Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).

learn more… | top users | synonyms

2
votes
2answers
169 views

What happens after setting up HDD password?

I am wondering what happens when I set HDD password in my laptop (Samsung with ssd). I mean a given case. I have been having working system without any password. Then one day I decide to set up HDD ...
3
votes
2answers
138 views

Can full disk encryption make malware recovery more difficult?

Let us say that we have a computer with a fully encrypted disk. If it gets infected with malware, does this make it more difficult to use a LiveCD or other rescue option to clean it or restore it? It ...
0
votes
1answer
253 views

Securely wipe external drive with Windows only [duplicate]

Consider following 2 disk wipe procedures, using only vanilla Windows installation: First do a quick-format to make the disk appear empty, then do one of these: Just do full format of the disk. ...
37
votes
5answers
9k views

Are there any reasonable TrueCrypt forks?

Unfortunately, TrueCrypt may have been discontinued yesterday. I use LUKS on Linux, but I liked the fact that with TrueCrypt I had a portable solution across Windows, Mac, & Linux. TrueCrypt ...
5
votes
4answers
4k views

TrueCrypt -vs- MacOS encrypted sparse image - equally secure? Other alternatives?

I'm currently trying to find my personal best solution for storing passwords and other sensible data. Recently I've used 1Password on iPhone and Mac but I'm not really satisfied with its predefined ...
1
vote
1answer
901 views

Encrypted LVM as an alternative to TrueCrypt

In a weird announcement on the TrueCrypt page it says that the software is unsafe so we should migrate to BitLocker. If it is a prank it's sure not funny especially when it comes to data. Since I ...
6
votes
1answer
1k views

Are there other ways to encrypt files other then TrueCrypt and BitLocker [closed]

I don't trust BitLocker. Probably backdoored and relies on TPM which can be hacked according to DEFON. It also does not allow for hidden partitions or other advantages like TrueCrypt. With TrueCrypt ...
6
votes
7answers
6k views

Physical computer security, how to disable USB ports when the computer is 'locked'?

Lets say my PC & server is in an environment where a theoretical attacker has physical access to the machine while I'm not there. Now the data is encrypted on the hard drive with TrueCrypt. ...
2
votes
1answer
601 views

Is Dual Factor possible during boot with whole disk encryption on Mac FileVault 2

Mac FileVault 2 is the default disk encryption for newer Macs that occurs in the EFI pre-boot phase. The challenge here is that most smartcard drivers are loaded after the OS loads. Is anyone aware ...
0
votes
2answers
181 views

I need two separate hidden volumes in disk encryption. What are my options? [closed]

C: for system (Windows) D: for my files Makes much more sense to me than packing everything on the same volume, right? Is there a disk encryption utility capable of doing this? I don't know much ...
0
votes
1answer
148 views

Secure distributed storing and querying of [medical] data?

Comparing ways of distributing and securely storing and querying structured and schemaless data. Currently I am using MongoDB, but am looking into (Postgres|MySQL)&CryptDB, Cassandra and others. ...
0
votes
2answers
246 views

Ubuntu LVM LUKS Encryption

I've been reading about Ubuntu LVM Encryption, and I understand that it supports the use of Linux Unified Key Setup (LUKS) during installation, which is a block level encryption that encrypts the ...
2
votes
1answer
185 views

Decrypting FDE in Disaster Recovery

I saw a hot network question on SE, about Workplace Ethics - Do I give my password at work to my old boss after quitting?. My initial response (as are the answers in that question) is always NO. The ...
1
vote
2answers
66 views

What is the security benefit of Per-File Encryption key architecture?

Are there any security benefits to having a different key(it is encrypted by a master key and that encrypted key is included in the metadata for the file) used to encrypt each file versus just one key ...
2
votes
1answer
336 views

Field-level encryption vs disk encryption for PCI compliance

We are in the process of setting up a PCI compliant server (with Firehost's help). We are using MongoDB as our primary database. I am having some concerns about the encryption, though. Are there any ...
4
votes
2answers
4k views

TrueCrypt vs “native” whole-disk encryption on Linux?

When preparing to encrypt an entire partition, is it better to rely on "native" whole-disk encryption (eg following this tutorial), or an external tool like TrueCrypt? The wikipedia article comparing ...
2
votes
2answers
184 views

How to encrypt entire HDD without any password prompts?

