Computing and Software Wiki - User contributions [en]

User:Shellya

2009-04-11T01:01:27Z

Shellya: New page: Coolest guy in the world, bar none.

Coolest guy in the world, bar none.

Data Encryption for Storage Devices

2009-04-11T00:55:36Z

Shellya: final edit i hope so

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data.]]
== Data Encryption ==
:''Main article: [http://en.wikipedia.org/wiki/Encryption Encryption]''
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:hdd_external_input.jpg|frame|A hard disk drive that requires the user to unlock the encryption key before use.]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems[6]. Additionally, free implementations are available, [http://en.wikipedia.org/wiki/TrueCrypt TrueCrypt] and [http://en.wikipedia.org/wiki/FreeOTFE FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software to keep data secure.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
This is a feature that adds to the security of plausible deniability. A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.
===== Identifying Features =====
Another feature that helps to ensure plausible deniability is the software technique of not leaving any signature or header that could lead to the existence of encrypted data being discovered. Data is encrypted in such a way to make it impossible to to tell from random data. This is done so that without knowing the key, encrypted data cannot be detected, and neither can hidden volumes.

== Comparison of Implementations ==
=== Advantages ===
* Having the encryption technology on the actual device removes the requirement of having the CPU perform the calculations for the encryption process.
* The software implementation allows for flexibility in the way volumes, entire disks, or single files may be encrypted.
* By having the encryption technology as part of the housing for a portable storage device, the actual physical hard drive within is a regular hard drive and can be switched for other compatible hard drives.
* Some implementations completely wipe all encrypted data after a certain number of failed attempts to unlock the information. This is useful when dealing with highly sensitive data.
* A combination of both implementations can be used to preserve plausible deniability on a device that encrypts the data itself. Since the hardware encrypts all data written to it, there is no way to deny that there is encrypted data on the drive. The software can be used to implement the security techniques discussed above to preserve plausible deniability.

=== Disadvantages ===
* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.
* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process[7].
* If the user loses their key to the data, the data is lost.
* Hardware implementations encrypt the entire disk, no option is given. This weakens the case for plausible deniability of encrypted data.

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Corporate Security and IT Policies]]
* [[Cryptography in Information Security]]
* [[Information security awareness|Information Security Awareness]]
* [[Personal Data Protection and Privacy]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

[7] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 20:55, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-11T00:47:44Z

Shellya: /* Software Implementation */ changed the truecrypt and freeotfe links to point to wikipedia. i have the official sites in the external links section.

Data Encryption for Storage Devices

2009-04-11T00:45:56Z

Shellya: /* Comparison */

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data.]]
== Data Encryption ==
:''Main article: [http://en.wikipedia.org/wiki/Encryption Encryption]''
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:hdd_external_input.jpg|frame|A hard disk drive that requires the user to unlock the encryption key before use.]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems[6]. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software to keep data secure.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
This is a feature that adds to the security of plausible deniability. A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.
===== Identifying Features =====
Another feature that helps to ensure plausible deniability is the software technique of not leaving any signature or header that could lead to the existence of encrypted data being discovered. Data is encrypted in such a way to make it impossible to to tell from random data. This is done so that without knowing the key, encrypted data cannot be detected, and neither can hidden volumes.

== Comparison of Implementations ==
=== Advantages ===
* Having the encryption technology on the actual device removes the requirement of having the CPU perform the calculations for the encryption process.
* The software implementation allows for flexibility in the way volumes, entire disks, or single files may be encrypted.
* By having the encryption technology as part of the housing for a portable storage device, the actual physical hard drive within is a regular hard drive and can be switched for other compatible hard drives.
* Some implementations completely wipe all encrypted data after a certain number of failed attempts to unlock the information. This is useful when dealing with highly sensitive data.
* A combination of both implementations can be used to preserve plausible deniability on a device that encrypts the data itself. Since the hardware encrypts all data written to it, there is no way to deny that there is encrypted data on the drive. The software can be used to implement the security techniques discussed above to preserve plausible deniability.

=== Disadvantages ===
* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.
* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process[7].
* If the user loses their key to the data, the data is lost.
* Hardware implementations encrypt the entire disk, no option is given. This weakens the case for plausible deniability of encrypted data.

