Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).

learn more… | top users | synonyms

2
votes
1answer
225 views

Explanation of the XTS Encryption Mode

I've found many information about operation modes such as ECB, CBC, CTR, OFB and CFB. These modes are described precisely, but I'm not able to find information about XTS. The Wiki article is the only ...
3
votes
2answers
3k views

TrueCrypt VS LUKS Bruteforce Resilience

I have been researching LUKS vs TrueCrypt topics -- my only concern is security, but most of the discussions I see focus around usability / interoperability . I know TrueCrypt has a bunch of nice ...
5
votes
2answers
16k views

Is Truecrypt still safe? [duplicate]

I want to fully encrypt a disk on Windows 7, but I don't trust Bitlocker and Truecrypt has announced it is not safe (also many rumours about NSA being able to decrypt it and it's better to avoid it). ...
10
votes
2answers
4k views

How does Android filesystem encryption work?

I'm interested in encrypting my Android devices for security in the (hopefully will-never-happen) event of the phone being recovered by an unknown/unauthorized person. How does Android filesystem ...
1
vote
2answers
425 views

Is automatic login with full disk encryption a risk?

I use full disk encryption on Linux and wonder whether there is any security risk ob having automatic login on the Linux itself. In case somebody breaks the encryption of the drive, they can read all ...
11
votes
2answers
363 views

When do shared disks “leak” data to other VMs, and how is that mitigated?

Inspired by this answer, I would like to know what are some common threats and mitigation techniques used to prevent one VM from leaking data to another via the shared storage infrastructure. ...
3
votes
0answers
75 views

Securely encrypt drive, able to be decrypted independently of the OS [closed]

I need a software to encrypt drives like USB pens, disc drives, ... to securely store the data. But most of the software I've found to encrypt and decrypt drives is OS dependent. For example Windows ...
12
votes
3answers
10k views

Free/Libre software to handle TCG OPAL 2.0-compliant Self-Encrypting Drives (SEDs)?

I'm in search of a free/libre software that is able to handle OPAL (2.0)-compliant SEDs (i.e. manage the setting of Pre-Boot Authentification (PBA) environment, encryption keys...). It could be a ...
4
votes
1answer
150 views

Overwriting disk with random data vs. encrypted zeros

Most disk encryption guides recommend to overwrite the disk with random data before encryption, this is discussed here. However the time this takes with the "standard" source of random data can be ...
0
votes
1answer
953 views

I want to encrypt my SSD, should I still use TrueCrypt or Is there a better open source alternative? [duplicate]

Before anything I have say that I have no experience with cryptography, at all. Anyway, I have a laptop with Windows 10 and an SSD. I don't want to use BitLocker since I don't trust Microsoft in this ...
0
votes
0answers
83 views

2mb of unallocated space on encrypted external HDD

I recently set up my new computer with Truecrypt's system encryption and for storage I added two external 2TB drives. Those are initialized as MBR-drives on which I created one partition hosted ...
6
votes
1answer
195 views

Locking Linux system to work on certain hardware only

Is there a way of locking a Linux system to work with a specific (pre-defined) hardware only? I am developing a commercial product and want to make it a bit harder for someone to clone the whole ...
57
votes
2answers
40k views

How secure is Ubuntu's default full-disk encryption?

How secure is the encryption offered by ubuntu (using the disk utility)? What algorithm is used underneath it? If someone could at least provide a link to some documentation or article regarding that ...
7
votes
4answers
2k views

Can the FBI or government agencies decrypt my hardrive and/or force me to give them the password?

I have seen other TrueCrypt questions as well "Windows encryption with BitLocker" and "Mac OSX encryption with FileVault". Does the FBI/NSA or other government agencies have access to my data or can ...
2
votes
0answers
62 views

Is stacking encryption a good idea for a file system?

Somewhat related to a previous question, is stacking encryption under and via file systems a good idea? For example, dm-crypt for the device, and then eCryptfs or veracrypt for the file system. If ...
8
votes
2answers
5k views

Secure Boot on Microsoft Surface Pro 3 (or modern PCs)?

Got a Surface Pro 3 today (it's awesome BTW!) and noticed in it's EFI that it's got TPM enabled, "Secure Boot" enabled (unsure what such an umbrella/catch all term actually covers) And then in ...
1
vote
4answers
209 views

Can data be forensically retrieved off an encrypted hard drive?

