Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).

0
votes
0answers
32 views

Does using a 256 bit BitLocker key give you closer integration with hardware?

Reading TrueCrypt vs BitLocker I found the following line in the answer of user71148: Switch to 256-bit BEFORE encrypting your hard drive. Once you do that, BitLocker is safer for boot partition ...
0
votes
1answer
27 views

Startup PIN security considerations for BitLocker

I plan to implement Bitlocker encryption on my devices, but I wonder how to achieve the highest possible security against offline attacks. I understood the following: I can enable TPM based ...
1
vote
1answer
124 views

Secure way to wipe an entire SSD? [duplicate]

I've read some articles and they appear to suggest the idea of using the dd command to wipe an entire SSD before encrypting it. The drive in question is a Samsung 970 EVO PCIe NVMe V-NAND M.2 2280 ...
-1
votes
0answers
15 views

Free OTFE Recycle Bin windows 7 [on hold]

When i use freeotfe in windows 7 recycle bin doesn't work ? recycle bin is not supported in windows 7 for freeotfe and delete files permanently when i mount encrypted volume. I use truecrypt and it ...
0
votes
4answers
62 views

Should I change to VeraCrypt on win7 SSD from TrueCrypt 7.1a?

Is still safe for me to use TrueCrypt or should I change to VeraCrypt as the last update boot won`t take long anymore. Any backdoors to decrypt TrueCrypt?
-2
votes
0answers
31 views

How veracrypt works in background ,when encrypted drive is mounted? [closed]

In FULL DISK ENCRYPTION at the time of encrypting the drive or container it encrypts whole container sector by sector ,now I am using one software let's suppose Veracrypt ,I encrypted drive using ...
1
vote
1answer
41 views

Are Self-Encrypting Drives (SEDs) used in cloud environments?

I was wondering if SEDs are used in cloud environments, for example in data centers of CSPs like Azure or AWS? And if so, what additional protection do they offer beside from physical theft of the ...
-2
votes
1answer
80 views

Will files added to an encrypted drive be encrypted as well? [on hold]

If we do disk encryption on a drive and add some files later on, will they be encrypted or not?
2
votes
0answers
42 views

macOS Data Protection without FileVault

I'm running macOS 10.14, and have encountered a problem which prevents me from enabling FileVault. As best as I can determine, there are no free and convenient alternatives for full disk encryption, ...
1
vote
1answer
57 views

How to protect data in case of an unauthorized physical access to a server

I have some VMs on a hypervisor. They run linux with full disk encryption. In case of an unauthorized physical access to a running server, I know that the attacker can extract passcode out of RAM via ...
0
votes
0answers
45 views

Can BitLocker simply be bypassed by just “waiting long enough” till it auto suspends due an update?

When you get an automatic feature or even only cumulative Windows 10 update with an activated BitLocker (password protected) system partition BitLocker will prompt you afterwards from the system tray ...
1
vote
1answer
37 views

Necessary to wipe Encrypted LVM LUKS

Is it necessary to wipe (using shred or similar) the drive or partition again even though it was already encrypted? Threat model for securing the drive is for potentially physically losing the drive ...
0
votes
2answers
82 views

Encrypting my hard drive using bitlocker

I would like to encrypt my C drive using bitLocker which is the only partition on my windows 10 computer. Is it better to separate the disk into partitions, for example: a partition for the OS and ...
0
votes
1answer
60 views

What are `dd` input blocks? [closed]

I'm looking for a semi-technical explanation of "input blocks". When creating encrypted containers we use dd with "count=n", but I'm not sure of the difference between "count=0" and "count=1". The dd ...
0
votes
0answers
46 views

Full-disk encryption solution for Samsung SSD 850 Pro [duplicate]

All, I've just joined this community and I'm writing here in order to have some clarification about the possibilities to perform a full disk encryption over a desktop machine with Windows 7 ...
0
votes
1answer
157 views

What is the relationship between Windows BitLocker and Hasleo BitLocker Anywhere?

Whilst researching alternatives to BitLocker which work on Windows 10 Home, I came across a product called "BitLocker Anywhere" from Hasleo. Since they use such similar names I was trying to figure ...
2
votes
1answer
84 views

Is a TPM which boots a full-disk-encrypted computer to login secure?

