Questions tagged [disk-encryption]

Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).

Filter by
Sorted by
Tagged with
1 vote
1 answer
85 views

Military-grade encryption on Blu-ray discs?

Another thread addresses the question of what can count as "military-grade encryption." In this case, I see that CyberLink Power2Go software boasts "advanced military-grade 256-bit ...
user avatar
0 votes
2 answers
50 views

How does bitlocker work when unlocking a removable drive on another PC using a password?

Here's the scenario: I have an external harddrive encrypted with bitlocker. I disconnect that drive from the PC that encrypted it, and connect it to a different PC. Surprisingly, when I do this, all ...
user avatar
  • 113
0 votes
0 answers
33 views

How to check that Veracrypt encrypted all of the drives?

Bit of a follow up to this question. After using Veracrypt to "Encrypt system partition/drive" is there a way I can verify the drives are encrypted? If the computer has multiple HDDs or SSDs ...
user avatar
  • 431
0 votes
3 answers
82 views

How difficult is it so decrypt a disk encrypted with luksOpen?

I have encrypted a disk on my Ubuntu machine using sudo cryptsetup luksOpen /dev/sdb1 sdb1 I'm wondering how difficult is it to decrypt this disk using bruteforce password guessing? What does the ...
user avatar
  • 383
0 votes
1 answer
35 views

Saving signed file on an encrypted drive using symmetric encryption

When using asymmetric encryption, signing and encryption are the same, but opposite, operations. Say I have my drive encrypted with asymmetric encryption. If I save a signed file to that drive, using ...
user avatar
0 votes
1 answer
33 views

Using Yubico YubiKey 5 NFC for local data encryption

I'm interested in buying a Yubikey but want to know if you can use a Yubikey to generate a symmetric key for file encryption on selected files on a PC. Or if you need some sort of extension like HMAC-...
user avatar
  • 3
0 votes
1 answer
94 views

Does full disk encryption securely remove data?

I was just catching up on best practices for securely erasing data from a Mac. At one point I remember reading: For SSD drives it is no longer recommended to fully write ones/zeroes/random bits on the ...
user avatar
3 votes
0 answers
100 views

When using VirtualBox, is it better to use the VirtualBox encryption or the OS disk encryption?

VirtualBox has an option to encrypt the drive of a VM. When I installed Debian or Ubuntu, I have the option to say that I want the full disk encrypted. I'm thinking that both do pretty much the same ...
user avatar
0 votes
4 answers
194 views

Can TPM2 disk encryption protect data after full server theft?

I read about TPM2 with PCR locking full-disk encryption from different sources. For example [1]. What I can't understand is how much does this protect from full server theft. If we assume that TPM2 ...
user avatar
1 vote
0 answers
45 views

Cold boot attack on NAS

I'm familiar with the concept of cold boot attacks on laptop and desktop computers, where the goal is to find hidden encryption keys in the memory. I also think it's done on certain mobile phones. I ...
user avatar
1 vote
1 answer
82 views

How exactly does Windows Bitlocker work?

I wonder how Windows Bitlocker and other similar software works. I know they differ in terms of security level as some software does not fully encrypt locked files, but I'm speaking of unauthorized ...
user avatar
  • 113
0 votes
1 answer
100 views

What are the pros and cons of encryption software from the hard disk manufacturer?

I usually use Veracrypt (and in the past Truecrypt) to secure my external hard drive. I've always been taught to stick to such open-source software for my disk encryption needs, since it can be ...
user avatar
  • 183
0 votes
0 answers
169 views

TPM vs TCM - InTune and BitLcoker compliance in China

It appears that TPM is banned in China, therefore, Dell laptops shipped to China are equipped with TCM chips instead of TPM. How secure is TCM? gov backdoors? Wondering how does if devices with TCM ...
user avatar
1 vote
1 answer
139 views

Does Re-Encryption make our data more secure?

We are focusing on mobile phone and hard drive encryptions. This idea can be extended to any data encryption also. iPhone and recent Androids are all encrypted. We know that changing the password will ...
user avatar
  • 111
12 votes
4 answers
8k views

Is looking for plain text strings on an encrypted disk a good test?

I have a dual boot PC, where the Win10 (uncompressed) partition is encrypted with BitLocker. I was curious about making this test (and also encryption took quite a short time in my opinion), so while ...
user avatar
  • 239
0 votes
1 answer
90 views

Why would FDE miss slack space, swap files and memory?

I'm reviewing a ISO27001 Gap Analysis workbook and under Control A.11.2.7 someone has left the note: If full disk encryption (FDE) is used on a device is there a policy in place to ensure the ...
user avatar
  • 103
4 votes
2 answers
346 views

How does Windows password protect my data?

