Security Basics mailing list archives

Re: How to Test HDD Encryption


From: "Ali, Saqib" <docbook.xml () gmail com>
Date: Tue, 13 Nov 2007 08:36:33 -0800

Most FDE vendors will provide you with Linux boot CD that will mount
you HDD. If the the drive is properly encrypted and locked, you should
not be able to read any useful data from the drive.

Another option is in the enable FDE on a HDD and then hand it over to
those data recovery guys, and ask them to retrieve useful data out of
the drive. This approach will cost u $200-300, but it is excellent
option if you want to sell FDE to the management.

Saqib Ali, CISSP, ISSAP
http://www.full-disk-encryption.net


On 12 Nov 2007 06:01:42 -0000, infosecofficer () gmail com
<infosecofficer () gmail com> wrote:
Hi



How can we ascertain that the encryption software we have selected is doing its jobs.

A small test like removing the hdd of an encrypted laptop and attaching it as an external drive on another laptop 
shows the drive as unformatted. So far So Good..



But is there any tool available to demonstrate to the management that even the professionals cannot break in even if 
they lay their hands on the drive physically.



I am basically trying to make a case to push for drive encryption in our organization.



Please group suggest something.....





Best Regards



Samir



--


Current thread: