Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).

learn more… | top users | synonyms

0
votes
0answers
32 views

How to crack encrypted disk (crypto-LUKS) in an efficient way?

I had a disk encrypted by crypto-LUKS but forgotten password. I read a question posted here. LUKS HDD Encryption crack But before that I want to know if there's some free software I can use to ...
6
votes
0answers
54 views

Can I use disk encryption and track my device at the same time, in case it's stolen or lost?

I would like to encrypt a single user profile but have been told EFS isn't the solution. I have a laptop that I leave in my bag and use for work and private purposes. I want to secure data in case my ...
2
votes
2answers
51 views

What is the use of TPM-based Bitlocker if the drive gets decrypted automatically?

I am using Bitlocker which uses a TPM to unlock the drive. My question is, although TPM provides security against tampering, how is it useful in defending against attacks that involve physical access? ...
1
vote
1answer
89 views

Made my password a few characters over the 64 character count and can't mount

I can't enter my full password here (the screenshot) since veracrypt limits character count to 64 and my pass is 66. Is the data on the drive recoverable?
1
vote
0answers
39 views

Password guessing attack on file from SSD [closed]

I got the following scenario: a SSD self-encrypting drive (to be precise: a Samsung MZ7PD256HCGM) is encrypted using McAfee full-drive encryption (Opal 2.0 standard). I have a (relatively small) file ...
5
votes
1answer
94 views

Can you extract the encryption key of a computer with full disk encryption via malware?

I recently discovered the subject of cold boot attacks which are able to extract the encryption key of the ram memory after the computer has shut down. and from what I understand is that law ...
3
votes
2answers
76 views

How to forget LUKS keys during emergency?

One day, while Alice is downloading some photos from Bobs server, the alarm goes off. Trudy came to steal all the data. Fortunately, the server is setup to shutdown upon server room alarm and has ...
2
votes
1answer
51 views

Is using trim on a ssd with LVM LUKS safe?

I know that it can allow an attacker to know the filesystem and file size, but can it allow an attacker to decrypt any files?
0
votes
1answer
86 views

How to enable OPAL SSD encryption on Windows without BitLocker?

A lot of SSDs now implement OPAL-compliant AES hardware encryption, which seems to be the only option to get full-disk encryption on modern PCs without buying the (very expensive) Windows 10 Pro ...
-2
votes
0answers
15 views

Truecrypt Hidden Volume is Corrupted [migrated]

Hi I have been using Truecrypt for a long time. And I encrypted 20GB drive using that. In which 15GB is outer volume and 5GB is hidden volume. Now what happened is, When I try to open the drive using ...
0
votes
0answers
34 views

Veracrypt, encrypting program files

So I have a small 24GB SSD as C: which contains windows only and a HDD as D: that contains program files and personal data. I installed veracrypt onto the D: drive. I did a system encryption on C: and ...
1
vote
2answers
75 views

Lock down OS to specific hardware device

I know everything is reversible. But how could I lock down an instance of linux to a specific hardware device? Possibly tying the filesystem to a specific serial number on the board for instance.
4
votes
1answer
108 views

What excactly is encrypted by “full disk encryption” on Android 5?

This page says "user data" gets encrypted. But that implies it's only a certain part of the full disk? Like "/data" or something? Can I copy a file from a PC to the internal storage to any place and ...
4
votes
1answer
78 views

What medium for storing full-disk encryption keys is easy-to-use as well as easy-to-destroy?

If I were to frequently work on sensitive data on a LUKS partition and wanted to be able to quickly destroy the keys to it, I figure it would make sense to— encrypt that partition with a key file, ...
0
votes
0answers
35 views

Unable to view USB Hard drive contents after lock(read-only access)

My work laptop has PGP Desktop 10.3 and when I connected my USB flashdrive it prompted me to Encrypt or Lock. Given the information on both of these options the only choice I had in order to access ...
5
votes
1answer
146 views

Right way to use the TPM for full disk encryption

I'm currently setting up a BitLocker equivalent using a TPM and LUKS. I've got the basics right and I'm able to measure the boot process and seal the FDE key using the TPM. Every time the sensitive ...
0
votes
0answers
21 views

Symantec Encryption Desktop not recognizing 3 Tb drive properly

I'm attempting to encrypt a new 3 Tb hard drive (Western Digital My Passport Ultra) using Symantec Encryption Desktop (formerly PGP Whole Disk Encryption) v. 10.3.0 in Windows 7 64-bit. I've used it ...
3
votes
1answer
51 views

How can AES-CBC be used for LUKS encryption, when the ciphertext is not static?