As far as I know, Windows computers are not encrypted by default in case you are not signed into a Microsoft Account. Considering the aforementioned fact I cannot understand the purpose of the login ...
user avatar
1 vote
1 answer
106 views

Why is it advisable to capture a disk image before shutting down? [closed]

I am currently studying windows forensics and I have found that it would be advisable to image the drive while it is powered on and live. If you power it off, you likely will not be able to recover ...
user avatar
2 votes
1 answer
265 views

Are there any Linux distributions with enabled TPM2 and full disk encryption setups

I have been searching the web to find a Linux distribution, preferrably a rolling release one as I'm otherwise hooked on the concepts in Arch Linux, with automated steps to setup full disk encryption (...
user avatar
  • 121
1 vote
1 answer
156 views

At-rest encryption. Use SFTP log-in credentials to unlock/decrypt encrypted drive or folder on an Ubuntu Linux server

I have a simple file server running on a small Ubuntu machine that facilitates file sharing and 2 way folder syncing between my and my girlfriend's 4 computers through SFTP over a private network. The ...
user avatar
0 votes
2 answers
160 views

How to securely encrypt my computer and protect it from thieves and others

I did enabled Bitlocker encryption on my Windows 10 Pro Laptop. but it has TPM 2.0 chip installed and Because of that it DOES NOT actually Protecting me as someone JUST NEED TO CRACK 1 PASSWORD (...
user avatar
0 votes
1 answer
127 views

Taking encrypted devices across borders

I am moving to a country where the government can compel you to reveal passwords for your devices at the border, rendering the full disk encryption on my linux laptop useless. Other than uploading ...
user avatar
0 votes
1 answer
152 views

Encrypted drives and non-interactive use

I would like to protect the data on my backup system, in case it gets (physically) stolen. I would encrypt the hard drives where the data resides. Since the backup system typically acts non-...
user avatar
0 votes
1 answer
126 views

Is there a danger of a data leak if a rotational SAS drive is encrypted after the fact? [duplicate]

If a rotational SAS drive (non-SSD) is encrypted after it has been in use for some time e.g. several years, is there a danger of a data leak? For example, if the drive is encrypted and subsequently ...
user avatar
  • 1,483
0 votes
0 answers
73 views

Escrow Key required after restart (Macbook Air M1) (MDM)

I have Macbook Airs (M1; Big Sur) that even though they successfully enable FDE to a local user, after restart, the device requires the escrow key. The Airbooks are managed by an MDM which pushes the ...
user avatar
1 vote
1 answer
681 views

Sealing a pass-phrase with the TPM and associating it with a file state

Is there a way to associate the state of an arbitrary file to a tpm2 PCR value? I want to seal a secret pass-phrase onto the TPM, and I want the TPM to be able to unseal it only if the file is not ...
user avatar
  • 13
0 votes
2 answers
175 views

What are the disadvantage of only encrypting the HDD compared to FDE with secure boot

I read How secure are most FDE implementations? What are the disadvantage of only encrypting the HDD compared to FDE with secure boot. If I encrypt a disk in a running server, and someone gain access ...
user avatar
1 vote
1 answer
1k views

Using Hardware Encryption on NVME SSD used as the boot device

I have a question relating to implementing encryption of data at rest. This is possibly more suited to another stackexchange site, so please let me know where would be better to post if I'm a little ...
user avatar
  • 113
1 vote
0 answers
98 views

How is PlayStation (4/5) protected from disk-copying piracy?

It just doesn't make any sense to me. Any owner of a original PS game disk has full access to it, so it shouldn't be a problem to create an identical disk, isn't it? And PS won't be able to tell apart ...
user avatar
  • 111
0 votes
3 answers
368 views

How good/bad are these transparent Linux consumer FDE setup options? (e.g. for auto-unlocking LUKS)

UPDATED Summary: I'm looking at Linux FDE options that are transparent to the user (my parents) in that the user doesn't need to enter 2 passwords. I found/thought of several options and tried to ...
user avatar
  • 331
20 votes
3 answers
7k views

Is LUKS still an effective option for consumer FDE considering Elcomsoft can break it?

I use Fedora Linux and was recently looking into doing Full Disk Encryption on data drives such as /home on some of my / my family's PCs. I understand that LUKS security will be partially dependent on ...
user avatar
  • 331
0 votes
1 answer
167 views

Difference between Disk Encryption and Volume Encryption?

I'm trying to understand the different between disk encryption and volume encryption, more specifically as it relates to SAP HANA, link here. From my understanding Disk Encryption prevents the threat ...
user avatar
1 vote
1 answer
600 views

Linux/LUKS/Full Disk Encryption: How can I mitigate SSD/flash media security security risk caused by unreliable physical deletion?

Firstly, I do not think my question is answered by SSD full disk encryption as I am not looking for a binary "is FDE secure" - nothing is perfectly secure; rather I am looking for possible ...
user avatar
0 votes
1 answer
143 views

How does Bitlocker Drive encryption work and which info are sent?

I'm looking forward to discovering more about the way in which USB devices encrypted with BitLocker are protected. If I insert a USB key encrypted with BitLocker on a different device, I can access ...
user avatar
  • 481
0 votes
2 answers
141 views

Can a custom built CPU break hard drive encryption?

While a hard drive is decrypted on boot up, can the original phrase be intercepted at some comparison calculation step by a specially built CPU or is there some higher math involved? This would be ...
user avatar
1 vote
1 answer
153 views

How can I protect browser cached files to be accessed in a case of a stolen hard drive?

For the usual reasons we want to cache certain resources browser side, e.g. list of products bought in the past. Context is a web application, accessed via the internet. This list is confidential in ...
user avatar
0 votes
1 answer
218 views

Security against local attack for remote FDE decryption?

Is there any remote FDE decryption that is resistant to an attacker that has local physical access? Tools like dracut-sshd need to store the private key used for the sshd server on the unencrypted ...
user avatar
3 votes
1 answer
406 views

How can I store and manage my GPG key pair securely?

I've taken measures and thoughts on how to securely store and manage my key pair. In the process of it a few questions arose, which I'm not capable of answering yet. My key pair will be used to ...
user avatar
0 votes
1 answer
73 views

Why would you use random algorithm for CSFLE if you can't query the inserted data?

I think I really misunderstand something about data encryption. This guide (https://docs.mongodb.com/manual/core/security-client-side-encryption/#randomized-encryption) says the following: "...
user avatar
  • 3
1 vote
1 answer
801 views

Is it secure to automatically unlock encrypted system drive using the TPM PCR values?

A simple way of automatically decrypting system drive at boot time: clevis luks bind -d /dev/yourdrive tpm2 '{"pcr_ids":"4,5"}' systemctl enable clevis-luks-askpass.path When I ...
user avatar
1 vote
0 answers
97 views

Recovering files with recovery key after double FileVault activation - is that possible?

Let's imagine I have a work macbook with ssd and I use FileVault, and the company has the FileVault recovery key. I want to make sure my data is erased and unrecoverable, what is the best way to ...
user avatar
  • 153
5 votes
2 answers
5k views

Can I use VeraCrypt with an SSD?

I recently got Windows 10, and I am not overly thrilled at Microsoft having a copy of my password on their servers. I will also be forced to make a hotmail account, instead of just using a local ...
user avatar
0 votes
1 answer
129 views

How to best prevent data recovery on a disk drive without physically destroying it? [duplicate]

The recommended way of ensuring that data on a hard disk cannot be recovered is to destroy it physically, for example using a hammer, drill or even thermite. Question When physical disk destruction is ...
user avatar
  • 1,224
1 vote
1 answer
177 views

Can M.2 docking stations be used to make forensic images of (Bitlocker encrypted) M.2 disks?

I am looking into M.2 docking stations such as the Maiwo K3016S as shown below. Is it possible to use such docking stations optionally in combination with a USB- or software write-blocker, in order ...
user avatar
  • 6,190
2 votes
2 answers
2k views

Can I safely disable and re-enable Secure Boot when Bitlocker is used in order to make a Forensic Image?

I am about to make a forensic image (using dc3dd from OSFClone) of two laptops and in this specific case I'd like to startup using an bootable USB stick with OSFClone and image the disk to an external ...
user avatar
  • 6,190
2 votes
2 answers
799 views

Installed TPM, how to use BitLocker without USB key?

I have a Windows 10 computer with 3 hard drives: Samsung SSD 850 EVO 1TB (SSD, system drive where Windows 10 is installed, not encrypted yet) First 3 TB HDD already protected by BitLocker Second 3 TB ...
user avatar
  • 315
1 vote
1 answer
121 views

Is disk encryption (e. g. LUKS) reversed when having an encrypted disk image inside an encrypted partition with the same encryption password?

Let's assume one has created an encrypted partition, e. g. with the LUKS standard. Then one creates a (virtual) disk image, e. g. for use by a virtual machine, containing an encrypted partition ...
user avatar
  • 13
1 vote
1 answer
314 views

How do I use hashcat to recover password from ata drive lock

How would I get the password for encrypted SSD's I bought (legally bought from a business who forgot the password, I plan on wiping them after I unlock them) I am new to using software like hashcat, I ...
user avatar
2 votes
1 answer
550 views

Is native OpenZFS (on FreeBSD) block-level encryption secure?

I am considering using OpenZFS on FreeBSD. I am not quite sure how secure native OpenZFS encryption is? If somebody steals my server and the disks, is he able to decrypt the files? In a Discord room I ...
user avatar
  • 1,413
28 votes
5 answers
7k views

Is a password-protected stolen laptop safe?

Let's assume I have a Windows 10 computer and my login password has an entropy of infinity. If I did not encrypt my entire hard-drive, does it matter how secure my password is? Is it possible for ...
user avatar
  • 809

1
2 3 4 5
12