Data Encryption for Storage Devices - Revision history

Shellya: final edit i hope so

2009-04-11T00:55:36Z

final edit i hope so

← Older revision		Revision as of 00:55, 11 April 2009
Line 73:		Line 73:

	----		----
-	[[User:Shellya\|Shellya]] 18:16, 10 April 2009 (EDT)	+	[[User:Shellya\|Shellya]] 20:55, 10 April 2009 (EDT)

Shellya: /* Software Implementation */ changed the truecrypt and freeotfe links to point to wikipedia. i have the official sites in the external links section.

2009-04-11T00:47:44Z

Software Implementation: changed the truecrypt and freeotfe links to point to wikipedia. i have the official sites in the external links section.

← Older revision		Revision as of 00:47, 11 April 2009
Line 15:		Line 15:
	The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.		The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.
	=== Software Implementation ===		=== Software Implementation ===
-	Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems<sup>[6]</sup>. Additionally, free implementations are available, [http://~~www~~.~~truecrypt~~.org TrueCrypt] and [http://~~www~~.~~freeotfe~~.org FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.	+	Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems<sup>[6]</sup>. Additionally, free implementations are available, [http://en.wikipedia.org/wiki/TrueCrypt TrueCrypt] and [http://en.wikipedia.org/wiki/FreeOTFE FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.
	==== Security Techniques ====		==== Security Techniques ====
	Some or all of the following techniques may be employed by encryption software to keep data secure.		Some or all of the following techniques may be employed by encryption software to keep data secure.

Shellya: /* Comparison */

2009-04-11T00:45:56Z

Comparison

← Older revision		Revision as of 00:45, 11 April 2009
Line 25:		Line 25:
	Another feature that helps to ensure plausible deniability is the software technique of not leaving any signature or header that could lead to the existence of encrypted data being discovered. Data is encrypted in such a way to make it impossible to to tell from random data. This is done so that without knowing the key, encrypted data cannot be detected, and neither can hidden volumes.		Another feature that helps to ensure plausible deniability is the software technique of not leaving any signature or header that could lead to the existence of encrypted data being discovered. Data is encrypted in such a way to make it impossible to to tell from random data. This is done so that without knowing the key, encrypted data cannot be detected, and neither can hidden volumes.

-	== Comparison ==	+	== Comparison of Implementations ==
	=== Advantages ===		=== Advantages ===
	* Having the encryption technology on the actual device removes the requirement of having the CPU perform the calculations for the encryption process.		* Having the encryption technology on the actual device removes the requirement of having the CPU perform the calculations for the encryption process.

Shellya: /* Data Encryption */ added a main article link

2009-04-11T00:41:54Z

Data Encryption: added a main article link

← Older revision		Revision as of 00:41, 11 April 2009
Line 2:		Line 2:
	[[Image:usb_key.jpg\|frame\|A USB flash drive that encrypts and stores data.]]		[[Image:usb_key.jpg\|frame\|A USB flash drive that encrypts and stores data.]]
	== Data Encryption ==		== Data Encryption ==
		+	:''Main article: [http://en.wikipedia.org/wiki/Encryption Encryption]''
	Encryption is used in cryptography to transform plaintext to ciphertext<sup>[2]</sup>. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue<sup>[3]</sup>, the encryption of storage devices becomes an attractive way to avoid such issues.		Encryption is used in cryptography to transform plaintext to ciphertext<sup>[2]</sup>. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue<sup>[3]</sup>, the encryption of storage devices becomes an attractive way to avoid such issues.

Shellya: /* See Also */ added some more links

2009-04-11T00:36:25Z

Shellya: /* Disadvantages */

2009-04-11T00:33:04Z

Disadvantages

← Older revision		Revision as of 00:33, 11 April 2009
Line 36:		Line 36:
	* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process<sup>[7]</sup>.		* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process<sup>[7]</sup>.
	* If the user loses their key to the data, the data is lost.		* If the user loses their key to the data, the data is lost.
-	* Hardware implementations encrypt the entire disk, no option is given.	+	* Hardware implementations encrypt the entire disk, no option is given. This weakens the case for plausible deniability of encrypted data.

	== See Also ==		== See Also ==

Shellya: /* Advantages */ added another one

2009-04-11T00:32:25Z

Advantages: added another one

← Older revision		Revision as of 00:32, 11 April 2009
Line 30:		Line 30:
	* By having the encryption technology as part of the housing for a portable storage device, the actual physical hard drive within is a regular hard drive and can be switched for other compatible hard drives.		* By having the encryption technology as part of the housing for a portable storage device, the actual physical hard drive within is a regular hard drive and can be switched for other compatible hard drives.
	* Some implementations completely wipe all encrypted data after a certain number of failed attempts to unlock the information. This is useful when dealing with highly sensitive data.		* Some implementations completely wipe all encrypted data after a certain number of failed attempts to unlock the information. This is useful when dealing with highly sensitive data.
		+	* A combination of both implementations can be used to preserve plausible deniability on a device that encrypts the data itself. Since the hardware encrypts all data written to it, there is no way to deny that there is encrypted data on the drive. The software can be used to implement the security techniques discussed above to preserve plausible deniability.
		+
	=== Disadvantages ===		=== Disadvantages ===
	* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.		* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.