In CBC mode of operation, ciphertext from previous block is used as IV in next block. How then can AES-CBC be used for disk encryption (LUKS), when the data on the disk (ie the ciphertext) keeps ...
1
vote
1answer
81 views

What is the best practice to secure an unattended Raspberry Pi?

I'm working on a project which involves mounting a Raspberry Pi on a self-moving vehicle. I'm looking for the best way to encrypt the Pi (entire file-system, swap, etc.), with the minimum possible ...
3
votes
1answer
117 views

Is there readily available encryption algorithms for current computers, that is safe from quantum computers?

Is there readily available encryption algorithms for current computers, that is safe from quantum computers? I know a bunch of currently popular encryption algorithms that are safe from current ...
2
votes
1answer
172 views

Can Windows BitLocker encryption be broken by Live Boot?

I have a Windows system and I protected the drive with BitLocker encryption. Can BitLocker encryption be bypassed by live-booting with Linux or any other OS?
3
votes
1answer
68 views

How does the MFT encryption work?

A few week ago there was a ransomware called Petya delivered via Dropbox links. The new ransomware is inserted into the master boot record (MBR) of the victim's computer, and the system restarts. On ...
1
vote
1answer
46 views

Break encryption by applying accidental-overwrite techniques

I read that there are ways, at least on mechanical drives, to sometimes recover data that was overwritten (not just deleted). Now I was wondering if it was theoretically possible to break a fresh ...
7
votes
1answer
132 views

Methods of cold boot attacks in the wild

As far as I know, there are two methods for performing cold boot attacks: Reboot the system into an alternate operating system or BIOS with a minimal memory footprint which automatically exports ...
6
votes
3answers
179 views

Android full disk encryption

I am using Android 4.4.4. There is an option called phone storage encryption. From what I have read the crypto is secure. However, I read this article which said Google is able to reset passwords: ...
7
votes
1answer
263 views

Does LUKS actually fully encrypt data on a disk?

Why does TrueCrypt and similair applications take hours to fully encrypt a 1 tb drive, while luks takes a few seconds? Sorry if this is a dumb question, but I don't fully understand how that works.
1
vote
2answers
159 views

How secure is a BIOS/UEFI hard drive password? [duplicate]

I'm buying some new machines and am concerned about security of the data should the machine be physically stolen. It's easy to take out the drive, image it, and read what you want. I could use file ...
-4
votes
3answers
111 views

Is there a way to secure a Linux machine in a way that no one else (but me) can access its contents? [closed]

And I mean, even if someone tries rooting with a Live CD, even if one takes the HDD away and plug it in somewhere else, etc... I want to be able to give a client a machine with a service running, but ...
3
votes
2answers
61 views

Is VeraCrypt encryption of VHDX correct?

I have created a dynamically expanding vhdx of 500GB to store my backups to - I have decided not to create a 500GB container due to time it would take to create one. I have encrypted the drive ...
1
vote
1answer
39 views

What threats are mitigated in drives encrypted by USB-SATA bridge?

Some external HDDs (notably, WD Essentials) are known to be encrypted by the USB-SATA bridge present in their case: Essentials drives are hardware encrypted. The USB-SATA bridge board is required ...
0
votes
0answers
105 views

What is the fast way to delete a VeraCrypt volume?

A software (such as BleachBit) can wipe data in a file. But it takes time. For a VeraCrypt volume, can we just wipe the volume header (including the backup header)? If so, how to do that? ...
0
votes
2answers
76 views

How does zeroing out/wiping your disk before encrypting it increase op-sec?

I'v been doing some research and it seems it is recommended to zero out / wipe / overwrite the disk before full disk encryption. Why would that be necessary even when encrypting the entire disk?
0
votes
2answers
195 views

Why should one bother encrypting the harddisk in linux if one can easily recover the root password?