If a hard drive is encrypted, is it still possible to retrieve data off of it? What about if the password to decrypt it is known? If this is the case, given that OSX now encrypts your drive by default,...
38
votes
9answers
7k views

Is full disk encryption on a server in a secure data center pointless?

I am having a debate with several people regarding how much protection full disk encryption provides. dm-crypt is being used to encrypt data which is required by my company to be encrypted at rest. ...
1
vote
1answer
84 views

How to reset (as it resets when pushed button on computer case) or immediately turn off PC (as if unplugged from power grid) from Windows?

I want to immediately reset (as it resets when I push reset button on computer case) or immediately turn off PC (as if unplugged from power grid) but with some method inside Windows. Maybe I can kill ...
0
votes
2answers
135 views

What are the advantages in using LUKS + hardware encryption on SSD?

I can't see what the advantages might be, but I think this would slow data transfer down while providing no extra protection. Am I right or am I overlooking something?
1
vote
0answers
160 views

A Solution for Block/File Encryption that is Corruption Resilient? [closed]

Question: What encryption features/(configuration options) are implemented that mitigate issues with device/block corruption? For example, if the external hard-drive gets dropped, the damaged ...
1
vote
4answers
305 views

What options exist for authenticated full-disk encryption?

Title says it all really. I'm toying with the idea of storing some disk images in "the cloud", but am concerned about the possibility of an attacker manipulating cipertext to do evil things once it's ...
7
votes
3answers
4k views

Is AES 256 secure enough for putting Backups to AWS or Dropbox?

How long would it take with current hardware to hack an Disk Image which was encrypted with AES 256? I ask because i want to backup personal files (contracts, tax-things, code, keys, private ...
4
votes
1answer
186 views

Android disk encryption

When is the data on an Android phone encrypted? I am assuming here that the device is configured to have full disk encryption enabled. Is it only encrypted when the device is powered off and ...
4
votes
2answers
285 views

Is storing encrypted data in a database futile?

The way I see it: there are two ways to encrypt data for a web app. 1) Store a single encryption key on the server, and use it to encrypt / decrypt data at runtime. The obvious issue here is that if ...
2
votes
1answer
440 views

Is FileVault 2 HIPAA compliant?

It looks to me like FileVault 2 uses AES 256 bit encryption for the desk. Does that mean that it meets the HIPAA "data at rest" standard? Is there something else I need to check about it?
1
vote
1answer
117 views

Attacks on encrypted computer?

I think we all know the fact that boot-harddrives can be encrypted. Windows usually uses Bitlocker (relying on AES-CBC) and Linux / Unix usually uses dm-crypt (relying on AES-CBC) and the rest of the ...
4
votes
0answers
256 views

Android wear, Tizen Encryption [closed]

Does Android Wear or Tizen for wearables offer hardware encryption? I have the Samsung Galaxy Gear S and I don't see an option, but was curious if it does it without any user intervention. I don't ...
1
vote
1answer
225 views

Storing encrypted information in database vs partition encryption

Trying to search for answers like Database encryption or filesystem encryption? but did not found what I need. My database contains confidential information. What is better? To store encrypted ...
3
votes
4answers
344 views

Securing Data at Rest in Android

Here's a situation. I am the author of an app that allows my customers to stream videos on their local android device. I also allow them to download the video and store it locally on their android ...
1
vote
2answers
257 views

How to handle disk encryption for remote connection?

I have at my workstation, an ubuntu 14.04 installation with full disk encryption. I now have to travel frequently for days and am planning to ssh into this machine from my chromebook to work remotely. ...
12
votes
6answers
488 views

How to protect against adversaries snatching booted laptops to defeat full disk encryption?

I read an article describing how FBI agents snatched Ross Ulbricht's laptop while it was running to defeat full-disk encryption: Two plainclothes FBI agents, one male and one female, walked up ...
1
vote
2answers
292 views

How can the Equation Group HDD firmware malware help bypass FDE?

There is currently a lot of discussion going on across the Internet about the "Equation Group" family of malicious hard disk drive firmware. One thing that has me wondering is the claim that ...
2
votes
1answer
295 views

What is susceptible to Kon Boot hack tool?

