Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).

learn more… | top users | synonyms

9
votes
3answers
932 views

Is it possible to prevent a physical attack on full disk encryption?

I've been researching into some methods to ensure that disk encryption keys can't be stolen, and one that I've come across is called TRESOR. With this kernel patch, you can create a partition that is ...
2
votes
1answer
98 views

Would encryption of RAID6 arrays of SSDs be secure?

Given the uncertainty about data being left in the clear, I've hesitated to use SSDs where I need full-disk encryption. While some SSDs employ hardware encryption, they're quite expensive, and there ...
1
vote
3answers
1k views

Decrypting a Truecrypt system - how to make deleted files unrecoverable? [duplicate]

If I have full disk encryption on my computer and want to decrypt it, but want to delete senstive documents before decrypting, how do I ensure they are unrecoverable post-decryption? Edit: I suspect ...
1
vote
1answer
169 views

What is the strength of the key derivation function on Android device encryption?

What is is strength of the key derivation? Specifically, how many milliseconds or microseconds would it take a desktop computer to check a guessed password to see if it is a match? I am aware this ...
2
votes
0answers
1k views

What is a self-contained cross-platform encryption for USB drive? [closed]

I'm trying to find self-contained encryption solution for USB drives while at the same time being platform independent. For example, Windows' BitLocker only works on Windows and not on OS X or Linux. ...
2
votes
1answer
46 views

“holding open” encrypted home with local ssh

I have a couple of machines that I use for purely automated stuff, with home directories encrypted using ecryptfs. So even if the machine is powered on, those directories aren't decrypted unless that ...
3
votes
2answers
333 views

What are the pros and cons of using yubikey with ssd hardware encryption?

I'm considering trying out yubikey and I've recently discovered that the (crucial m500) SSD I recently bought supports hardware encryption. I think it should be possible to use a yubikey to provide ...
-1
votes
1answer
109 views

physical access proof smart card for disk encryption [closed]

Current full disk encryption on mobile devices rely on low entropy passwords like PIN numbers or pattern locks. Being able to use a smartcard with such mobile devices is a tempting idea. I know that ...
2
votes
1answer
196 views

Is it possible for me to extract my own AES disk encryption key?

I use Check Point Full Disk Encryption, but hope that this question can be answered generally. Is it possible for me to get, or extract, my own 256-bit AES key? By the way, I don't use any special ...
1
vote
1answer
214 views

Trusted Platform Module, daughterboard vs onboard TPM?

In many cases where a Trusted Platform Module (TPM chip) is employed, it is soldered directly onto the motherboard. Ostensibly the motherboard manufacturer is then solely responsible for integrating ...
3
votes
2answers
899 views

How To Recover EFS Cert From Backup?

I made a backup of the old Win 7 Pro then did a clean install. But I forgot to export my EFS encryption certificate, so when after I restored the encrypted files from backup I could no longer access ...
7
votes
1answer
176 views

Is there a way to put a self destroy password on Ubuntu disk encryption?

Is there a way to put a self destroy password on ubuntu disk ecncryption ? Or self destroy after n bad password attempt ? When someone ask you to entre the password, you can enter the "self destruct" ...
0
votes
1answer
260 views

Read-Only USB thumb as Linux boot encryption authentication [closed]

I would like to have a physical key to decrypt Linux machines at boot. This is just an idea and I would like to know if there are already projects or established methods to achieve this. Let me ...
1
vote
1answer
98 views

Is it safe to do full disc encryption without ECC DRAM?

Our institution requires disc encryption on laptops, but I'm uneasy about using full disc encryption without SECDED ECC DRAM. Is it safe to use full disc encryption on laptops with unreliable memory? ...
10
votes
2answers
3k views

Free/Libre software to handle TCG OPAL 2.0-compliant Self-Encrypting Drives (SEDs)?

I'm in search of a free/libre software that is able to handle OPAL (2.0)-compliant SEDs (i.e. manage the setting of Pre-Boot Authentification (PBA) environment, encryption keys...). It could be a ...
1
vote
1answer
256 views

Does any PXE/Full disk encryption password concept like this exist?

This question may just show a distinct misunderstanding of things on my part, and I apologize if it is, but I thought I'd put it out here as I don't know where else to ask. I've been thinking about ...
2
votes
1answer
79 views

Is the following environment contained?