Currently the laptops in use are encrypted using Pre-Boot-Authentication, so the entire disk is encrypted. A user has to enter a password before booting the operating system. A new concept suggests ...
1
vote
1answer
75 views

What is the safest way to use Bitlocker with TPM?

I started using bitlocker yesterday and I have a TPM2.0 in my laptop. I enabled the option to enter a pin when starting and I enabled the option to use AES256 before encrypting. I don't really ...
1
vote
1answer
51 views

How does SSD with SED encrypt and decrypt data?

When you enter data and you want to save a file, the SED encrypts the data but where does the encryption process occur to be exact? Does SED encrypt data in memory before it gets to the disk? Or do ...
1
vote
7answers
324 views

Should I encrypt my entire hard drive, or only a partition?

I have an HP Pavilion notebook which has a 1TB hard drive. I run Windows 10 on it. If instead of fully encrypting the hard drive or encrypting the partition on which Windows is installed, I just ...
0
votes
0answers
77 views

Encryption on an LXC container?

I have the following scenario. I'm hosting some services on a VPS. Each service is running inside an LXC container. Some services like email contain information that I would like to be stored ...
3
votes
3answers
147 views

Using a windows partition as a decoy

I'm interested in setting up a laptop that dual boots Windows 7 and openSUSE. The plan is to encrypt the openSUSE partition and require a USB thumb drive with the encryption key for it to boot. Where ...
7
votes
1answer
280 views

Brute forcing encryption password (self destruct after 4 attempts)

My colleague at work lost the password to his external hard drive (HDD not SSD), a WD Elements. He remembers that his password was simple and 8 characters maximum. The problem is the encryption ...
2
votes
1answer
187 views

Plausible deniability with VeraCrypt standard volumes: what information do they give away?

I know VeraCrypt hidden volumes can be used for plausible deniability, but what about standard volumes? Indeed, properly encrypted data should be indistinguishable from random data. This way, if a ...
2
votes
2answers
51 views

Is corrupting the ciphertext corruption a good erasure?

Normally when you wipe a drive there are still ghost remains of the data even after overwriting the disk multiple times. So I was wondering if you could encrypt the drive and then overwrite the ...
3
votes
1answer
151 views

Bruteforce FileVault Encryption?

I've been getting into forensics and penetration testing lately and hoping someone can explain what the below data is and how it might be used to perform a bruteforce (hashcat) attacks against ...
-1
votes
3answers
122 views

Is it possible to reset the password of an encrypted disk?

I have encrypted my linux partitions. I would know if there's practically a method for overwrite the de-encryption password requested at boot, mounting the hard disk on another pc. EDIT I'm asking ...
42
votes
3answers
12k views

How can Android encryption be so fast?

Android uses full-disk encryption to encrypt files and decrypt them at startup. What I don't understand is that decrypting multiple gigabytes of files must take a lot of time, if nothing else then ...
2
votes
1answer
66 views

recommendation to change encrypted-drive passphrases

There are numerous recommendations for how frequently to change users' passphrases, and I think the most recent NIST recommendation is "no minimum time to change passwords" (I might be mis-quoting). ...
2
votes
3answers
567 views

Full disk encryption vs home folder encryption - why should the former be chosen over the latter

Niebezpiecznik.pl, a popular and acclaimed infosec blog in my country, recommends full disk encryption (emphasis original) to all people (ie. "Average Joes"). They warn that in the opposite scenario ...
7
votes
1answer
101 views

Automatically Open LUKS Container on System Boot in a safe manner

I have a linux system running at a cloud provider where I created an encrypted container using LUKS to store personal data. The encrypted container is manually mounted at /srv; the rest of the ...
0
votes
2answers
96 views

encryption - how to secure files - decrypting exposes them on ssd

Let's say I have an encrypted file. Now I decrypt it but since my computer only has ssd, i decrypt it on the ssd drive. Say, I make changes or I finish using the decrypted file so I encrypt it again. ...
0
votes
1answer
107 views

Does WD My Passport WDBYFT0040BBK-WESN have encryption vulnerability?

Recently I came across this whitepaper: https://eprint.iacr.org/2015/1002.pdf It states vulnerabilities in Western Digital hard drives but doesn't include exact model numbers. I have WD My Passport ...
2
votes
2answers
394 views

Security and Veracrypt [closed]

I have a few questions about Security and Veracrypt and hope you can clarify it for me. I don't want the VeraCrypt hidden volume I created to be damaged. If I mount the hidden volume and transfer ...
0
votes
1answer
178 views

best way to encrypt code and data on IOT device?