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Corporate Security and IT Policies]]
* [[Cryptography in Information Security]]
* [[Information security awareness|Information Security Awareness]]
* [[Personal Data Protection and Privacy]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

[7] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-11T00:41:54Z

Shellya: /* Data Encryption */ added a main article link

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data.]]
== Data Encryption ==
:''Main article: [http://en.wikipedia.org/wiki/Encryption Encryption]''
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:hdd_external_input.jpg|frame|A hard disk drive that requires the user to unlock the encryption key before use.]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems[6]. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software to keep data secure.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
This is a feature that adds to the security of plausible deniability. A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.
===== Identifying Features =====
Another feature that helps to ensure plausible deniability is the software technique of not leaving any signature or header that could lead to the existence of encrypted data being discovered. Data is encrypted in such a way to make it impossible to to tell from random data. This is done so that without knowing the key, encrypted data cannot be detected, and neither can hidden volumes.

== Comparison ==
=== Advantages ===
* Having the encryption technology on the actual device removes the requirement of having the CPU perform the calculations for the encryption process.
* The software implementation allows for flexibility in the way volumes, entire disks, or single files may be encrypted.
* By having the encryption technology as part of the housing for a portable storage device, the actual physical hard drive within is a regular hard drive and can be switched for other compatible hard drives.
* Some implementations completely wipe all encrypted data after a certain number of failed attempts to unlock the information. This is useful when dealing with highly sensitive data.
* A combination of both implementations can be used to preserve plausible deniability on a device that encrypts the data itself. Since the hardware encrypts all data written to it, there is no way to deny that there is encrypted data on the drive. The software can be used to implement the security techniques discussed above to preserve plausible deniability.

=== Disadvantages ===
* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.
* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process[7].
* If the user loses their key to the data, the data is lost.
* Hardware implementations encrypt the entire disk, no option is given. This weakens the case for plausible deniability of encrypted data.

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Corporate Security and IT Policies]]
* [[Cryptography in Information Security]]
* [[Information security awareness|Information Security Awareness]]
* [[Personal Data Protection and Privacy]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

[7] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-11T00:36:25Z

Shellya: /* See Also */ added some more links

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data.]]
== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:hdd_external_input.jpg|frame|A hard disk drive that requires the user to unlock the encryption key before use.]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems[6]. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software to keep data secure.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
This is a feature that adds to the security of plausible deniability. A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.
===== Identifying Features =====
Another feature that helps to ensure plausible deniability is the software technique of not leaving any signature or header that could lead to the existence of encrypted data being discovered. Data is encrypted in such a way to make it impossible to to tell from random data. This is done so that without knowing the key, encrypted data cannot be detected, and neither can hidden volumes.

== Comparison ==
=== Advantages ===
* Having the encryption technology on the actual device removes the requirement of having the CPU perform the calculations for the encryption process.
* The software implementation allows for flexibility in the way volumes, entire disks, or single files may be encrypted.
* By having the encryption technology as part of the housing for a portable storage device, the actual physical hard drive within is a regular hard drive and can be switched for other compatible hard drives.
* Some implementations completely wipe all encrypted data after a certain number of failed attempts to unlock the information. This is useful when dealing with highly sensitive data.
* A combination of both implementations can be used to preserve plausible deniability on a device that encrypts the data itself. Since the hardware encrypts all data written to it, there is no way to deny that there is encrypted data on the drive. The software can be used to implement the security techniques discussed above to preserve plausible deniability.

=== Disadvantages ===
* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.
* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process[7].
* If the user loses their key to the data, the data is lost.
* Hardware implementations encrypt the entire disk, no option is given. This weakens the case for plausible deniability of encrypted data.

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Corporate Security and IT Policies]]
* [[Cryptography in Information Security]]
* [[Information security awareness|Information Security Awareness]]
* [[Personal Data Protection and Privacy]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

[7] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-11T00:33:04Z

Shellya: /* Disadvantages */

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data.]]
== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:hdd_external_input.jpg|frame|A hard disk drive that requires the user to unlock the encryption key before use.]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems[6]. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software to keep data secure.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
This is a feature that adds to the security of plausible deniability. A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.
===== Identifying Features =====
Another feature that helps to ensure plausible deniability is the software technique of not leaving any signature or header that could lead to the existence of encrypted data being discovered. Data is encrypted in such a way to make it impossible to to tell from random data. This is done so that without knowing the key, encrypted data cannot be detected, and neither can hidden volumes.

