Hardware-based full disk encryption: Difference between revisions

Revision as of 17:52, 30 March 2009

Revision as of 18:08, 30 March 2009

Line 1:

Hardware-based Full Disk Encryption is being pursued by a number of [[hard disk drive|HDD]] (HDD) vendors including [[Intel]], [[Seagate Technology]], and [[Hitachi, Ltd.]] with the rest of the hard drive industry following. [[Encryption]] and the symmetric encryption key is maintained independently from the [[Central processing unit|CPU]], thus removing computer memory as a potential attack vector. There are current two varieties of hardware-FDE being discussed:

#Hard Disk Drive FDE

Line 7:

HDD FDE is being pushed by HDD vendors and a standard is being pursued for greater adoption via the [[Trusted Computing Group]]<ref>[https://www.trustedcomputinggroup.org/ Trusted Computing Group: Home<!-- Bot generated title -->]</ref>. Key management takes place within the HDD and encryption keys are protected by the drive firmware. However, some level of authentication must still take place within the CPU via either a software [[Pre-Boot Authentication]]<ref>[http://secude.com/htm/707/en/Pre-Boot_Authentication.htm SECUDE IT Security - Pre-Boot Authentication<!-- Bot generated title -->]</ref> Environment or with a BIOS password.

HDDAn FDEexample hasof beenthis implemented by one niche vendoris Stonewood inwith their [[Flagstone Hard Drive|Flagstone ]]<ref>[http://www.stonewood.co.uk/stonewood_flagstone.aspx]</ref> drives.

Currently there are three software solutions for [[Pre-Boot Authentication]] available from [[Secude]]<ref>[http://secude.com/ SECUDE IT Security - Homepage<!-- Bot generated title -->]</ref>,[[SafeNet]] and [[Wave Systems]].

HDD FDE has been implemented by one niche vendor Stonewood in their [[Flagstone Hard Drive|Flagstone ]]<ref>[http://www.stonewood.co.uk/stonewood_flagstone.aspx]</ref> drives.

==Chipset FDE==