDE(full disk encryption). My questions are: What algorithm does Debian use? (Truecrypt = AES) Can I change ...
3
votes
0answers
51 views

Linux, TRESOR and XTS

I want to switch from using LUKS for full disk encryption to TRESOR. TRESOR tries to prevent cold boot attacks by storing the encryption key in the CPU's registers. It uses the kernel's crypto API for ...
7
votes
1answer
267 views

Secure Boot on Microsoft Surface Pro 3 (or modern PCs)?

Got a Surface Pro 3 today (it's awesome BTW!) and noticed in it's EFI that it's got TPM enabled, "Secure Boot" enabled (unsure what such an umbrella/catch all term actually covers) And then in ...
1
vote
0answers
55 views

Full disk encryption on CentOS 6x - FIPS 140-2 compliant?

I'm using CentOS 6.5 on an existing server and am researching encryption options for compliance. SEDs are out since the controller in this older machine will not support them. That leaves full ...
2
votes
1answer
35 views

Security implications when setting the discard option in /etc/crypttab

Setting the discard option in /etc/crypttab has security implications. From the man page: Allow discard requests to be passed through the encrypted block device. This improves performance on SSD ...
1
vote
3answers
343 views

Samsung SSD 840 Evo Disk-Encryption

My question relates to the hardware encryption of samsungs 840 Evo SSD (maybe also other models): The theory: Samsung specifies that their SSD encrypts each data with AES by default. So if I choose a ...
0
votes
2answers
47 views

How to decide whether to password protect key files in addition to full disk encryption

It is customary to protect certain critical files with a password. For example: PGP keys, VPN keys, password managers, etc. The practice dates back to before full disk encryption being common. These ...
0
votes
1answer
140 views

XTS vs AES-CBC with ESSIV for file-based filesystem encryption

In a blog post I recently read called "You Don't Want XTS," the author explains some of the pitfalls of using XTS to encrypt filesystems. Specifically, he recommends against ever sharing encrypted ...
0
votes
2answers
119 views

Store a file on a harddisk without root having access to it

Is there a way to store a file on a disk as a user so that even the root user has no access to it? I tried EncFS but that is no solution because the root user can switch to every user, so he/she can ...
1
vote
2answers
131 views

What happens after setting up HDD password?

I am wondering what happens when I set HDD password in my laptop (Samsung with ssd). I mean a given case. I have been having working system without any password. Then one day I decide to set up HDD ...
0
votes
1answer
133 views

Securely wipe external drive with Windows only [duplicate]

Consider following 2 disk wipe procedures, using only vanilla Windows installation: First do a quick-format to make the disk appear empty, then do one of these: Just do full format of the disk. ...
35
votes
5answers
8k views

Are there any reasonable TrueCrypt forks?

Unfortunately, TrueCrypt may have been discontinued yesterday. I use LUKS on Linux, but I liked the fact that with TrueCrypt I had a portable solution across Windows, Mac, & Linux. TrueCrypt ...
1
vote
1answer
834 views

Encrypted LVM as an alternative to TrueCrypt

In a weird announcement on the TrueCrypt page it says that the software is unsafe so we should migrate to BitLocker. If it is a prank it's sure not funny especially when it comes to data. Since I ...
6
votes
1answer
929 views

Are there other ways to encrypt files other then TrueCrypt and BitLocker [closed]

I don't trust BitLocker. Probably backdoored and relies on TPM which can be hacked according to DEFON. It also does not allow for hidden partitions or other advantages like TrueCrypt. With TrueCrypt ...
2
votes
2answers
333 views

Using a TPM with Linux

I have the need for a company laptop (Dell e6540) that contains our java application on it to go out for evaluation purposes. For this reason I would like to make sure that the HDD is protected from ...
0
votes
1answer
131 views

Secure distributed storing and querying of [medical] data?

Comparing ways of distributing and securely storing and querying structured and schemaless data. Currently I am using MongoDB, but am looking into (Postgres|MySQL)&CryptDB, Cassandra and others. ...
0
votes
2answers
191 views

Ubuntu LVM LUKS Encryption

I've been reading about Ubuntu LVM Encryption, and I understand that it supports the use of Linux Unified Key Setup (LUKS) during installation, which is a block level encryption that encrypts the ...
2
votes
1answer
146 views

Decrypting FDE in Disaster Recovery

I saw a hot network question on SE, about Workplace Ethics - Do I give my password at work to my old boss after quitting?. My initial response (as are the answers in that question) is always NO. The ...
8
votes
2answers
1k views

How does Android filesystem encryption work?