Before you dismiss this as silly, let me explain :) The only purpose of this encryption is to make the data inaccessible if the drive breaks down and I want to send it off for warranty replacement. ...
4
votes
0answers
2k views

OPAL Hardware Encryption on Linux [closed]

I recently bought a laptop with an SSD which complies with the Self encrypting Drive OPAL specification. I was offerd to setup encryption while installing Linux, but my guess was that this was going ...
16
votes
4answers
1k views

Is it possible to boot an encrypted server remotely and securely?

Imagine you have a server that is at a location which is not trustworthy. People might have physical access to the machine who are not supposed to look at the data stored on it. In this scenario I ...
1
vote
1answer
164 views

What does hardware full disk encryption imply?

I read the wikipedia article and few others, however I still don't have some things clear. The main question would be what does hardware full disk encryption imply for the user, however I have more ...
2
votes
1answer
165 views

Self-encrypting drives, certification for tamper-protection?

Consider a drive with Opal 2.0 support that works with Microsoft Bitlocker's "eDrive" feature. In this case, supposedly, the encryption key never leaves the disk (which might increase security, ...
1
vote
2answers
183 views

How to use ESSIV to avoid seeing repeated patterns?

I'm trying to implement an encrypted file-system. The file-system consists of 512-byte sectors. I encrypt/decrypt the contents of a sector as follows: Compute the SHA256 sum of the user password. ...
1
vote
1answer
255 views

Trusted Platform Module, daughterboard vs onboard TPM?

In many cases where a Trusted Platform Module (TPM chip) is employed, it is soldered directly onto the motherboard. Ostensibly the motherboard manufacturer is then solely responsible for integrating ...
1
vote
2answers
75 views

Hardware Dependent Encryption [closed]

I am looking for a Linux based encryption system (like Truecrypt) that has the ability to do the following: Encrypt a partition or external drive that it can only be read from the same computer ...
9
votes
7answers
2k views

Encrypt Virtual Machine in the cloud

I am no expert when it comes to security in virtualized environments. However a problem I always saw is: What happens if the host OS gets hacked and an attacker gains administrative privileges? How ...
8
votes
7answers
2k views

Is there any asymmetrically encrypted file system?

Is there a file system providing a directory where everybody can write, but only the directory owner can read the files? In theory it could be done by encrypting using the public key while writing, ...
9
votes
3answers
1k views

Is it possible to prevent a physical attack on full disk encryption?

I've been researching into some methods to ensure that disk encryption keys can't be stolen, and one that I've come across is called TRESOR. With this kernel patch, you can create a partition that is ...
1
vote
3answers
1k views

Decrypting a Truecrypt system - how to make deleted files unrecoverable? [duplicate]

If I have full disk encryption on my computer and want to decrypt it, but want to delete senstive documents before decrypting, how do I ensure they are unrecoverable post-decryption? Edit: I suspect ...
1
vote
1answer
183 views

What is the strength of the key derivation function on Android device encryption?

What is is strength of the key derivation? Specifically, how many milliseconds or microseconds would it take a desktop computer to check a guessed password to see if it is a match? I am aware this ...
2
votes
0answers
1k views

What is a self-contained cross-platform encryption for USB drive? [closed]

I'm trying to find self-contained encryption solution for USB drives while at the same time being platform independent. For example, Windows' BitLocker only works on Windows and not on OS X or Linux. ...
2
votes
1answer
47 views

“holding open” encrypted home with local ssh

I have a couple of machines that I use for purely automated stuff, with home directories encrypted using ecryptfs. So even if the machine is powered on, those directories aren't decrypted unless that ...
3
votes
2answers
406 views

What are the pros and cons of using yubikey with ssd hardware encryption?

I'm considering trying out yubikey and I've recently discovered that the (crucial m500) SSD I recently bought supports hardware encryption. I think it should be possible to use a yubikey to provide ...
-1
votes
1answer
117 views

physical access proof smart card for disk encryption [closed]

Current full disk encryption on mobile devices rely on low entropy passwords like PIN numbers or pattern locks. Being able to use a smartcard with such mobile devices is a tempting idea. I know that ...
2
votes
1answer
215 views

Is it possible for me to extract my own AES disk encryption key?

