Re: Whole disk encryption

Paul Giddens wrote:

GIVEN that, if you are concerned about security and want to use
encryption,
WHY would you choose to NOT do full disk?

From a functionality perspective the answer is simple: more encryption will cost more performance (unless the disk itself supports en/decryption in real time).
From a security perspective:
- because you might have a computer used by more than a single person
- because you might have a person using more than a single computer (and still wanting to be able to en/decrypt his data everywhere)
- because you might have a person who does neither own nor administer a computer and needs the ability to change the encryption keys herself

Pretty much like with transport vs. end-to-end encryption there are uses for both types of storage encryption. They might be completing each other in a security solution but will not be able to act as functional substitutes for each other.

Denis

---------------------------------------------------------------------------
---------------------------------------------------------------------------

Relevant Pages

  • Attack Scenarios against PGPs Whole Disk Encryption (WDE)
    ... Attack Scenarios against PGP's Whole Disk Encryption ... PGP's Whole Disk Encryption for Microsoft Windows encrypts all the ... As long as standard PC hardware and BIOS is used, the boot code of the disk ...
    (comp.security.pgp.tech)
  • RE: [Full-Disclosure] harddisk encryption
    ... If the encryptor encrypts your boot disk, it has to be involved early in the ... boot process and may be broken by anything that changes the system boot sequence. ... normally when the encryption keys had been entered. ... registry controls that allow the swap file to be wiped on shutdown. ...
    (Full-Disclosure)
  • RE: [Full-Disclosure] harddisk encryption
    ... > boot process and may be broken by anything that changes the system boot ... In the event of disk crash or emergency, unless a tool is provided to ... > i'm evaluating a software that performs harddisk encryption for deploying ...
    (Full-Disclosure)
  • Widely Used Security Solutions Unable To Prevent Data Theft
    ... Innersafe Corporation, a data security company. ... a text editor exposed protected data on a PC running disk ... "Data theft from a PC is surprisingly easy. ... Disk encryption scrambles data on the disk so it cannot be unscrambled ...
    (alt.privacy)
  • Re: On the Recent PGP and Truecrypt Posting
    ... changing the passphrase would lock out prior users. ... Clearly a users with a backup copy of an encrypted disk for which they ... clear that real world users actually understand the need to re-encrypt ... You will also also see the architecture extend to some *very* cool storage encryption very soon. ...
    (Bugtraq)
Quantcast