I would like to make sure that my working environment is contained (prevent data leaks meaning I don't want temp file or traces from files I have worked on). I am about to create a usb key with the ...
-1
votes
1answer
630 views

The Pirate Bay's new Hosting Architecture [closed]

I read this article a moment ago: http://www.geek.com/news/the-pirate-bay-is-now-hosted-anonymously-in-the-cloud-1522725/ But it was very light on details. Is an architecture as described in this ...
2
votes
2answers
133 views

Is there a hard-to-spoof identifier associated with a physical hard disk

I would like to salt the pass phrase with the drive id in such a way that, if the disk were imaged to a new drive with a different id, (e.g. by a government forensics specialist) then the image would ...
2
votes
2answers
275 views

Pre / post disk encryption wipe?

When dealing with full disk encryption a lot of utilities I've worked with will provide the option to fill the disk with random data to make distinguishing the encrypted contents harder to identify. ...
1
vote
0answers
124 views

Formatting before encrypting [closed]

Is formatting a device before encrypting more secure as opposed to encrypting the device without a formatting?
37
votes
2answers
19k views

How secure is Ubuntu's default full-disk encryption?

How secure is the encryption offered by ubuntu (using the disk utility)? What algorithm is used underneath it? If someone could at least provide a link to some documentation or article regarding that ...
5
votes
5answers
575 views

Encrypted disk at risk if laptop stolen while turned on but locked

If I have a laptop with full disk encryption it's turned on, the screen is locked and it gets stolen. How would an attacker get my data? It's not encrypted at the moment because it's turned on but the ...
6
votes
2answers
6k views

Ubuntu LVM Encryption

I recently installed Kubuntu and I noticed the option for having an encrypted LVM. The behavior suggests it's full disk encryption since I need to put in a password before I can boot. This article and ...
5
votes
2answers
528 views

Is it nescecary to wipe and reset the MBR when laptop changes owners even if full disk encryption is used?

Where I'm currently working we use full disk encryption and after a laptop transfer owners we use a secure erasure program. This is quite time consuming and I'm wondering is it necessary? For the disk ...
3
votes
2answers
282 views

Is it possible to share BitLocker decryption keys between multiple TPMs?

The TPM specification mentions that some keys are migratable, i.e. transferable to another TPM. Does this mean that it would be possible to share (transfer) a BitLocker decryption key between several ...
-5
votes
2answers
4k views

Is it possible to encrypt a virtual machine using virtualbox? [closed]

Is it possible to encrypt a virtual machine using virtualbox, and not leave accessible to the users of the machine where it hosted, and not allow any file to be extracted it with some program ? The ...
10
votes
2answers
2k views

How to encrypt data on the server?

I have some data on the server (running Linux) which needs to be encrypted (company policy). This data is being served by an application running on this machine. Now I consider a few possibilities: ...
3
votes
1answer
675 views

Recognizing PGP-encrypted disks

I am studying various disk encryption schemes (such as PGP, MS Bit Locker, BestCrypt and TrueCrypt) on my Windows OS. I am interested to know how an encrypted partition/disk/file with a particular ...
6
votes
2answers
389 views

Full-disk encryption and theft mitigation?

Is it possible to combine the security of full-disk encryption (e.g. Truecrypt) with the honeypot-like performance of anti-theft tools (e.g. Prey)? In other words, is it feasible to have both strong ...
3
votes
1answer
229 views

Remote System Administration of an Encryption-Switch-Encrypted Infrastructure

I can't seem to find a decent explanation anywhere of the practicalities of remote system administration (e.g. SSH) of an encryption-switch-encrypted SAN-stored infrastructure. The environment will ...
1
vote
1answer
846 views

Is there a way to encrypt an existing ext4 filesystem with already data on it? [duplicate]

I have a big drive with already data on it, that I would like to encrypt (ext4). Is there a way to encrypt that disk without having to move the data to another drive first? Or maybe, this would be ...
4
votes
1answer
241 views

Accessing hidden partitons

I have two disks. They're both bootable and run Linux. When I physically mount the disks, I can see scsi devices get added. /dev/sdb and /dev/sdc. However the partitions are not detected. I can't see ...
7
votes
5answers
562 views

Should a full disk encrypted hard drive on a live system be considered encryption at rest?

