Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).

learn more… | top users | synonyms

0
votes
1answer
103 views

How do I make my drive fullly protected with bitlocker?

Please note that I am new to BitLocker but I was able to set it up on my C drive. After doing this, I breifly searched on the web for ways around BitLocker and came up with two articles, Passware Hard ...
-4
votes
3answers
113 views

Is there a way to secure a Linux machine in a way that no one else (but me) can access its contents? [closed]

And I mean, even if someone tries rooting with a Live CD, even if one takes the HDD away and plug it in somewhere else, etc... I want to be able to give a client a machine with a service running, but ...
3
votes
2answers
64 views

Is VeraCrypt encryption of VHDX correct?

I have created a dynamically expanding vhdx of 500GB to store my backups to - I have decided not to create a 500GB container due to time it would take to create one. I have encrypted the drive ...
22
votes
5answers
23k views

Multi-boot with full hard drive encryption and pre-boot authentication

How would I set up a multiboot system which supports full hard drive encryption and pre-boot authentication. I have a system with Ubuntu, Windows 7, Windows XP, and I would like to install Red Hat. ...
1
vote
1answer
41 views

What threats are mitigated in drives encrypted by USB-SATA bridge?

Some external HDDs (notably, WD Essentials) are known to be encrypted by the USB-SATA bridge present in their case: Essentials drives are hardware encrypted. The USB-SATA bridge board is required ...
-1
votes
1answer
106 views

How do I change LUKS backend to OpenSSL?

I know there is a way to do it, but I don't know how to do it: the default backend for LUKS is libgcrypt and I want to test it with the openssl cryptographic library. I was told that there is a ...
7
votes
2answers
193 views

Can BTRFS provide authentication on an encrypted disk?

One of the problems of disk encryption is providing authentication. An attacker with access to the ciphertext can modify the ciphertext at will without consequence. Given, this isn't a likely attack, ...
44
votes
5answers
30k views

Is there a reason to use TrueCrypt over VeraCrypt?

I am looking to encrypt a few drives of mine, and my ONLY interest is security. It is OK if my VeraCrypt volumes are not compatible with TrueCrypt, and vice versa. There is a lot of talk about "...
0
votes
0answers
134 views

What is the fast way to delete a VeraCrypt volume?

A software (such as BleachBit) can wipe data in a file. But it takes time. For a VeraCrypt volume, can we just wipe the volume header (including the backup header)? If so, how to do that? ...
0
votes
2answers
78 views

How does zeroing out/wiping your disk before encrypting it increase op-sec?

I'v been doing some research and it seems it is recommended to zero out / wipe / overwrite the disk before full disk encryption. Why would that be necessary even when encrypting the entire disk?
3
votes
1answer
242 views

Windows Phone 8.1 Forensic Artifacts

I cannot find any potential tool or technique to do windows phone 8.1 forensics after lot of searching. I tried to make the image (.dd) of windows phone 8.1 with Linux commands but it fails, ...
0
votes
2answers
207 views

Why should one bother encrypting the harddisk in linux if one can easily recover the root password?

If you have physical access to a machine, it's pretty straightforward to recover the root password thereby skipping the whole point of having an encrypted drive. Am I missing something here? EDIT: ...
1
vote
2answers
116 views

Creating a secure offsite backup at a friend's house

A friend has kindly allowed me to store a hard drive at his house to use as an offsite backup. I normally use rsync-backup to make backups of my home directory and have always done this (just being ...
3
votes
1answer
107 views

What's the point of encrypting /boot or / partition?

I'm not talking about full disk hardware encryption. I'm talking about software encryption. encrypting /home prevents your data after your laptop is stolen. As far as I understand, encrypting / and /...
0
votes
1answer
152 views

Online vs offline backups [closed]

Up to this point I was using physical hard drives for backups, typically using dm_crypt as mentioned here. If online storage is used instead, and the provider cannot be trusted how much should the ...
2
votes
1answer
164 views

How safe is Apple's FileVault full disk encryption?

I have read about this encryption feature for OS X but want to know how secure it is compared to PGP.
3
votes
1answer
126 views

Is the Windows paging file safe in the encrypted partition?