Shellya: /* Disadvantages */ added another disadvantage

2009-04-11T00:29:12Z

Disadvantages: added another disadvantage

← Older revision		Revision as of 00:29, 11 April 2009
Line 34:		Line 34:
	* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process<sup>[7]</sup>.		* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process<sup>[7]</sup>.
	* If the user loses their key to the data, the data is lost.		* If the user loses their key to the data, the data is lost.
		+	* Hardware implementations encrypt the entire disk, no option is given.

	== See Also ==		== See Also ==

Shellya: now am i finished?

2009-04-11T00:25:41Z

now am i finished?

← Older revision		Revision as of 00:25, 11 April 2009
Line 14:		Line 14:
	The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.		The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.
	=== Software Implementation ===		=== Software Implementation ===
-	Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems<sup>[7]</sup>. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.	+	Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems<sup>[6]</sup>. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.
	==== Security Techniques ====		==== Security Techniques ====
	Some or all of the following techniques may be employed by encryption software to keep data secure.		Some or all of the following techniques may be employed by encryption software to keep data secure.
Line 32:		Line 32:
	=== Disadvantages ===		=== Disadvantages ===
	* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.		* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.
-	* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process<sup>[6]</sup>.	+	* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process<sup>[7]</sup>.
	* If the user loses their key to the data, the data is lost.		* If the user loses their key to the data, the data is lost.

Line 52:		Line 52:
	[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']		[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

-	[6] [http://www.pcworld.com/article/~~158775~~/~~encrypted_drives~~.html ''~~Encrypted Drives Keep~~ Your ~~Files Safe~~'']	+	[6] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

-	[7] [http://www.pcworld.com/article/~~161519~~/~~whole_disk_encryption~~.html ''~~Protect~~ Your ~~Data With Whole-Disk Encryption~~'']	+	[7] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

	== External Links ==		== External Links ==

Shellya at 00:22, 11 April 2009

2009-04-11T00:22:13Z

← Older revision		Revision as of 00:22, 11 April 2009
Line 1:		Line 1:
	'''Data Encryption for Storage Devices''' is a special case of ''data at rest''<sup>[1]</sup> protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.		'''Data Encryption for Storage Devices''' is a special case of ''data at rest''<sup>[1]</sup> protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.
-		+	[[Image:usb_key.jpg\|frame\|A USB flash drive that encrypts and stores data.]]
	== Data Encryption ==		== Data Encryption ==
	Encryption is used in cryptography to transform plaintext to ciphertext<sup>[2]</sup>. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue<sup>[3]</sup>, the encryption of storage devices becomes an attractive way to avoid such issues.		Encryption is used in cryptography to transform plaintext to ciphertext<sup>[2]</sup>. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue<sup>[3]</sup>, the encryption of storage devices becomes an attractive way to avoid such issues.
Line 7:		Line 7:
	Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.		Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
	=== Hardware Implementation ===		=== Hardware Implementation ===
-	[[Image:~~usb_key~~.jpg\|frame\|A ~~USB flash~~ drive that ~~encrypts and stores data~~]]	+	[[Image:hdd_external_input.jpg\|frame\|A hard disk drive that requires the user to unlock the encryption key before use.]]
	Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008<sup>[4]</sup> but an actual standard was agreed upon and established in January 2009<sup>[5]</sup>. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows<sup>[5]</sup>:		Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008<sup>[4]</sup> but an actual standard was agreed upon and established in January 2009<sup>[5]</sup>. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows<sup>[5]</sup>:
	* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.		* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.

← Older revision		Revision as of 00:36, 11 April 2009
Line 40:		Line 40:
	== See Also ==		== See Also ==
	* [[Conventional Encryption Algorithms]]		* [[Conventional Encryption Algorithms]]
		+	* [[Corporate Security and IT Policies]]
	* [[Cryptography in Information Security]]		* [[Cryptography in Information Security]]
		+	* [[Information security awareness\|Information Security Awareness]]
		+	* [[Personal Data Protection and Privacy]]
	* [[Security and Storage Mediums]]		* [[Security and Storage Mediums]]
	* [[Steganography and Digital Watermarking]]		* [[Steganography and Digital Watermarking]]