== Comparison ==
=== Advantages ===
* Having the encryption technology on the actual device removes the requirement of having the CPU perform the calculations for the encryption process.
* The software implementation allows for flexibility in the way volumes, entire disks, or single files may be encrypted.
* By having the encryption technology as part of the housing for a portable storage device, the actual physical hard drive within is a regular hard drive and can be switched for other compatible hard drives.
* Some implementations completely wipe all encrypted data after a certain number of failed attempts to unlock the information. This is useful when dealing with highly sensitive data.
* A combination of both implementations can be used to preserve plausible deniability on a device that encrypts the data itself. Since the hardware encrypts all data written to it, there is no way to deny that there is encrypted data on the drive. The software can be used to implement the security techniques discussed above to preserve plausible deniability.

=== Disadvantages ===
* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.
* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process[7].
* If the user loses their key to the data, the data is lost.
* Hardware implementations encrypt the entire disk, no option is given. This weakens the case for plausible deniability of encrypted data.

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Cryptography in Information Security]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

[7] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-11T00:32:25Z

Shellya: /* Advantages */ added another one

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data.]]
== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:hdd_external_input.jpg|frame|A hard disk drive that requires the user to unlock the encryption key before use.]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems[6]. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software to keep data secure.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
This is a feature that adds to the security of plausible deniability. A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.
===== Identifying Features =====
Another feature that helps to ensure plausible deniability is the software technique of not leaving any signature or header that could lead to the existence of encrypted data being discovered. Data is encrypted in such a way to make it impossible to to tell from random data. This is done so that without knowing the key, encrypted data cannot be detected, and neither can hidden volumes.

== Comparison ==
=== Advantages ===
* Having the encryption technology on the actual device removes the requirement of having the CPU perform the calculations for the encryption process.
* The software implementation allows for flexibility in the way volumes, entire disks, or single files may be encrypted.
* By having the encryption technology as part of the housing for a portable storage device, the actual physical hard drive within is a regular hard drive and can be switched for other compatible hard drives.
* Some implementations completely wipe all encrypted data after a certain number of failed attempts to unlock the information. This is useful when dealing with highly sensitive data.
* A combination of both implementations can be used to preserve plausible deniability on a device that encrypts the data itself. Since the hardware encrypts all data written to it, there is no way to deny that there is encrypted data on the drive. The software can be used to implement the security techniques discussed above to preserve plausible deniability.

=== Disadvantages ===
* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.
* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process[7].
* If the user loses their key to the data, the data is lost.
* Hardware implementations encrypt the entire disk, no option is given.

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Cryptography in Information Security]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

[7] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-11T00:29:12Z

Shellya: /* Disadvantages */ added another disadvantage

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data.]]
== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:hdd_external_input.jpg|frame|A hard disk drive that requires the user to unlock the encryption key before use.]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems[6]. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software to keep data secure.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
This is a feature that adds to the security of plausible deniability. A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.
===== Identifying Features =====
Another feature that helps to ensure plausible deniability is the software technique of not leaving any signature or header that could lead to the existence of encrypted data being discovered. Data is encrypted in such a way to make it impossible to to tell from random data. This is done so that without knowing the key, encrypted data cannot be detected, and neither can hidden volumes.

== Comparison ==
=== Advantages ===
* Having the encryption technology on the actual device removes the requirement of having the CPU perform the calculations for the encryption process.
* The software implementation allows for flexibility in the way volumes, entire disks, or single files may be encrypted.
* By having the encryption technology as part of the housing for a portable storage device, the actual physical hard drive within is a regular hard drive and can be switched for other compatible hard drives.
* Some implementations completely wipe all encrypted data after a certain number of failed attempts to unlock the information. This is useful when dealing with highly sensitive data.
=== Disadvantages ===
* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.
* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process[7].
* If the user loses their key to the data, the data is lost.
* Hardware implementations encrypt the entire disk, no option is given.

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Cryptography in Information Security]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

[7] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-11T00:25:41Z

Shellya: now am i finished?

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data.]]
== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:hdd_external_input.jpg|frame|A hard disk drive that requires the user to unlock the encryption key before use.]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems[6]. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software to keep data secure.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
This is a feature that adds to the security of plausible deniability. A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.
===== Identifying Features =====
Another feature that helps to ensure plausible deniability is the software technique of not leaving any signature or header that could lead to the existence of encrypted data being discovered. Data is encrypted in such a way to make it impossible to to tell from random data. This is done so that without knowing the key, encrypted data cannot be detected, and neither can hidden volumes.

== Comparison ==
=== Advantages ===
* Having the encryption technology on the actual device removes the requirement of having the CPU perform the calculations for the encryption process.
* The software implementation allows for flexibility in the way volumes, entire disks, or single files may be encrypted.
* By having the encryption technology as part of the housing for a portable storage device, the actual physical hard drive within is a regular hard drive and can be switched for other compatible hard drives.
* Some implementations completely wipe all encrypted data after a certain number of failed attempts to unlock the information. This is useful when dealing with highly sensitive data.
=== Disadvantages ===
* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.
* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process[7].
* If the user loses their key to the data, the data is lost.

