Full Disk Encryption - dangers?

Due to overwhelming demand, we have created a forum just dedicated to Toughbook users who use Linux!
Post Reply
Message
Author
plateaugame
Posts: 17
Joined: Tue Aug 26, 2014 6:09 pm

Full Disk Encryption - dangers?

#1 Post by plateaugame »

The Electronic Frontier Foundation recommends Full Disk Encryption:
https://www.eff.org/deeplinks/2012/11/p ... encryption
"Full Disk Encryption (FDE) is one of the best ways you can ensure all of the private information on your laptop stays private in case it's lost, seized, stolen, or if you choose to sell or give away your computer in the future. .."

However, this concern was raised on the 'ask ubuntu' forum:
http://askubuntu.com/questions/429590/w ... -ubuntu-13
"An enormous DISADVANTAGE (for me) if you use option no. 1 and encrypt your hard drive, is that: 1) if you forget or lose your pass-phrase/key you lose everything and cannot access anything again, and 2) if your Ubuntu installation completely beaks apart (does not boot, get corrupted etc) or if your PC hardware fails, at least all your files are in the clear and you can still read them on any computer !"

So is that a valid concern? If the PC/laptop hardware fails, what would be the process of extracting and decrypting the installation?

User avatar
safn1949
Posts: 544
Joined: Wed Jan 15, 2014 10:33 am

Re: Full Disk Encryption - dangers?

#2 Post by safn1949 »

The encryption is on the hard drive,you should be able to get into it still. But now that you ask I will take an 80gb drive,encrypt it then try to access it as an external.

I'm super curious and I got that kind of time.....will post back in a few hours.
2 CF-30Mk3's, 2 CF-71's, CF-L1, 3 CF-72's, CF-73, CF-74, CF-48, CF-50, CF-51Mk3, 2 CF-19's,7 CF-52's, FZ-A1 and other assorted beaters.

User avatar
Springfield
Posts: 1512
Joined: Wed Oct 07, 2009 9:19 pm
Location: FL

Re: Full Disk Encryption - dangers?

#3 Post by Springfield »

Windows encryption often has the option to create a "key" disk or usb stick file, as a backup for passwords. Does your unix have that?
ToughBooks: CF-74 73 53 52 51 31 30 29 28 27 25 19 18 08 07 C1 C2 F9 H1 M32 M33 M34 R2 S10 T8 T5 T4 T2 U1 W2 Y2 VDW07 PDRC ...
GoBooks: VR-2, XR-1, IX-260+, IX-350

User avatar
safn1949
Posts: 544
Joined: Wed Jan 15, 2014 10:33 am

Re: Full Disk Encryption - dangers?

#4 Post by safn1949 »

Truecrypt has the same thing,I have not had time to test the external drive but I will.
2 CF-30Mk3's, 2 CF-71's, CF-L1, 3 CF-72's, CF-73, CF-74, CF-48, CF-50, CF-51Mk3, 2 CF-19's,7 CF-52's, FZ-A1 and other assorted beaters.

User avatar
Banshee
Posts: 100
Joined: Thu Dec 05, 2013 5:51 pm
Location: West Midlands, United Kingdom

Re: Full Disk Encryption - dangers?

#5 Post by Banshee »

For corporate use we use Sophos SafeGuard Full Disk Encryption at work which uses AES 256 encryption methods.

It is a right royal PITA!!! The amount of times Windows has corrupted and we've had to boot into a virtual environment with CD to extract all of the user data from it :pat:

We have no choice in the matter as where I work should any of our data get into the hands of the public then we could face massive fines
CF-19K Mk3 (KHRAHPE) Core 2 Duo, 500GB S/ATA HDD, 4GB RAM, Waterproof Rubber Lit Keyboard
Upgrades Pending - SSD HDD, 8GB RAM Upgrade, GPS Upgrade Kit

CF-U1 Mk1 - Windscreen mounted with Freeview and GPS OS Maps

plateaugame
Posts: 17
Joined: Tue Aug 26, 2014 6:09 pm

Re: Full Disk Encryption - dangers?

#6 Post by plateaugame »

safn1949 wrote:The encryption is on the hard drive,you should be able to get into it still. But now that you ask I will take an 80gb drive,encrypt it then try to access it as an external.

I'm super curious and I got that kind of time.....will post back in a few hours.
Did you get a chance to give this a try?

User avatar
safn1949
Posts: 544
Joined: Wed Jan 15, 2014 10:33 am

Re: Full Disk Encryption - dangers?

#7 Post by safn1949 »

No I did not,been too busy. I do know that true crypt will decrypt a corrupted drive with their recovery feature. I had to do it once on a 1 TB drive,took 3 days but it worked.

I will try to do it tomorrow with the 80gb,quit my day job so I might get it.
2 CF-30Mk3's, 2 CF-71's, CF-L1, 3 CF-72's, CF-73, CF-74, CF-48, CF-50, CF-51Mk3, 2 CF-19's,7 CF-52's, FZ-A1 and other assorted beaters.

Post Reply

Return to “The LINUX forum!!!”