Questions tagged [disk-encryption]

Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).

33 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
1answer
354 views

What exactly is encrypted by “full disk encryption” on Android 5?

This page says "user data" gets encrypted. But that implies it's only a certain part of the full disk? Like "/data" or something? Can I copy a file from a PC to the internal storage to any place and ...
3
votes
2answers
580 views

Is a password or passphrase needed with a keyfile backup to decrypt

In my search for an encrypted NAS i have come across a few products that talk about backing up the encryption key and storing it in a safe location. My question is if this backed up keyfile is enough ...
3
votes
0answers
180 views

Finding Audit Reports and Results for Whole Disk Encryption Solutions

Due to TrueCrypt being pulled from the web even though it's been audited, I was asked to compare the audit of TrueCrypt against audits and information available for other products that do whole disk ...
2
votes
1answer
102 views

Decrypting possibly compromised Veracrypt hard drive

I have a Veracrypt encrypted hard drive, a system drive encryption with the operating system. The laptop is possibly compromised, which is why I can't decrypt it directly on the laptop I don't know ...
2
votes
0answers
40 views

How does the Shadow MBR improve security for Opal v2 SEDs?

Opal v2 and above drives are required to support multiple locking ranges, so it's possible to block access entirely to the majority of the drive and only have the bootloader w/ PBA support section ...
2
votes
0answers
90 views

macOS Data Protection without FileVault

I'm running macOS 10.14, and have encountered a problem which prevents me from enabling FileVault. As best as I can determine, there are no free and convenient alternatives for full disk encryption, ...
2
votes
0answers
36 views

What security guarantees do Google Cloud Platform customer supplied disk encryption keys provide over Google provided keys?

Google Cloud Platform allows for customer supplied disk encryption keys as an option to using Google supplied disk encryption keys. However, to use customer supplied keys, you must send the key (...
2
votes
0answers
115 views

How can I verify the algorithm used for FDE is actually AES-128?

I would like to check whether the algorithm that is used to encrypt my SSD drive is actually AES-128. I wanted to read the raw disk data, encrypt them myself and then diff the data against the ...
2
votes
1answer
893 views

EncFS vs EFS advantages for Dropbox-seamless encryption

I am considering a solution for securing my private data in Dropbox. In spite of OneDrive, MEGA and AmazonCloud are also being considered but now I put my focus on Dropbox as the most feature-rich of ...
2
votes
0answers
175 views

Is stacking encryption a good idea for a file system?

Somewhat related to a previous question, is stacking encryption under and via file systems a good idea? For example, dm-crypt for the device, and then eCryptfs or veracrypt for the file system. If ...
2
votes
1answer
98 views

How does the password protect the data keys on an encrypted HDD / SSD?

How is the data key used for full disk encryption protected? Is a wrapping key derived from the password, or is it simply unlocked once the password has been supplied? If an existing or proprietary ...
1
vote
0answers
71 views

Wiping a smartphone/laptop for travel purposes

What is the best way to prepare your laptop and smartphone for travel? I envision having an encrypted back up stored at home; then factory resetting the smartphones/laptops for travel and installing ...
1
vote
1answer
242 views

System Encryption With Veracrypt/Truecrypt- What is the difference between Wipe Mode “None” and 3 pass, 1 pass etc?

First I wanted to make sure we're talking about using a Non-SSD Hard drive. I know SSD drives work differently. Here would be a good reference/guide on system encryption: https://www.howtogeek.com/...
1
vote
1answer
128 views

Are Self-Encrypting Drives (SEDs) used in cloud environments?

I was wondering if SEDs are used in cloud environments, for example in data centers of CSPs like Azure or AWS? And if so, what additional protection do they offer beside from physical theft of the ...
1
vote
0answers
280 views

Can BitLocker simply be bypassed by just “waiting long enough” till it auto suspends due an update?

When you get an automatic feature or even only cumulative Windows 10 update with an activated BitLocker (password protected) system partition BitLocker will prompt you afterwards from the system tray ...
1
vote
0answers
24 views

Can files be retrieved from a VM instance state that was initially encrypted on a disk?

If I were to make a VM disk that was encrypetd, boot it, enter the encrypted passphrase and save the resulting 'image state' (of the running VM). Would this image have the 'encrypted' files easily ...
1
vote
0answers
128 views

Is volume level encryption enough to satisfy compliance requirements?