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Cryptography in Information Security]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

[7] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-11T00:22:13Z

Shellya:

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data.]]
== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:hdd_external_input.jpg|frame|A hard disk drive that requires the user to unlock the encryption key before use.]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems[7]. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software to keep data secure.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
This is a feature that adds to the security of plausible deniability. A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.
===== Identifying Features =====
Another feature that helps to ensure plausible deniability is the software technique of not leaving any signature or header that could lead to the existence of encrypted data being discovered. Data is encrypted in such a way to make it impossible to to tell from random data. This is done so that without knowing the key, encrypted data cannot be detected, and neither can hidden volumes.

== Comparison ==
=== Advantages ===
* Having the encryption technology on the actual device removes the requirement of having the CPU perform the calculations for the encryption process.
* The software implementation allows for flexibility in the way volumes, entire disks, or single files may be encrypted.
* By having the encryption technology as part of the housing for a portable storage device, the actual physical hard drive within is a regular hard drive and can be switched for other compatible hard drives.
* Some implementations completely wipe all encrypted data after a certain number of failed attempts to unlock the information. This is useful when dealing with highly sensitive data.
=== Disadvantages ===
* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.
* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process[6].
* If the user loses their key to the data, the data is lost.

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Cryptography in Information Security]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

[7] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

File:Hdd external input.jpg

2009-04-11T00:17:51Z

Shellya:

Data Encryption for Storage Devices

2009-04-11T00:08:52Z

Shellya: finished?

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.

== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive. The key can be physically inputted to the housing in the case of a portable storage device (if such input is allowed), or simply entered when the volume is mounted.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in the MAC OS and Windows Vista operating systems[7]. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE ('''Free''' '''O'''n '''T'''he '''F'''ly '''E'''ncryption)] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software to keep data secure.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
This is a feature that adds to the security of plausible deniability. A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.
===== Identifying Features =====
Another feature that helps to ensure plausible deniability is the software technique of not leaving any signature or header that could lead to the existence of encrypted data being discovered. Data is encrypted in such a way to make it impossible to to tell from random data. This is done so that without knowing the key, encrypted data cannot be detected, and neither can hidden volumes.

== Comparison ==
=== Advantages ===
* Having the encryption technology on the actual device removes the requirement of having the CPU perform the calculations for the encryption process.
* The software implementation allows for flexibility in the way volumes, entire disks, or single files may be encrypted.
* By having the encryption technology as part of the housing for a portable storage device, the actual physical hard drive within is a regular hard drive and can be switched for other compatible hard drives.
* Some implementations completely wipe all encrypted data after a certain number of failed attempts to unlock the information. This is useful when dealing with highly sensitive data.
=== Disadvantages ===
* The cost of storage devices that encrypt data themselves is higher than storage devices that do not. This may be an issue for home/casual use.
* Proper benchmarking has not been performed yet on hard drives that take care of the encryption process[6].
* If the user loses their key to the data, the data is lost.

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Cryptography in Information Security]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

[7] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-10T23:50:24Z

Shellya: /* Identifying Marks */ added in words.

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.

== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in MAC OSX and Windows Vista[7]. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
This is a feature that adds to the security of plausible deniability. A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.

===== Identifying Features =====
Another feature that helps to ensure plausible deniability is the software technique of not leaving any signature or header that could lead to the existence of encrypted data being discovered. Data is encrypted in such a way to make it impossible to to tell from random data. This is done so that without knowing the key, encrypted data cannot be detected, and neither can hidden volumes.

=== Advantages ===
* Removes the requirement of having the CPU perform the calculations for the encryption process by performing the encryption itself.
=== Disadvantages ===
* The cost of these storage devices is significantly higher than storage devices that do not perform encryption.
* Proper benchmarking has not been performed yet[6].

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Cryptography in Information Security]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

[7] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-10T23:44:45Z

Shellya: /* Hidden Volumes */ added a single sentence

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.

== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in MAC OSX and Windows Vista[7]. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
This is a feature that adds to the security of plausible deniability. A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.

===== Identifying Marks =====
=== Advantages ===
* Removes the requirement of having the CPU perform the calculations for the encryption process by performing the encryption itself.
=== Disadvantages ===
* The cost of these storage devices is significantly higher than storage devices that do not perform encryption.
* Proper benchmarking has not been performed yet[6].

