Hardware-based full disk encryption: Difference between revisions

Revision as of 01:50, 6 October 2009

Revision as of 09:58, 27 November 2009

Line 5:

==Hard Disk Drive FDE==

HDD FDE is being pushed by HDD vendors and a standard is being pursued for greater adoption via the [[Trusted Computing Group]].<ref>[https://www.trustedcomputinggroup.org/ Trusted Computing Group: Home<!-- Bot generated title -->]</ref> Key management takes place within the HDD and encryption keys are protected by the drive firmware. However, some level of authentication must still take place within the CPU via either a software [[Pre-Boot Authentication]]<ref>[http://finallysecure.com/html/index.php?id=1061 FinallySecure - Pre-Boot Authentication<!-- Bot generated title -->]</ref> Environment or with a BIOS password.

An example of this is Stonewood with their Flagstone drives.<ref>[http://www.stonewood.co.uk/index.php/encryption/flagstone.html www.stonewood.co.uk/index.php/encryption/flagstone.html]</ref>