I have R scripts which are running on a Raspberry Pi device. I want to encrypt the code and data on the device so that if anyone unmounts the disk and try to read the content via other devices they ...
3
votes
2answers
234 views

What are BitLocker requirements against computer theft?

I'm using Windows 10 Pro edition and took the following actions: I've set up Bitlocker on both disks using the TPM (2.0) to boot the computer. I've also set a Windows password and I have no guest ...
1
vote
2answers
96 views

Is it viable to encrypt a 'bitlocked' drive again? [duplicate]

If one had an encrypted drive using Bitlocker, is it worth it to encrypt that drive again using another tool like VeraCrypt? Does this provide an extra layer of protection? Not a duplicate of a ...
0
votes
0answers
77 views

How does Bitlocker encrypt a drive while it is being used?

By this I mean performing file transfers, downloads etc., I haven't read anywhere of this having an effect on how Bitlocker encrypts the drive. Also, how does Bitlocker handle the constant amount of ...
3
votes
1answer
2k views

VeraCrypt PIM feature - Is it really necessary?

I am looking to encrypt my OS hard drive, and VeraCrypt caught my eye as a real good option. I tried to encrypt my drive with it, and the resulting encrypted system, takes around a minute to decrypt. ...
1
vote
0answers
23 views

Can files be retrieved from a VM instance state that was initially encrypted on a disk?

If I were to make a VM disk that was encrypetd, boot it, enter the encrypted passphrase and save the resulting 'image state' (of the running VM). Would this image have the 'encrypted' files easily ...
3
votes
1answer
56 views

How protected are files within a running encrypted VM on a possibly non secure hypervisor / host?

I've got a set of source code files (compiled C#) that I want to prevent direct read access to. The program will be running on the VM. I was thinking of storing these in an encrypted hard disk VM, the ...
2
votes
1answer
318 views

How can a user defeat anti-live forensics software?

Let's say I have a computer with full disk encryption which is logged and running, but I suspect it has anti-forensics software (eg. usbkill), which means that I risk compromising the integrity of the ...
4
votes
1answer
745 views

Android FDE - Why is key stored in RAM at all?

As far as I understand, the device's /data partition remains decrypted once an encrypted devices has been unlocked during boot up. Why does Android have to keep encryption keys within RAM if no "live" ...
2
votes
1answer
657 views

LUKS2 on-disk format specifications

The LUKS1 format has been available for a long time, and the format specifications are easy to find. Recently, LUKS2 has been released, which features a number of important changes, such as AEAD and ...
1
vote
1answer
81 views

Duress capability to clear hard drive encryption keys making disk unrecoverable in Windows?

I need to create a "duress" capability on a Linux-based and a Windows-based computer that have encrypted drives. I assume the easiest and quickest way would be to blow away the keys. On the Linux, ...
0
votes
1answer
829 views

How can I unlock drive without the password or recovery key of Bitlocker? [duplicate]

Is it possible to unlock my drive without the password or recovery key of Bitlocker? If so, how? I tried Elcomsoft forensic software but I'm not able to decrypt it without using the password or ...
4
votes
1answer
225 views

Does ATA security support or allow for 2FA?

I understand TCG OPAL is the spiritual successor of ATA Security for hard drive encryption with SEDs. They claim there is support for biometrics etc, but how is it for the predecessor, ATA Security? ...
0
votes
1answer
385 views

Differences between using an encrypted container and encrypting a partition

I would like to store encrypted backups on an external hard disk and am wondering what the differences are between creating an encrypted (Veracrypt) container and creating an encrypted partition. Are ...
3
votes
1answer
172 views

Is SSD encryption useless on data already present?

The reason I ask this question, is that presumably when contents on an SSD are encrypted, the unencrypted data is overwritten with its encrypted version. This study tells us that overwritten data can ...
3
votes
1answer
2k views

Full disk encryption on dual boot system (Truecrypt/Veracrypt)

I am looking to run my laptop system with a dual boot configuration (Fedora + Windows) with full disk encryption. I have a laptop that I will be bringing with me while traveling, both domestically ...