I came across this setting called ClearPageFileAtShutdown. The setting is described here and says: If you are truly worried about security, boot Windows off a fully-encrypted drive. Then you needn'...
0
votes
1answer
277 views

How to secure (encrypt, password protect) external hard drive used with Windows 7 and 10? [closed]

How can I secure (encrypt, password protect) a portable external hard drive (500GB, NTFS) I use on a couple of different computers (not simultaneously): one computer is my work Windows 7 laptop, the ...
0
votes
0answers
38 views

Accessible data when hard-drive is encrypted

I recently acquired a new computer so I decided to try a few things, such as disk-encryption (fir the record, I installed Ubuntu 15.10, made only one partition, wiping everything that was here). I ...
0
votes
1answer
129 views

Encrypting the System Infrastructure

The requirements are to Encrypt the data in our servers 'at rest' and the 'database' - in short the whole infrastructure. Threat Model - to protect a possible data-breach by an adversary (or from ...
5
votes
3answers
147 views

Full Disk Encryption and Network security

I very recently had a job interview in which the interviewer asked me how full disk encryption helped improve network security? Initially I believe they are seperate and not linked, FDE is local to ...
10
votes
3answers
647 views

what does LUKS header contain?

What is contained inside the LUKS header ? I know, the header has size of 2MB. Also, cryptsetup supports "detached header", where the header can be stored in a separate file. Thus, for example, I can ...
0
votes
2answers
59 views

Is there a full-disk-encryption OR file-encryption solution where a trojan can NOT extract the secret key (e.g. from RAM)?

Is there a full-disk-encryption OR single-file-encryption solution like an operating system or a combination of devices or services ... that make sure that the master-decryption-key can NOT be ...
-1
votes
2answers
117 views

Which is more secure a full disk or file encryption? [duplicate]

There are probably two ways to encrypt your computer full disk encryption which completely locks down the computer between when it is off and when it has booted but after everything loads you computer ...
3
votes
3answers
181 views

File encryption on a solid state drive

It seems a lot of computers are switching to solid state drives, and one of the downsides of this is that it seems to make encryption of individual files basically useless, because when you encrypt a ...
3
votes
1answer
140 views

Laptops SSD: Hardware Encryption plus DM-Crypt/Luks - Security and Performance

I just bought a new Thinkpad t450s, and put a Samsung 850 pro in it. My Cpu supports AES-NI and the SSD supports hard-ware based encryption. My question is, is there any reason to do Both Hardware-...
4
votes
3answers
2k views

Samsung SSD 850 EVO. Best way to protect personal data against thiefs

I'm wondering what is the best way to protect my personal data stored on Samsung SSD 850 EVO in Linux? I did some research and found this. To set an ATA password, simply access the BIOS, navigate ...
2
votes
1answer
128 views

Can I use more than one encryption program to encrypt my computer files or will it cause conflicts?

I encrypted my Ubuntu Linux Operating System in the installation process using the default encryption in Ubuntu if my computer is encrypted with one program can it be encryption with another at the ...
0
votes
5answers
167 views

How to make sure nobody has read this!

Is there any computer/server which would allow me to get "guaranteed read access history" for files? For example, suppose I made a file with my plaintext passwords and simply wanted to make sure that ...
3
votes
1answer
176 views

Securely read encryption key from NVRAM of TPM 1.2

I have configured a disk encryption in linux using LUKS with TPM with secure boot. The encryption key is loaded from TPM from NV memory using command TPM_NV_ReadValueAuth. The problem is that it is ...
1
vote
0answers
36 views

Is there a point in cascade encryption? [duplicate]

I was reading the other day about some programs (ex: DiskCryptor), and with my limited knowledge of cryptography.. I started wondering about cascading encryptions (ex: AES-Twofish-Blowfish). Assuming ...
6
votes
1answer
145 views

Benefits of cloud based full disk encryption

Microsoft announced in May that it supported full disk encryption for VMs. They have recently merged a github branch into the Azure Powershell tools to enable this. The basic theory is that you ...
3
votes
1answer
299 views

How safe is the encryption offered by Mac OS X's Finder?

If you plug in a USB drive, open it in Finder and right-click the Finder window, you get the option to encrypt the drive. What methods does Finder use to encrypt the drive and how safe is it ...
22
votes
4answers
2k views

Is a file shredder/secure erase necessary when you have full disk encryption turned on?