I'm interested in encrypting my Android devices for security in the (hopefully will-never-happen) event of the phone being recovered by an unknown/unauthorized person. How does Android filesystem ...
1
vote
2answers
55 views

What is the security benefit of Per-File Encryption key architecture?

Are there any security benefits to having a different key(it is encrypted by a master key and that encrypted key is included in the metadata for the file) used to encrypt each file versus just one key ...
2
votes
1answer
261 views

Field-level encryption vs disk encryption for PCI compliance

We are in the process of setting up a PCI compliant server (with Firehost's help). We are using MongoDB as our primary database. I am having some concerns about the encryption, though. Are there any ...
3
votes
2answers
3k views

TrueCrypt vs “native” whole-disk encryption on Linux?

When preparing to encrypt an entire partition, is it better to rely on "native" whole-disk encryption (eg following this tutorial), or an external tool like TrueCrypt? The wikipedia article comparing ...
2
votes
2answers
169 views

How to encrypt entire HDD without any password prompts?

Before you dismiss this as silly, let me explain :) The only purpose of this encryption is to make the data inaccessible if the drive breaks down and I want to send it off for warranty replacement. ...
4
votes
0answers
1k views

OPAL Hardware Encryption on Linux [closed]

I recently bought a laptop with an SSD which complies with the Self encrypting Drive OPAL specification. I was offerd to setup encryption while installing Linux, but my guess was that this was going ...
3
votes
2answers
130 views

Can full disk encryption make malware recovery more difficult?

Let us say that we have a computer with a fully encrypted disk. If it gets infected with malware, does this make it more difficult to use a LiveCD or other rescue option to clean it or restore it? It ...
16
votes
4answers
1k views

Is it possible to boot an encrypted server remotely and securely?

Imagine you have a server that is at a location which is not trustworthy. People might have physical access to the machine who are not supposed to look at the data stored on it. In this scenario I ...
1
vote
1answer
144 views

What does hardware full disk encryption imply?

I read the wikipedia article and few others, however I still don't have some things clear. The main question would be what does hardware full disk encryption imply for the user, however I have more ...
2
votes
1answer
132 views

Self-encrypting drives, certification for tamper-protection?

Consider a drive with Opal 2.0 support that works with Microsoft Bitlocker's "eDrive" feature. In this case, supposedly, the encryption key never leaves the disk (which might increase security, ...
1
vote
2answers
130 views

How to use ESSIV to avoid seeing repeated patterns?

I'm trying to implement an encrypted file-system. The file-system consists of 512-byte sectors. I encrypt/decrypt the contents of a sector as follows: Compute the SHA256 sum of the user password. ...
1
vote
2answers
63 views

Hardware Dependent Encryption [closed]

I am looking for a Linux based encryption system (like Truecrypt) that has the ability to do the following: Encrypt a partition or external drive that it can only be read from the same computer ...
0
votes
2answers
174 views

I need two separate hidden volumes in disk encryption. What are my options? [closed]

C: for system (Windows) D: for my files Makes much more sense to me than packing everything on the same volume, right? Is there a disk encryption utility capable of doing this? I don't know much ...
9
votes
3answers
880 views

Is it possible to prevent a physical attack on full disk encryption?

I've been researching into some methods to ensure that disk encryption keys can't be stolen, and one that I've come across is called TRESOR. With this kernel patch, you can create a partition that is ...
2
votes
1answer
95 views

Would encryption of RAID6 arrays of SSDs be secure?

Given the uncertainty about data being left in the clear, I've hesitated to use SSDs where I need full-disk encryption. While some SSDs employ hardware encryption, they're quite expensive, and there ...
1
vote
3answers
856 views

Decrypting a Truecrypt system - how to make deleted files unrecoverable? [duplicate]

If I have full disk encryption on my computer and want to decrypt it, but want to delete senstive documents before decrypting, how do I ensure they are unrecoverable post-decryption? Edit: I suspect ...