Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).
5
votes
1answer
845 views
Device versus file based encryption in TrueCrypt for a flash drive?
Are there security tradeoffs to be considered in deciding between encrypting an entire flashdrive with TrueCrypt versus storing a file encrypted container? The security goal is to be immune to the ...
2
votes
2answers
180 views
Advice on buying an encrypted disk
How do I find an encrypted disk to buy?
What factors should I be aware of in selecting one?
Is there any proof that buying one likely to draw any attention?
How do I know there's not a backdoor?
...
4
votes
4answers
443 views
Are backups of truecrypt volumes with different pass phrases a security risk?
Lets say that I periodically change the pass-phrase on a truecrypt volume. The volume is regularly backed up, so my backup system has many copies of that volume, many of which have a different volume ...
4
votes
2answers
498 views
What cryptographic module does Sql Server 2008 use to run in Fips 140-2 compliant mode by default?
One can configure Sql Server 2008 to run in FIPS 140-2 compliant mode, in the same manner as running Bitlocker in FIPS 140-2 compliant mode. Which is to activate FIPS 140-2 compliant mode in the ...
2
votes
2answers
167 views
What does “if the Crypto Officer performs this operation” mean in this BitLocker security policy?
In the document Windows Server 2008 R2 BitLocker™ Drive Encryption Security Policy For FIPS 140-2 Validation, in the section 6.1.2 FIPS 140-2 Security Rules bullet point 2 it says:
BitLocker™ will ...
6
votes
2answers
682 views
Is BitLocker on a virtual machine still FIPS 140-2 compliant?
BitLocker can be used as a cryptographic module to fulfill FIPS 140-2 security level 1 compliance.
In a common setup, USB thumb drives can be used to unlock drives encrypted by BitLocker on startup.
...
0
votes
3answers
687 views
Why do some LUKS tutorials mention overwriting the partition with random data?
On a lot of tutorials on luks encryption, people say to override the partition with random data, so that data is not recoverable after encryption. I don't understand that. Will the random data be ...
6
votes
1answer
1k views
loop-aes or dm-crypt for linux hard encryption?
loop-aes and dm-crypt are both used by partman-crypto for linux hard encryption, but dm-crypt needs no patch to kernel and is more supported.
dm-crypt keeps it's key on first hard block, is it a ...
3
votes
1answer
2k views
Is it possible to auto mount entire truecrypt drive
Truecrypt can easily automount if your drive is not entirely encrypted and your data is a standard file. However I have my entire removable storage encrypted and so to the OS, it is seen as an ...
3
votes
3answers
253 views
Encrypting an email server's local drives or filesystems
Planning to deploy a remote hosted mailer (Zimbra based) I need to make sure the local data on the machine is encrypted. Currently, the plan is to use the built in LUKS to encrypt /opt/zimbra and ...
0
votes
0answers
431 views
Ubuntu home folder encryption, compared with file vault [closed]
I want to know if there are any limitations that are imposed on you when you enable home folder encryption in ubuntu.
Example, in the mac file vault, at least on Snow Leopard, time machine, and ...
5
votes
3answers
901 views
Is it possible to infer that a hidden truecrypt partition is likely to be present
Truecrypt contains a feature that let's you create a hidden volume. It's said that it can't be proven if a hidden volume exists. However, is it possible to infer from the state of the data on the ...
7
votes
4answers
2k views
What does Amazon's S3 Server-side encryption protect against?
Amazon's S3 storage service offers server-side encryption of objects, automatically managed for the user (Amazon's Documentation). It's easy to enable so I'm thinking "why not?", but what kind of ...
2
votes
2answers
332 views
How to make a certificate encrypted flash drive?
I was wondering if it possible to encrypt a flash drive (or any other external medium) using certificates instead of a password.
The idea is to have a number of encrypted pendrives that can be used on ...
4
votes
1answer
302 views
How to encrypt an entire portable HDD, so that it cannot be read/written without the password for it?
I use a portable USB drive (Seagate FreeAgent Go Flex) to keep all my personal stuff, and though the HDD company does offer a password scheme to control access to it, that would work only on windows, ...
6
votes
2answers
562 views
Do Flash memory (SSD) architecture impacts encryption techniques?
I'm working on encryption techniques on SSD's and my question is: does the erase before write architecture of SSD's has anything to do with the encryption technique?
What are the problems I might ...
2
votes
1answer
279 views
NFS and encrypted File systems
Can a NFS mounted file system be used for encrypted /home, and can the encrypted Home Directories be mounted/decrypted for the user when they login?
4
votes
6answers
670 views
Is there any asymmetrically encrypted file system?
Is there a file system providing a directory where everybody can write, but only the directory owner can read the files? In theory it could be done by encrypting using the public key while writing, ...
3
votes
2answers
1k views
Truecrypt hidden partition deleted original drive data
Help! I created a hidden partition within a harddrive encrypted using truecrypt, and instead of creating a second partition, it seems to have deleted all of my data instead. what did i do wrong? I ...
5
votes
1answer
1k views
Using TPM for full disc encryption?
E.g.: Can I make a better full disc encryption with e.g.: LUKS using the TPM? How?
4
votes
2answers
124 views
Can my /boot be compromised if I Suspend my notebook?
So if I use e.g.: LUKS, and I always suspend my notebook, then are there any methods to modify the unencrypted /boot? It contains the kernel!
Or if someone tries (evil maid) to modify the /boot then ...
2
votes
3answers
101 views
Could an Encrypted VG/Image compromised?
I mean if I encrypt my ""full system"" so that everything (besides the /boot) is in an encrypted VolumeGroup (Linux).
So I store my /boot on a flash drive, thats always next to me.
Q: can the ...
8
votes
3answers
863 views
What FDE (with hardware encrypted drives) for OS X works?
I'm trying to get all of our laptops doing FDE (as I'm sure lots of you are), and I've run into a problematic spot. Our Windows and Linux laptops are Dells, and they have some good BIOS integration ...
6
votes
6answers
511 views
How to protect data on a thumb drive
So I had a scare this past week (couldn't find my thumb drive) and figured I'd better put in some protection on my thumb drive.
What is the best way to encrypt the data on the thumb drive? I am a ...
