Filesystem-level encryption: Difference between revisions

Revision as of 21:22, 11 November 2018

Revision as of 03:17, 10 July 2019

Line 1:

{{Unreferenced|date=July 2009}}

'''Filesystem-level encryption''', often called '''file-based encryption''', '''FBE''', or '''file/folder encryption''', is a form of [[disk encryption]] where individual files or directories are [[encryption|encrypted]] by the [[file system]] itself.

This is in contrast to [[full disk encryption]] where the entire partition or disk, in which the file system resides, is encrypted.

Line 9:

The advantages of filesystem-level encryption include:

* flexible file-based [[key management]], so that each file can be and usually is encrypted with a separate encryption key{{factcitation needed|date=November 2013}}

* individual management of encrypted files e.g. incremental backups of the individual changed files even in encrypted form, rather than backup of the entire encrypted volume{{clarify|how it differs from a _non-crypto_ incremental-backup, please... and the purpose (e.g. importance of backing up to another encrypted physical-disk so data remains secure but a lost token, lost disk, etc doesn't make the data irretrievable?)|date=January 2011}}

* [[access control]] can be enforced through the use of [[public-key cryptography]], and

Line 27:

==See also==

{{Portal|Cryptography}}

* [[Steganographic file system]]

* [[List of cryptographic file systems]]