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Cryptography in Information Security]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

[7] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-10T23:40:24Z

Shellya: /* Data Encryption */ edit of some english.

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.

== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data is encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in MAC OSX and Windows Vista[7]. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.
===== Identifying Marks =====
=== Advantages ===
* Removes the requirement of having the CPU perform the calculations for the encryption process by performing the encryption itself.
=== Disadvantages ===
* The cost of these storage devices is significantly higher than storage devices that do not perform encryption.
* Proper benchmarking has not been performed yet[6].

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Cryptography in Information Security]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

[7] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-10T23:39:35Z

Shellya:

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.

== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data was encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or through the use of software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The standards were established by the [https://www.trustedcomputinggroup.org/groups/storage Trusted Computing Group (TCG)] and are outlined as follows[5]:
* The Opal specification, which outlines minimum requirements for storage devices used in PCs and laptops.
* The Enterprise Security Subsystem Class Specification, which is aimed at drives in data centers and high-volume applications, where typically there is a minimum security configuration at installation.
* The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.
The location of the technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive.
=== Software Implementation ===
Software implementations are applications which allow a user to encrypt a portion or all of a storage device. Even single files can be individually encrypted. Some implementations provide techniques to prevent the data from being found. Software encryption is offered natively in MAC OSX and Windows Vista[7]. Additionally, free implementations are available, [http://www.truecrypt.org TrueCrypt] and [http://www.freeotfe.org FreeOTFE] are two examples of this.
==== Security Techniques ====
Some or all of the following techniques may be employed by encryption software.
===== Plausible Deniability =====
The purpose of encrypting data is to keep it secure. The software may encrypt the data in such a way that the existence of the encrypted data is unprovable. [http://en.wikipedia.org/wiki/Plausible_deniability#Use_in_cryptography Plausible deniability] may even be extended to further levels for added security.
===== Hidden Volumes =====
A hidden volume is a [[Steganography and Digital Watermarking|steganographic]] feature that allows "hidden" volumes to be created within a "container" volume. The user will place important looking files within the container volume, but the sensitive data that the user is really trying to protect should be stored within the hidden volume. This method hides the data within what is thought to be hidden data. An attacker that obtains the key to the first volume would find the data that looks important, but would never see the data hidden within the second layer.
===== Identifying Marks =====
=== Advantages ===
* Removes the requirement of having the CPU perform the calculations for the encryption process by performing the encryption itself.
=== Disadvantages ===
* The cost of these storage devices is significantly higher than storage devices that do not perform encryption.
* Proper benchmarking has not been performed yet[6].

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Cryptography in Information Security]]
* [[Security and Storage Mediums]]
* [[Steganography and Digital Watermarking]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

[7] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]
* [https://www.trustedcomputinggroup.org/groups/storage/ Trusted Computing Group]
* [http://www.tomshardware.com/reviews/truecrypt-security-hdd,2125.html ''Protect Your Data With Encryption : TrueCrypt 6.1--Tried And Tested '']

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-10T22:52:15Z

Shellya:

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.

== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data was encrypted before being written, the data is still protected unless the key is known. With the theft of personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or different software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5]. The location of technology that encrypts the data depends on the type of storage medium. For an internal storage drive or USB drive, the technology is built into the device. In the case of portable storage drives, the technology may be built into the drive or into the housing for the drive.
==== Advantages ====
* Removes the requirement of having the CPU perform the calculations for the encryption process by performing the encryption itself.
*
==== Disadvantages ====
* The cost of these storage devices is significantly higher than storage devices that do not perform encryption.
* Proper benchmarking has not been performed yet[6].
=== Software Implementation ===
Software encryption is offered natively in MAC OSX and Windows Vista[7].
==== Advantages ====
Obviously.
==== Disadvantages ====
Obviously.

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Security and Storage Mediums]]
* [[Cryptography in Information Security]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/158775/encrypted_drives.html ''Encrypted Drives Keep Your Files Safe'']

[7] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-10T22:16:39Z

Shellya: moving stuff around, got rid of the section on storage mediums because there's an entire page dedicated to that crap

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.

== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data was encrypted before being written, the data is still protected unless the key is known. With the theft/loss of hard drive with personal data becoming an issue[3], the encryption of storage devices becomes an attractive way to avoid such issues.

