I have written about the security implications of using sleep with encrypted drives in the past and have offered both short term and longer term solutions that would allow users to use sleep under some conditions and not risk (too much) a data breach. Today I am writing to offer another, common sense, alternative: Just don’t use sleep because you don’t really need it.
Protect Against the 4 SED Attacks Discussed at Black Hat
In a previous blog I wrote that at Black Hat Europe 2015, two forensics experts from KPMG Canada presented their findings in a presentation titled “Bypassing Self-Encrypting Drives (SED) in Enterprise Environments”.
4 SED Attacks and How to Mitigate Them
In November at Blackhat Europe 2015, two forensics experts from KPMG Canada presented their findings in a presentation titled “Bypassing Self-Encrypting Drives (SED) in Enterprise Environments”.
Opal, Opalite & Pyrite Self-Encrypting Drives (SED)
This year (2015) the Trusted Computing Group (TCG) Storage Work Group (SWG) published two new specifications derived from the Opal SED specification called Opalite and Pyrite. You may already be familiar with the benefits of using an Opal SED vs software encryption in your laptops and desktops, but are puzzled as to why there are 2 new standards. Perhaps you even wonder if they would be a better fit for your needs than Opal.
Separating Encryption and Key Management
In our previous blog posting, we explored the shortcomings of software-based full disk encryption (FDE) and made the case for switching to self-encrypting drives (SED) in the long run.
The Road Ahead for Full Disk Encryption
Software-based full disk encryption (FDE) technologies have been widely adopted to protect data stored on computing devices, most often laptops or desktops.
Common Criteria collaborative Protection Profiles for FDE
Software Full Drive Encryption (FDE) has been the prime choice for protecting the confidentiality of data on laptops for over a decade, but more and more Self-Encrypting drives (SEDs) are becoming the obvious choice for FDE because of their advantages in performance, transparency and security.
2015 Predictions for Full Disk Encryption & Key Management
Before we get too far into 2015, I want to go on record with a few predictions for the Full Disk Encryption world. Below are few things that I think will show up on a historical timeline for FDE and when we look back in five years to 2015.
Key Management and Full Disk Encryption (FDE)
Before I delve into key management for FDE, I want to clarify that the ideal FDE architecture has two main components. The actual encryption component is a separate layer from the key management.
Improving Forensic Recovery for SEDs
This week WinMagic announced that SecureDoc offers new interoperability with Guidance Software’s EnCase Forensic product – specifically – forensic data recovery on self-encrypting drives (SEDs).