If you are specifying requirements that a certain classification of data be encrypted while at rest (on storage), should the requirement be considered met if the data is stored on an live (turned on) ...
3
votes
2answers
372 views

Is it safe to suspend my computer if I'm using encrypted hard drive?

I'm using disk encryption to protect my data and sensitive information - but only one partition. I used to suspend my computer instead of shutting it down because of very fast resume and very low ...
1
vote
1answer
231 views

Dual Linux System with Whole Disk Encryption

(This is a continuation of my question on Ask Ubuntu.) My goal is I want to have a Xubuntu/Ubuntu dual boot, with a catch - I want the disk to be fully encrypted with the dm-crypt (native supplied) ...
1
vote
1answer
834 views

SSD enrcyption with ATA password - AHCI mode?

I have seen articles advising that in order to make the most of an SSD, it should be connected in AHCI mode. Some SSDs allow the ATA password to encrypt the encryption key so my question is this - ...
3
votes
2answers
246 views

Remedy for not having filled the disk with random data?

Filling a large HDD with /dev/urandom prior to encryption can be extremely slow (even with netcat, multiple instances in parallel, etc) and for this reason I'm sure a lot of users skip this advice ...
3
votes
1answer
200 views

Is this a security risk for us to lost TPM or others to access to reset BIOS ?

In the previous post Physically secure the system case it is recommended to physically protect the system. But in case stolen laptops where intruder have physical access to TPMs. What are the security ...
6
votes
2answers
2k views

SSD Encryption - Difference between models

I understand that most SSDs which support encryption usually encrypt all data, but that only some actually encrypt the encryption key with a user BIOS password. This means that the models which don't ...
3
votes
1answer
3k views

Full Disk Encryption within a VM, how secure is it?

Just a quick query on basically how to secure a VM for a home computer for a number of uses (such as securing work related data in a good enough fashion whilst in its native environment). I'm not ...
3
votes
3answers
2k views

Securing my USB flash drive with Truecrypt and FreeOTFE

I want to know if I encrypt my flash with Truecrypt "Encrypt a non-system partition/drive" option and then mount it and then make a container with FreeOTFE on the Truecrypt encrypted drive and then ...
2
votes
1answer
546 views

Is Dual Factor possible during boot with whole disk encryption on Mac FileVault 2

Mac FileVault 2 is the default disk encryption for newer Macs that occurs in the EFI pre-boot phase. The challenge here is that most smartcard drivers are loaded after the OS loads. Is anyone aware ...
0
votes
1answer
1k views

Another method to erase hard drives securely? [duplicate]

Possible Duplicate: Use truecrypt to make data unrecoverable The other day I was thinking, and I looked up this question because I was pretty sure a question similar to this had been asked. ...
1
vote
1answer
110 views

Determing and deciphering an encrypted drive (knowing the password)

I have a Western Digital external drive (my passport essential 500GB), which comes with a little software that allows you to encrypt your data (which I did sometime ago). Unfortunately, this software ...
3
votes
2answers
862 views

Possible implementations of networked+encrypted filesystem

Is it possible to implement scheme where remote server just share its filesystem (or resizable container file in it) and it's locally encrypted and mounted? And what is best practical method? (On ...
9
votes
7answers
2k views

Encrypt Virtual Machine in the cloud

I am no expert when it comes to security in virtualized environments. However a problem I always saw is: What happens if the host OS gets hacked and an attacker gains administrative privileges? How ...
5
votes
1answer
967 views

Can a Bitlocker To Go user pin be brute forced?

I have a external hard disk and protected a partition on it with Bitlocker To Go. I printed the recovery code but I lost it. I can't remember the user PIN either. If I could only know the first ...
3
votes
1answer
513 views

Does setting a firmware password add security if FileVault 2 is enabled?

On an up-to-date OS X computer with FileVault 2 (whole-disk encryption, minus the recovery partition), is any security gained by setting a firmware password, as well?
4
votes
2answers
4k views

What does HP DriveLock do to your password?

While looking at various hard drive encryption methods, I discovered that HP's "DriveLock" is not quite the standard ATA security system. While I did get confirmation from HP that it does indeed use ...