== Implementations ==
Data can be encrypted through encryption technology built into the storage medium, or different software that encrypts data before writing it.
=== Hardware Implementation ===
[[Image:usb_key.jpg|frame|A USB flash drive that encrypts and stores data]]
Hardware implementations include hard disk drives, portable storage drives, and USB flash drives. Encrypted hard disks have been available since April 2008[4] but an actual standard was agreed upon and established in January 2009[5].
==== Advantages ====
Obviously.
==== Disadvantages ====
Obviously.
=== Software Implementation ===
Software encryption is offered natively in MAC OSX and Windows Vista[6] as well as commercial or free applications.
==== Advantages ====
Obviously.
==== Disadvantages ====
Obviously.

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Security and Storage Mediums]]
* [[Cryptography in Information Security]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[3] [http://www.pcworld.com/article/131603/tsa_hard_drive_missing.html ''TSA Hard Drive Missing'']

[4] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[5] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[6] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]
* [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

----
[[User:Shellya|Shellya]] 18:16, 10 April 2009 (EDT)

Data Encryption for Storage Devices

2009-04-10T21:32:14Z

Shellya:

'''Data Encryption for Storage Devices''' is a special case of ''data at rest''[1] protection. Data can be encrypted through the use of software, or hardware itself can encrypt data as it is saved to the device.

== Data Encryption ==
Encryption is used in cryptography to transform plaintext to ciphertext[2]. In the case of storage devices, encrypted data that is stored can only be accessed with the proper authentication. Physical theft of the medium negates password protection since the data can simply be read from it. On the other hand, if the data was encrypted before being written, the data is still protected unless the key is known.

== Implementations ==
Data can be encrypted through the use of different software, or the storage device itself can encrypt the data.
=== Hardware Implementation ===
Encrypted hard disks have been available since April 2008[2] but an actual standard was agreed upon and established in January 2009[3].
=== Software Implementation ===
Software encryption is offered natively in MAC OSX and Windows Vista[4] as well as commercial or free applications.

== Storage Mediums ==
Talk about hard drives and usb keys lol!
[[Image:usb_key.jpg|frame|A USB flash drive that stores encrypted data]]
=== Hard Disk Drives ===
HDD yay!
=== USB Keys ===
Thumb drives!

== See Also ==
* [[Conventional Encryption Algorithms]]
* [[Security and Storage Mediums]]

== References ==
[1] [http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci1143799,00.html Data at rest definition]

[2] [http://en.wikipedia.org/wiki/Encryption Wikipedia:Encryption]

[2] [http://www.pcworld.com/businesscenter/blogs/on_hardware/144919/fujitsu_ups_ante_on_integral_hard_disk_encryption.html ''Fujitsu Ups Ante on Integral Hard Disk Encryption'']

[3] [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=storage&articleId=9126869&taxonomyId=19&intsrc=kc_top ''Coming soon: Full-disk encryption for all computer drives'']

[4] [http://www.pcworld.com/article/161519/whole_disk_encryption.html ''Protect Your Data With Whole-Disk Encryption'']

== External Links ==
* [https://siswg.net/ IEEE Security in Storage Working Group]
* [http://tldp.org/HOWTO/Disk-Encryption-HOWTO/ Disk Encryption HowTo (Linux)]
* [http://www.freeotfe.org/ Official FreeOTFE Website]
* [http://www.truecrypt.org/ Official TrueCrypt Website]

----
[[User:Shellya|Shellya]] 17:32, 10 April 2009 (EDT)

File:Usb key.jpg

2009-04-10T20:56:17Z

Shellya:

Data Encryption for Storage Devices

2009-04-10T00:46:12Z

Shellya:

Introduction material here.
== Overview ==
Some words here
== Implementations ==
=== Hardware Implementation ===
More words here
=== Software Implementation ===
Even more words
== See Also ==
Other CASWiki pages here
== External Links ==
Self explanatory
== References ==
etc etc.

Data Encryption for Storage Devices

2009-04-10T00:37:58Z

Shellya:

Introduction material here.

== Overview ==
Some words here

== Implementations ==
=== Hardware Implementation ===
More words here

=== Software Implementation ===
Even more words

== See Also ==
Other CASWiki pages here

== External Links ==
Self explanatory

== References ==
etc etc.

Data Encryption for Storage Devices

2009-04-08T22:43:28Z

Shellya: setup blarg

Introduction material here.

== Overview ==
Some words here

== Implementations ==
=== Hardware Implementation ===
More words here

=== Software Implementation ===
Even more words

== References ==
etc etc.

Data Encryption for Storage Devices

2009-04-06T15:41:15Z

Shellya: New page: lol

lol