The password manager that I use has instructions to migrate to a new file format: Export existing passwords to a temporary text file Change password manager to new format Import passwords from ...
4
votes
1answer
79 views

When using FDE, is there any OS/software allowing to get back from hibernation without requiring the disk encryption key?

This question is a spin-off the following one: Are encryption keys wiped from RAM before hibernate, or how to do it (Luks and Truecrypt). In this question, an answer quoted the following message (the ...
3
votes
1answer
85 views

FileVault and Sleeping mode

I have FileVault activated on 10.10. (Mid 2012 MacBook Pro - MPB) I relaized already that there are different sleep modes. autopoweroff and normal Standby. Whenever the MBP goes into Hypernate mode, I ...
3
votes
2answers
198 views

Most secure way to deliver web app for offline access [closed]

Having built a web app based on a PHP stack which is deployed on a server, I would like to have a way to provide access to it offline. There's a database of patients and appointments that needs to be ...
0
votes
1answer
298 views

Is it possible to recover a Diskcryptor volume password?

Must admit to being dumb: I have encrypted one partition from my external hard drive with the AES-Twofish-Serpent algorithm and used a key file with a password. My PC ran into a problem and now the ...
1
vote
0answers
157 views

Whole disk encryption on a tablet (that has no pre-boot keyboard) [closed]

I am researching methods to encrypt whole disk on tablet. I would like to encrypt my tablet that comes with Dual Boot OS, with pre-installed Windows 10 Home and Android 5.1. Let's start with what ...
0
votes
0answers
19 views

Disk Encryption - Extended Boot Record protection

I posted something like this on SuperUser some months ago, but thought I'd try the security focused site. Anyway, I am working on a Disk Encryption project using OPAL drives. The OS is Linux, and is ...
9
votes
3answers
296 views

My Samsung SSD password is case insensitive, how does this affect Full Disk Encryption?

I have a Samsung Evo 850 SSD, the 500GB model and it's supposed to benefit from Full Disk Encryption (FDE). Once you set a HDD password in the BIOS the FDE is supposed to kick in. However, I was ...
4
votes
2answers
857 views

What are the pros and cons of using yubikey with ssd hardware encryption?

I'm considering trying out yubikey and I've recently discovered that the (crucial m500) SSD I recently bought supports hardware encryption. I think it should be possible to use a yubikey to provide ...
2
votes
3answers
97 views

Encryption while logged in

If I'm using full disk encryption on my home computer, and it's online, are the hard drive contents encrypted when I'm logged in and using the machine (from the perspective of an online attacker - no ...
13
votes
3answers
2k views

Breaching security of a notebook with full disc encryption when screen is locked

I am using full disc encryption on my portable computer (running Ubuntu). The setup requires me to enter a password during the boot sequence to access fully encrypted hard drive. There is no ...
-2
votes
2answers
1k views

What is the most “out-of-the-box” secure OS for a home user? [closed]

This question will encompass several topics and may also include user opinion. Here is the question, and how I want you to qualify it: Question: What is the most "out-of-the-box" secure OS for a ...
6
votes
1answer
499 views

Are encryption keys wiped from RAM before hibernate, or how to do it (Luks and Truecrypt)

Using Linux, I have system and swap/hibernation partitions encrypted with LUKS, and data partitions encrypted with Truecrypt, and I am wondering when I put my laptop to hibernation if the encryption ...
4
votes
1answer
187 views

LUKS TPM disk encryption attacks

Is it possible, or are there any known attacks, to get the encryption key for disk encryption tpm-luks? (Linux LUKS using encryption key stored in TPM) I know that there are attacks like cold boot ...
2
votes
1answer
220 views

Explanation of the XTS Encryption Mode

I've found many information about operation modes such as ECB, CBC, CTR, OFB and CFB. These modes are described precisely, but I'm not able to find information about XTS. The Wiki article is the only ...
3
votes
2answers
3k views

TrueCrypt VS LUKS Bruteforce Resilience

I have been researching LUKS vs TrueCrypt topics -- my only concern is security, but most of the discussions I see focus around usability / interoperability . I know TrueCrypt has a bunch of nice ...
5
votes
2answers
16k views

Is Truecrypt still safe? [duplicate]

I want to fully encrypt a disk on Windows 7, but I don't trust Bitlocker and Truecrypt has announced it is not safe (also many rumours about NSA being able to decrypt it and it's better to avoid it). ...