Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).

learn more… | top users | synonyms

2
votes
1answer
112 views

How to wipe disks before encryption with dm-crypt if CBC or XTS is used internally?

First, please forgive me if I'm posting this question to the wrong community. Feel free to migrate this post to the right community if I was wrong. I'm quite new to whole disk encryption (but not ...
1
vote
1answer
39 views

What does “8.11 Encrypt or sign files into an archive” do?

I am going through the GnuPG manual and I want to encrypt a folder which, if my laptop was taken by anyone else, noone would be able to get access to for any of my information. This man page gives me ...
18
votes
0answers
776 views

Linux, TRESOR and XTS

I want to switch from using LUKS for full disk encryption to TRESOR. TRESOR tries to prevent cold boot attacks by storing the encryption key in the CPU's registers. It uses the kernel's crypto API for ...
3
votes
0answers
68 views

Method for securely removing files from a solid state drive

I've thought of a method for securely erasing single files on a solid state drive. This method will work only if the drive is encrypted, and it will work even if someone cracks the encryption key for ...
2
votes
0answers
53 views

Is stacking encryption a good idea for a file system?

Somewhat related to a previous question, is stacking encryption under and via file systems a good idea? For example, dm-crypt for the device, and then eCryptfs or veracrypt for the file system. If ...
2
votes
0answers
56 views

Finding Audit Reports and Results for Whole Disk Encryption Solutions

Due to TrueCrypt being pulled from the web even though it's been audited, I was asked to compare the audit of TrueCrypt against audits and information available for other products that do whole disk ...
1
vote
0answers
262 views

Mcafee endpoint encryption doesn't see previously encrypted partition after Windows 7 reinstallation

My partitions C and D were encrypted and Windows 7 was installed on C. I copied all important files to D and then changed harddrive controller from IDE to AHCI, removed C and created it again and then ...
1
vote
0answers
368 views

Full disk encryption on CentOS 6x - FIPS 140-2 compliant?

I'm using CentOS 6.5 on an existing server and am researching encryption options for compliance. SEDs are out since the controller in this older machine will not support them. That leaves full ...
0
votes
0answers
25 views

Accessible data when hard-drive is encrypted

I recently acquired a new computer so I decided to try a few things, such as disk-encryption (fir the record, I installed Ubuntu 15.10, made only one partition, wiping everything that was here). I ...
0
votes
0answers
16 views

Disk Encryption - Extended Boot Record protection

I posted something like this on SuperUser some months ago, but thought I'd try the security focused site. Anyway, I am working on a Disk Encryption project using OPAL drives. The OS is Linux, and is ...
0
votes
0answers
70 views

2mb of unallocated space on encrypted external HDD

I recently set up my new computer with Truecrypt's system encryption and for storage I added two external 2TB drives. Those are initialized as MBR-drives on which I created one partition hosted ...