Hardware-based full disk encryption: Difference between revisions

Revision as of 22:03, 21 May 2009

Revision as of 09:32, 8 July 2009

Line 5:

==Hard Disk Drive FDE==

HDD FDE is being pushed by HDD vendors and a standard is being pursued for greater adoption via the [[Trusted Computing Group]].<ref>[https://www.trustedcomputinggroup.org/ Trusted Computing Group: Home<!-- Bot generated title -->]</ref> Key management takes place within the HDD and encryption keys are protected by the drive firmware. However, some level of authentication must still take place within the CPU via either a software [[Pre-Boot Authentication]]<ref>[http://secudefinallysecure.com/htmhtml/707/en/Pre-Boot_Authenticationindex.htm SECUDE ITphp?id=1061 SecurityFinallySecure - Pre-Boot Authentication<!-- Bot generated title -->]</ref> Environment or with a BIOS password.

An example of this is Stonewood with their Flagstone drives.<ref>[http://www.stonewood.co.uk/stonewood_flagstone.aspx www.stonewood.co.uk/stonewood_flagstone.aspx]</ref>