Questions tagged [disk-encryption]

Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).

Filter by
Sorted by
Tagged with
0
votes
1answer
44 views

Should i upgrade old volumes to new cryptsetup encyption mode?

old cryptsetup default is es-cbc-essiv:sha256. the new one is aes-xts-plain64:sha256. i don't know that much about cryptography but i assume the standard was changed for a reason. also there can be ...
0
votes
0answers
41 views

LUKS partition encryption vs. .vmdk level encryption

Because of data classification that is stored on one of our servers we need to make sure that it is protected while in transit and at rest. While the first can be addressed with proper TLS ...
0
votes
0answers
44 views

Protect LUKS encrypted HDD against boot sector key stealing attack

I have HDD with GPT, 1 MiB BIOS boot partition and LUKS encrypted volume group with data. When I boot the computer, GRUB asks for passphrase. However, I want to run some untrusted application which ...
0
votes
0answers
49 views

Enclosed FDE, Bridge & chipset FDE. what is the difference to SED

I was reading hardware based encryption, and found out that they are basically of 3 types. 1) SED - Encryption/Decryption done by the drive circuitry. Unlocked via Pre boot authentication. Can use ...
0
votes
0answers
40 views

Protecting/Crypting an external storage

We have an camera with sd card in which it records. AFAIK its software, recording parts etc., cannot be stepped in. We wish a mechanism/methodology that whenever it is plugged into usb socket of a ...
0
votes
1answer
347 views

Where is Bitlocker encryption key stored in USB? [closed]

I have a USB that contains the Bitlocker key. When I open USB I dont see any files inside. How can I move the Bitlocker key to another USB?
0
votes
1answer
68 views

Startup PIN security considerations for BitLocker

I plan to implement Bitlocker encryption on my devices, but I wonder how to achieve the highest possible security against offline attacks. I understood the following: I can enable TPM based ...
0
votes
1answer
611 views

best way to encrypt code and data on IOT device?

I have R scripts which are running on a Raspberry Pi device. I want to encrypt the code and data on the device so that if anyone unmounts the disk and try to read the content via other devices they ...
0
votes
0answers
163 views

How does Bitlocker encrypt a drive while it is being used?

By this I mean performing file transfers, downloads etc., I haven't read anywhere of this having an effect on how Bitlocker encrypts the drive. Also, how does Bitlocker handle the constant amount of ...
0
votes
1answer
69 views

Best practices with respect to hard drive reconstruction

I would like to be able to store encrypted information on my computer, that no one else is able to read without the right password, even if they have complete access to the computer. There are of ...
0
votes
0answers
184 views

What's the most secure way to fully encrypt an Android 6.0 phone without circumstances?

I have Samsung Galaxy S5 with Android 6.0 and would like fully encrypt it in the most secure way. What would be the best thing here? I'd like to avoid doing convoluted things like installing ROMs and ...
0
votes
0answers
75 views

Accessible data when hard-drive is encrypted

I recently acquired a new computer so I decided to try a few things, such as disk-encryption (fir the record, I installed Ubuntu 15.10, made only one partition, wiping everything that was here). I ...
0
votes
0answers
44 views

Disk Encryption - Extended Boot Record protection

I posted something like this on SuperUser some months ago, but thought I'd try the security focused site. Anyway, I am working on a Disk Encryption project using OPAL drives. The OS is Linux, and is ...
0
votes
1answer
2k views

Securely wipe external drive with Windows only [duplicate]

Consider following 2 disk wipe procedures, using only vanilla Windows installation: First do a quick-format to make the disk appear empty, then do one of these: Just do full format of the disk. ...
0
votes
1answer
297 views

Secure distributed storing and querying of [medical] data?

Comparing ways of distributing and securely storing and querying structured and schemaless data. Currently I am using MongoDB, but am looking into (Postgres|MySQL)&CryptDB, Cassandra and others. ...
0
votes
1answer
567 views

Read-Only USB thumb as Linux boot encryption authentication [closed]

I would like to have a physical key to decrypt Linux machines at boot. This is just an idea and I would like to know if there are already projects or established methods to achieve this. Let me ...
0
votes
2answers
149 views

Bitlocker/Filevault and VeraCrypt together?

I'm researching ways to make the most secure encryption for additional fixed drives to protect against unknown vulnerabilities, side channel attacks, etc. Basically, securing the data beyond just a ...
-1
votes
3answers
222 views

Is it possible to reset the password of an encrypted disk?

I have encrypted my linux partitions. I would know if there's practically a method for overwrite the de-encryption password requested at boot, mounting the hard disk on another pc. EDIT I'm asking ...
-1
votes
1answer
713 views

How do I change LUKS backend to OpenSSL?

I know there is a way to do it, but I don't know how to do it: the default backend for LUKS is libgcrypt and I want to test it with the openssl cryptographic library. I was told that there is a ...
-1
votes
2answers
2k views

Which is more secure a full disk or file encryption? [duplicate]

There are probably two ways to encrypt your computer full disk encryption which completely locks down the computer between when it is off and when it has booted but after everything loads you computer ...
-1
votes
1answer
278 views

physical access proof smart card for disk encryption [closed]

Current full disk encryption on mobile devices rely on low entropy passwords like PIN numbers or pattern locks. Being able to use a smartcard with such mobile devices is a tempting idea. I know that ...
-1
votes
1answer
1k views

The Pirate Bay's new Hosting Architecture [closed]

I read this article a moment ago: http://www.geek.com/news/the-pirate-bay-is-now-hosted-anonymously-in-the-cloud-1522725/ But it was very light on details. Is an architecture as described in this ...
-2
votes
2answers
120 views

How safe are encrypted file systems and how does their updates work? [closed]

Not so long ago the media widely discussed the deciphering of the encrypted iPhone of a terrorist in the United States. Apple said it was impossible to decrypt. Edit: The iPhone was encrypted, and ...
-2
votes
1answer
445 views

BitLocker versus CryptoLocker

Can BitLocker be an effective protective measure against cryptolockers and ransomware class of attacks? Were there evidences of (un)successful intrusion/encryption attempts on volumes with enabled ...
-2
votes
1answer
89 views

Will files added to an encrypted drive be encrypted as well? [closed]

If we do disk encryption on a drive and add some files later on, will they be encrypted or not?
-3
votes
1answer
3k views

What is the most “out-of-the-box” secure OS for a home user? [closed]

This question will encompass several topics and may also include user opinion. Here is the question, and how I want you to qualify it: Question: What is the most "out-of-the-box" secure OS for a ...
-4
votes
3answers
193 views

Is there a way to secure a Linux machine in a way that no one else (but me) can access its contents? [closed]

And I mean, even if someone tries rooting with a Live CD, even if one takes the HDD away and plug it in somewhere else, etc... I want to be able to give a client a machine with a service running, but ...
-5
votes
1answer
105 views

How to prevent unwanted people from getting image of my hdd? [closed]

I have done a little search about this topic but could not find anything. Even if my hdd is removed from my computer, its contents should not be read or copied.
-6
votes
2answers
13k views

Is it possible to encrypt a virtual machine using virtualbox? [closed]

Is it possible to encrypt a virtual machine using virtualbox, and not leave accessible to the users of the machine where it hosted, and not allow any file to be extracted it with some program ? The ...