I use Check Point Full Disk Encryption, but hope that this question can be answered generally. Is it possible for me to get, or extract, my own 256-bit AES key? By the way, I don't use any special ...
6
votes
1answer
3k views

loop-aes or dm-crypt for linux hard encryption?

loop-aes and dm-crypt are both used by partman-crypto for linux hard encryption, but dm-crypt needs no patch to kernel and is more supported. dm-crypt keeps it's key on first hard block, is it a ...
20
votes
4answers
16k views

Multi-boot with full hard drive encryption and pre-boot authentication

How would I set up a multiboot system which supports full hard drive encryption and pre-boot authentication. I have a system with Ubuntu, Windows 7, Windows XP, and I would like to install Red Hat. ...
7
votes
1answer
183 views

Is there a way to put a self destroy password on Ubuntu disk encryption?

Is there a way to put a self destroy password on ubuntu disk ecncryption ? Or self destroy after n bad password attempt ? When someone ask you to entre the password, you can enter the "self destruct" ...
0
votes
1answer
279 views

Read-Only USB thumb as Linux boot encryption authentication [closed]

I would like to have a physical key to decrypt Linux machines at boot. This is just an idea and I would like to know if there are already projects or established methods to achieve this. Let me ...
1
vote
1answer
103 views

Is it safe to do full disc encryption without ECC DRAM?

Our institution requires disc encryption on laptops, but I'm uneasy about using full disc encryption without SECDED ECC DRAM. Is it safe to use full disc encryption on laptops with unreliable memory? ...
5
votes
4answers
363 views

How do you guarantee that you don't lose a keyfile?

I am toying with the idea of adding keyfiles to various things that I encrypt. However what's been keeping me from adopting them is guaranteeing that I don't lose the keyfile while still keeping ...
3
votes
1answer
724 views

Recognizing PGP-encrypted disks

I am studying various disk encryption schemes (such as PGP, MS Bit Locker, BestCrypt and TrueCrypt) on my Windows OS. I am interested to know how an encrypted partition/disk/file with a particular ...
1
vote
1answer
281 views

Does any PXE/Full disk encryption password concept like this exist?

This question may just show a distinct misunderstanding of things on my part, and I apologize if it is, but I thought I'd put it out here as I don't know where else to ask. I've been thinking about ...
2
votes
1answer
81 views

Is the following environment contained?

I would like to make sure that my working environment is contained (prevent data leaks meaning I don't want temp file or traces from files I have worked on). I am about to create a usb key with the ...
-1
votes
1answer
705 views

The Pirate Bay's new Hosting Architecture [closed]

I read this article a moment ago: http://www.geek.com/news/the-pirate-bay-is-now-hosted-anonymously-in-the-cloud-1522725/ But it was very light on details. Is an architecture as described in this ...
7
votes
4answers
2k views

How effective is iPhone 3GS and 4 device-at-rest encryption?

My primary goal is to protect Activesync-based communication from being copied or stolen from an offline device. In that context how effective is iPhone 3GS and 4 encryption?
2
votes
2answers
140 views

Is there a hard-to-spoof identifier associated with a physical hard disk

I would like to salt the pass phrase with the drive id in such a way that, if the disk were imaged to a new drive with a different id, (e.g. by a government forensics specialist) then the image would ...
8
votes
5answers
608 views

Should a full disk encrypted hard drive on a live system be considered encryption at rest?

If you are specifying requirements that a certain classification of data be encrypted while at rest (on storage), should the requirement be considered met if the data is stored on an live (turned on) ...
0
votes
2answers
527 views

In TrueCrypt Hidden / Normal overriding?

If I have a normal TrueCrypt volume, and I want to create a Hidden volume inside of it, how do I stop the 2 from overriding each other? Or do I just have to manually make sure the inner volume does ...
9
votes
3answers
493 views

Erasing a hard-disk, encrypting it as alternative?

I was pondering about this, sometimes people ask me to erase data on their drive. So I use a shredding program, which takes a long time. However what if instead of shredding all the files, I'd just ...
2
votes
2answers
292 views

Pre / post disk encryption wipe?

When dealing with full disk encryption a lot of utilities I've worked with will provide the option to fill the disk with random data to make distinguishing the encrypted contents harder to identify. ...