Hardware-based full disk encryption: Difference between revisions

Revision as of 04:43, 17 October 2020

Revision as of 04:44, 17 October 2020

Line 20:

=== Enclosed hard disk drive FDE ===

Within a standard [[Harddrive#Form factors|hard drive form factor]] case the encryptor (BC), [[Cryptographic key|key]] store and a smaller form factor, commercially available, hard disk drive is enclosed.

*The enclosed hard disk drive's case can be [[tamper-evident]], so when retrieved the user can be assured that the [[Data breach|data has not been compromised]].

*The encryptors electronics including the [[Cryptographic key|key]] store and integral hard drive (if it is [[Solid-state drive|solid-state]]) can be protected by other [[Tamper resistance|tamper respondent]] measures.

*The key can be [[Crypto-shredding|purged]], allowing a user to prevent his [[Authentication factors#Authentication factors|authentication parameters]] being used without destroying the encrypted data. Later the same [[Cryptographic key|key]] can be re-loaded into the Enclosed hard disk drive FDE, to retrieve this data.

*Tampering is not an issue for SEDs as they cannot be read without the decryption key, regardless of access to the internal electronics {{Clarify|reason=see Talk page, decryption keys can be recovered from the internal electornics in several cases|date=July 2016}}.

For example: [[ViaSat|Viasat UK (formerly Stonewood Electronics)]] with their FlagStone and Eclypt<ref name="softpedia">{{cite web|url=http://news.softpedia.com/news/Stonewood-039-s-Eclypt-Drive-the-AES-256-Data-Fortress-84632.shtml |title=Softpedia on Eclypt Drive AES-256 |publisher=News.softpedia.com |date=2008-04-30 |accessdate=2013-08-06}}</ref> drives or GuardDisk <ref>{{cite web |title=Hardware Disk Encryption for the Masses, Finally! |url=https://www.turbotas.co.uk/2003/07/30/hardware-disk-encryption-for-the-masses-finally/ |website=turbotas.co.uk |publisher=Turbotas |accessdate=2020-05-22 |date=2003-05-30}}</ref> with an [[Radio-frequency identification|RFID]] token.

For example: Viasat UK (formerly Stonewood Electronics) with their FlagStone and Eclypt drives or GuardDisk with an RFID token.

=== Removable Hard Drive FDE ===