25C3 - 1.4.2.3
25th Chaos Communication Congress
Nothing to hide
| Referenten | |
|---|---|
|
Juergen Pabel |
| Programm | |
|---|---|
| Tag | Day 2 (2008-12-28) |
| Raum | Saal 3 |
| Beginn | 12:45 |
| Dauer | 01:00 |
| Info | |
| ID | 2882 |
| Veranstaltungstyp | lecture |
| Track | Hacking |
| Sprache der Veranstaltung | en |
| Feedback | |
|---|---|
|
Haben Sie diese Veranstaltung besucht? Feedback abgeben |
Full-Disk-Encryption Crash-Course
Everything to hide
This is not a hacking presentation, no vulnerabilities are presented. It's a crash-course in full-disk-encryption ("FDE") concepts, products and implementation aspects. An overview of both commercial and open-source offerings for Windows, Linux, and MacOSX is given. A (programmer's) look at the open-source solutions concludes the presentation.
Full-Disk-Encryption is an important aspect of data security and everyone should use an appropriate solution to protect their (especially mobile) systems and data. This lecture covers the technology behind Full-Disk-Encryption software products.
The established technical architectures of software solutions for Microsoft Windows and Linux are presented in this lecture: Pre-Boot-Authentication, encryption driver and in-place filesystem encryption.
An overview of commercial products and open-source offerings for Windows, Linux and OSX is given. Distinguishing features of specific products and additional topics are covered, including: TPM support (OS binding and key storage), multi-disk support and threats.
The last segment of the lecture focuses on open-source solutions: TrueCrypt's volume specifications, TrueCrypt's hidden volume capabilities and a comparison of in-place filesystem encryption implementations of TrueCrypt and DiskCryptor. A feature wish-list for open-source Full-Disk-Encryption solutions completes the lecture.