We are implement a cloud application and using nosql technology. We know there are quite a few compliance requirements out there require doing data encryption at rest. However, we would like to know ...
1
vote
0answers
72 views

Why should I encrypt data at rest if the data sever is behind vpn?

If the server is behind a vpn anyway, wouldn't it be secure? I'm looking at aws's encryption at rest feature, and trying to understand why I would use it. If someone manages to get through my vpn, ...
1
vote
0answers
84 views

Why you can I use FileVault without CD, USB, floppy etc. for system start/rescue, but not BitLocker or VeraCrypt?

I have encrypted my harddrive on mac with FileVault. I can start my system with password only. To recover the system I had to store a rescue password for example as a picture. With BitLocker (without ...
1
vote
0answers
117 views

Does KillDisk use existing commands on a server to encrypt the data?

I've been reading up on this KillDisk exploit for Linux. https://www.bleepingcomputer.com/news/security/killdisk-ransomware-now-targets-linux-prevents-boot-up-has-faulty-encryption/ Does anyone ...
1
vote
0answers
1k views

BitLocker: switch from password to USB method of encryption

I'm in the process of setting up encryption on some machines in the office, and BitLocker is the obvious choice for Windows ones. Some computers already have BitLocker activated with password ...
1
vote
0answers
659 views

Mcafee endpoint encryption doesn't see previously encrypted partition after Windows 7 reinstallation

My partitions C and D were encrypted and Windows 7 was installed on C. I copied all important files to D and then changed harddrive controller from IDE to AHCI, removed C and created it again and then ...
1
vote
0answers
1k views

Full disk encryption on CentOS 6x - FIPS 140-2 compliant?

I'm using CentOS 6.5 on an existing server and am researching encryption options for compliance. SEDs are out since the controller in this older machine will not support them. That leaves full ...
0
votes
0answers
32 views

Should i upgrade old volumes to new cryptsetup encyption mode?

old cryptsetup default is es-cbc-essiv:sha256. the new one is aes-xts-plain64:sha256. i don't know that much about cryptography but i assume the standard was changed for a reason. also there can be ...
0
votes
0answers
53 views

Disk Encryption VS SQL TDE Encryption

I am trying to understand what would be the benefit of using SQL TDE on top of underlying disk encryption. My understanding is that disk encryption will prevent malicious users pulling out the disk ...
0
votes
0answers
28 views

LUKS partition encryption vs. .vmdk level encryption

Because of data classification that is stored on one of our servers we need to make sure that it is protected while in transit and at rest. While the first can be addressed with proper TLS ...
0
votes
0answers
39 views

Protect LUKS encrypted HDD against boot sector key stealing attack

I have HDD with GPT, 1 MiB BIOS boot partition and LUKS encrypted volume group with data. When I boot the computer, GRUB asks for passphrase. However, I want to run some untrusted application which ...
0
votes
0answers
41 views

Enclosed FDE, Bridge & chipset FDE. what is the difference to SED

I was reading hardware based encryption, and found out that they are basically of 3 types. 1) SED - Encryption/Decryption done by the drive circuitry. Unlocked via Pre boot authentication. Can use ...
0
votes
0answers
39 views

Protecting/Crypting an external storage

We have an camera with sd card in which it records. AFAIK its software, recording parts etc., cannot be stepped in. We wish a mechanism/methodology that whenever it is plugged into usb socket of a ...
0
votes
0answers
150 views

How does Bitlocker encrypt a drive while it is being used?

By this I mean performing file transfers, downloads etc., I haven't read anywhere of this having an effect on how Bitlocker encrypts the drive. Also, how does Bitlocker handle the constant amount of ...
0
votes
0answers
181 views

What's the most secure way to fully encrypt an Android 6.0 phone without circumstances?

I have Samsung Galaxy S5 with Android 6.0 and would like fully encrypt it in the most secure way. What would be the best thing here? I'd like to avoid doing convoluted things like installing ROMs and ...
0
votes
0answers
72 views

Accessible data when hard-drive is encrypted

I recently acquired a new computer so I decided to try a few things, such as disk-encryption (fir the record, I installed Ubuntu 15.10, made only one partition, wiping everything that was here). I ...
0
votes
0answers
43 views

Disk Encryption - Extended Boot Record protection

I posted something like this on SuperUser some months ago, but thought I'd try the security focused site. Anyway, I am working on a Disk Encryption project using OPAL drives. The OS is Linux, and is ...