I just learned about Kon Boot (from this YouTube video) and am wondering, how is such a hack tool guarded against? In the video the presenter claimed he had full disk encryption but was still able to ...
93
votes
10answers
12k views

Prevention measures against laptop seizure at US borders

Since laptop and other electronic device seizures at US borders became legal without a warrant (including making copies of data), 7% of ACTE's business travelers reported being subject to a seizure as ...
3
votes
3answers
5k views

Completely encrypting virtual machine (for free) [closed]

I know in VMware workstation there's the option to encrypt a virtual machine. Is there a free way to do this without VMware workstation? I'm aiming for the fullest encryption and encapsulation ...
3
votes
1answer
96 views

Is there a full disk encyption software that shows different content depending on what password has beeen used? [closed]

I'm searching for a 256-bit full disk encryption software that allows me to access different content on the same disk with different passwords. Like: Password A opens partition 1, password B opens ...
2
votes
0answers
71 views

Finding Audit Reports and Results for Whole Disk Encryption Solutions

Due to TrueCrypt being pulled from the web even though it's been audited, I was asked to compare the audit of TrueCrypt against audits and information available for other products that do whole disk ...
0
votes
2answers
66 views

Can I add a new user to an unencrypted Windows installation from a Windows installation disk?

I recall hearing this before, the ability to boot up a Windows PC with an unencrypted hard drive using an installation disk/usb, and use the command line utility on the Windows installation disk to ...
1
vote
2answers
77 views

Are there any problems associated with using the same encryption key for multiple systems?

I have multiple computers, tablets, etc. If I have a very secure key, is there any problem with using it to encrypt all of my systems? I can remember 1 or 2 secure keys without writing them down. But ...
0
votes
1answer
253 views

Disk level encryption + compression performance?

What are pros and cons for using disk level encryption like VeraCrypt and then turning on compression on mounted (virtually decrypted) drive? It seams to me that this can even increase some ...
2
votes
1answer
302 views

Hashing algorithm for cryptsetup

I will encrypt my SSD using cryptsetup and I would like to know which hashing algprithm to use. First of all, cryptsetup benchmark: PBKDF2-sha256 262144 iterations per second PBKDF2-sha512 ...
0
votes
2answers
67 views

Full Disk Encryption, Single User System: User/Root Passwords required?

Are there any security issues of having no (or weak) passwords for user and root account on a single user system with full disk encryption (except boot partition)? Assuming no SSH server is running, ...
1
vote
2answers
773 views

Trusted Platform Module, daughterboard vs onboard TPM?

In many cases where a Trusted Platform Module (TPM chip) is employed, it is soldered directly onto the motherboard. Ostensibly the motherboard manufacturer is then solely responsible for integrating ...
3
votes
2answers
412 views

Is my data secure in locked screen if I use bitlocker

My SSD is currently encrypted by bitlocker right now. So let say if I leave my laptop on locked state (Win+L). Is it possible for someone to get access to my data? Few thing I noted are: If someone ...
1
vote
1answer
380 views

What's the value of data partition encryption for database files on a postgres database server?

We're in the process of rolling out a postgres based web app, and I'm trying to understand the value of encrypting the entire database. In postgres's case, the only way to do this is store the ...
0
votes
1answer
508 views

Why my files that Encrypted with EFS in Windows 8.1 shown in Linux ubuntu?

i Encrypted my files with EFS in windows 8.1 so i logged in ubuntu and without any warning , its shown my files actually not Exactly the file but shown the path of file and the name and i can ...
16
votes
2answers
5k views

BitLocker Drive Encryption NOT secure from drive mapping on network

I have a USB drive encrypted with BitLocker Drive Encryption. Each time I insert the drive in my USB port it works as expected, requires me to enter the password. Maybe I have the BitLocker Drive ...
1
vote
2answers
472 views

Initialization of a LUKS encrypted partition with cipher or /dev/urandom

I've created a few encrypted devices with LUKS and cryptsetup on Linux and am pretty comfortable with disk encryption in this regard. I've seen it mentioned in many different places that when setting ...
6
votes
0answers
4k views

OPAL Hardware Encryption [closed]

I recently bought a laptop which has OPAL compliant Self encrypting hard drive. I wanted to know how I could use/check the status of the Hardware Encryption features of an OPAL drive (windows, linux ...