If you have physical access to a machine, it's pretty straightforward to recover the root password thereby skipping the whole point of having an encrypted drive. Am I missing something here? EDIT: ...
1
vote
2answers
105 views

Creating a secure offsite backup at a friend's house

A friend has kindly allowed me to store a hard drive at his house to use as an offsite backup. I normally use rsync-backup to make backups of my home directory and have always done this (just being ...
3
votes
1answer
107 views

What's the point of encrypting /boot or / partition?

I'm not talking about full disk hardware encryption. I'm talking about software encryption. encrypting /home prevents your data after your laptop is stolen. As far as I understand, encrypting / and /...
3
votes
1answer
113 views

Is the Windows paging file safe in the encrypted partition?

I came across this setting called ClearPageFileAtShutdown. The setting is described here and says: If you are truly worried about security, boot Windows off a fully-encrypted drive. Then you needn'...
0
votes
1answer
228 views

How to secure (encrypt, password protect) external hard drive used with Windows 7 and 10? [closed]

How can I secure (encrypt, password protect) a portable external hard drive (500GB, NTFS) I use on a couple of different computers (not simultaneously): one computer is my work Windows 7 laptop, the ...
0
votes
0answers
38 views

Accessible data when hard-drive is encrypted

I recently acquired a new computer so I decided to try a few things, such as disk-encryption (fir the record, I installed Ubuntu 15.10, made only one partition, wiping everything that was here). I ...
2
votes
1answer
69 views

How well does FDE protect against disk firmware malware?

In early 2015 news broke that the NSA was installing firmware backdoors in many hard drives. I was wondering, if there was a BIOS and Hard Drive backdoor how well would full disk encryption protect ...
6
votes
1answer
116 views

Method for securely removing files from a solid state drive

I've thought of a method for securely erasing single files on a solid state drive. This method will work only if the drive is encrypted, and it will work even if someone cracks the encryption key for ...
-1
votes
1answer
98 views

How do I change LUKS backend to OpenSSL?

I know there is a way to do it, but I don't know how to do it: the default backend for LUKS is libgcrypt and I want to test it with the openssl cryptographic library. I was told that there is a ...
3
votes
2answers
131 views

How can I extract the encrypted master key from LUKS header?

I know that a LUKS partition has a plain-text header that stores many informations like master key (MK) digest, MK iterations of PBKDF2, information about the 8 key-slots etc. I also know that in the ...
5
votes
3answers
142 views

Full Disk Encryption and Network security

I very recently had a job interview in which the interviewer asked me how full disk encryption helped improve network security? Initially I believe they are seperate and not linked, FDE is local to ...
0
votes
1answer
129 views

Encrypting the System Infrastructure

The requirements are to Encrypt the data in our servers 'at rest' and the 'database' - in short the whole infrastructure. Threat Model - to protect a possible data-breach by an adversary (or from ...
0
votes
2answers
58 views

Is there a full-disk-encryption OR file-encryption solution where a trojan can NOT extract the secret key (e.g. from RAM)?

Is there a full-disk-encryption OR single-file-encryption solution like an operating system or a combination of devices or services ... that make sure that the master-decryption-key can NOT be ...
-1
votes
2answers
112 views

Which is more secure a full disk or file encryption? [duplicate]

There are probably two ways to encrypt your computer full disk encryption which completely locks down the computer between when it is off and when it has booted but after everything loads you computer ...
10
votes
3answers
565 views

what does LUKS header contain?

What is contained inside the LUKS header ? I know, the header has size of 2MB. Also, cryptsetup supports "detached header", where the header can be stored in a separate file. Thus, for example, I can ...
3
votes
3answers
167 views

File encryption on a solid state drive

It seems a lot of computers are switching to solid state drives, and one of the downsides of this is that it seems to make encryption of individual files basically useless, because when you encrypt a ...
3
votes
1answer
127 views

Laptops SSD: Hardware Encryption plus DM-Crypt/Luks - Security and Performance

I just bought a new Thinkpad t450s, and put a Samsung 850 pro in it. My Cpu supports AES-NI and the SSD supports hard-ware based encryption. My question is, is there any reason to do Both Hardware-...
4
votes
3answers
2k views

Samsung SSD 850 EVO. Best way to protect personal data against thiefs

I'm wondering what is the best way to protect my personal data stored on Samsung SSD 850 EVO in Linux? I did some research and found this. To set an ATA password, simply access the BIOS, navigate ...