Hardware-based full disk encryption: Difference between revisions

Revision as of 00:57, 26 June 2022

Revision as of 23:23, 2 February 2023

Line 22:

Within a standard [[Harddrive#Form factors|hard drive form factor]] case the encryptor (BC), [[Cryptographic key|key]] store and a smaller form factor, commercially available, hard disk drive is enclosed.

*The enclosed hard disk drive's case can be [[tamper-evident]], so when retrievedinspected the user can be assured that the [[Data breach|data has not been compromised]].

*The encryptors electronics including the [[Cryptographic key|key]] store and integral hard drive (if it is [[Solid-state drive|solid-state]]) can be protected by other [[Tamper resistance|tamper respondent]] measures.

*The key can be [[Crypto-shredding|purged]], allowing a user to prevent his [[Authentication factors#Authentication factors|authentication parameters]] being used without destroying the encrypted data. Later the same [[Cryptographic key|key]] can be re-loaded into the Enclosed hard disk drive FDE, to retrieve this data.

*Tampering is not an issue for SEDs as they cannot be read without the decryption key, regardless of access to the internal electronics {{Clarify|reason=see Talk page, decryption keys can be recovered from the internal electornics in several cases|date=July 2016}}.

For example: [[ViaSat|Viasat UK (formerly Stonewood Electronics)]] with their FlagStone, and Eclypt<ref name="softpedia">{{cite web|url=http://news.softpedia.com/news/Stonewood-039-s-Eclypt-Drive-the-AES-256-Data-Fortress-84632.shtml |title=Softpedia on Eclypt Drive AES-256 |publisher=News.softpedia.com |date=2008-04-30 |accessdate=2013-08-06}}</ref> and DARC-ssd<ref>{{cite web |title=Data At Rest (DAR) encryption solutions |url=https://www.viasat.com/products/cybersecurity/data-at-rest-encryption/ |website=www.Viasat.com |publisher=Viasat, Inc. ©2023 |access-date=2 February 2023}}</ref> drives or GuardDisk <ref>{{cite web |title=Hardware Disk Encryption for the Masses, Finally! |url=https://www.turbotas.co.uk/2003/07/30/hardware-disk-encryption-for-the-masses-finally/ |website=turbotas.co.uk |publisher=Turbotas |accessdate=2020-05-22 |date=2003-05-30}}</ref> with an [[Radio-frequency identification|RFID]] token.

=== Removable Hard Drive FDE ===