[107001] in cryptography@c2.net mail archive
Re: Full Disk Encryption solutions selected for US Government use
daemon@ATHENA.MIT.EDU (Ali, Saqib)
Thu Nov 1 13:19:16 2007
Date: Tue, 30 Oct 2007 08:13:55 -0700
From: "Ali, Saqib" <docbook.xml@gmail.com>
To: "=?ISO-8859-2?Q?Ivan_Krsti=E6?=" <krstic@solarsail.hcs.harvard.edu>
Cc: "Hagai Bar-El" <info@hbarel.com>, "Steven M. Bellovin" <smb@cs.columbia.edu>,
Cryptography <cryptography@metzdowd.com>
In-Reply-To: <9CD84085-17B0-437D-9EFC-D650904CC0FF@solarsail.hcs.harvard.edu>
> Right -- I was unaware that Windows actually had any real (pre-boot)
> FDE solutions before about the time of BitLocker. But I only
> peripherally have any idea about Windows crypto solutions, so I
> wouldn't be surprised if I'm wrong. Cheers,
Windows have had FDE (with pre-boot) solutions for a long while. Here
is a list: http://www.full-disk-encryption.net/Full_Disc_Encryption.html
Note: BitLocker is NOT true FDE. It is only volume based encryption.
It has 3 modes. In one of the mode you can store the key on a external
USB device. Only in that mode BitLocker acts as a FDE solution with
pre-boot.
saqib
http://security-basics.blogspot.com/
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
