Disk Encryption

CompTIA Security+ Certification (SY0-501) Chapter 5 - Securing Individual Systems
6 minutes
Share the link to this page
Copied
  Completed
You need to have access to the item to view this lesson.
One-time Fee
$99.99
List Price:  $139.99
You save:  $40
€91.73
List Price:  €128.43
You save:  €36.69
£78.50
List Price:  £109.90
You save:  £31.40
CA$135.42
List Price:  CA$189.60
You save:  CA$54.17
A$152.22
List Price:  A$213.12
You save:  A$60.89
S$133.77
List Price:  S$187.28
You save:  S$53.51
HK$781.89
List Price:  HK$1,094.68
You save:  HK$312.79
CHF 88.30
List Price:  CHF 123.63
You save:  CHF 35.32
NOK kr1,058
List Price:  NOK kr1,481.24
You save:  NOK kr423.24
DKK kr684.10
List Price:  DKK kr957.77
You save:  DKK kr273.66
NZ$164.15
List Price:  NZ$229.81
You save:  NZ$65.66
د.إ367.20
List Price:  د.إ514.09
You save:  د.إ146.89
৳10,978.23
List Price:  ৳15,369.96
You save:  ৳4,391.73
₹8,290.53
List Price:  ₹11,607.08
You save:  ₹3,316.54
RM471.80
List Price:  RM660.54
You save:  RM188.74
₦156,534.34
List Price:  ₦219,154.34
You save:  ₦62,620
₨27,950.66
List Price:  ₨39,132.05
You save:  ₨11,181.38
฿3,595.26
List Price:  ฿5,033.51
You save:  ฿1,438.25
₺3,229.78
List Price:  ₺4,521.83
You save:  ₺1,292.04
B$499.40
List Price:  B$699.18
You save:  B$199.78
R1,883.20
List Price:  R2,636.56
You save:  R753.35
Лв179.42
List Price:  Лв251.19
You save:  Лв71.77
₩133,286.20
List Price:  ₩186,606.01
You save:  ₩53,319.81
₪365.03
List Price:  ₪511.06
You save:  ₪146.02
₱5,561.09
List Price:  ₱7,785.75
You save:  ₱2,224.66
¥14,911.76
List Price:  ¥20,877.07
You save:  ¥5,965.30
MX$1,670.32
List Price:  MX$2,338.52
You save:  MX$668.19
QR364.82
List Price:  QR510.77
You save:  QR145.94
P1,359.04
List Price:  P1,902.71
You save:  P543.67
KSh13,398.66
List Price:  KSh18,758.66
You save:  KSh5,360
E£4,718.65
List Price:  E£6,606.31
You save:  E£1,887.65
ብር5,656.15
List Price:  ብር7,918.84
You save:  ብር2,262.68
Kz83,512.74
List Price:  Kz116,921.18
You save:  Kz33,408.44
CLP$93,810.03
List Price:  CLP$131,337.80
You save:  CLP$37,527.76
CN¥710.61
List Price:  CN¥994.89
You save:  CN¥284.27
RD$5,917.87
List Price:  RD$8,285.25
You save:  RD$2,367.38
DA13,435.55
List Price:  DA18,810.31
You save:  DA5,374.76
FJ$226.69
List Price:  FJ$317.37
You save:  FJ$90.68
Q780.94
List Price:  Q1,093.35
You save:  Q312.40
GY$20,949.18
List Price:  GY$29,329.69
You save:  GY$8,380.51
ISK kr13,659.63
List Price:  ISK kr19,124.03
You save:  ISK kr5,464.40
DH1,002.67
List Price:  DH1,403.78
You save:  DH401.11
L1,768.33
List Price:  L2,475.73
You save:  L707.40
ден5,652.42
List Price:  ден7,913.61
You save:  ден2,261.19
MOP$805.88
List Price:  MOP$1,128.27
You save:  MOP$322.38
N$1,866.55
List Price:  N$2,613.25
You save:  N$746.69
C$3,681.10
List Price:  C$5,153.70
You save:  C$1,472.59
रु13,266.49
List Price:  रु18,573.62
You save:  रु5,307.13
S/368.83
List Price:  S/516.39
You save:  S/147.55
K382.06
List Price:  K534.91
You save:  K152.84
SAR375
List Price:  SAR525.02
You save:  SAR150.01
ZK2,508.19
List Price:  ZK3,511.57
You save:  ZK1,003.37
L456.04
List Price:  L638.48
You save:  L182.43
Kč2,310.02
List Price:  Kč3,234.13
You save:  Kč924.10
Ft36,211.46
List Price:  Ft50,697.50
You save:  Ft14,486.03
SEK kr1,038.11
List Price:  SEK kr1,453.39
You save:  SEK kr415.28
ARS$85,066.49
List Price:  ARS$119,096.49
You save:  ARS$34,030
Bs691.23
List Price:  Bs967.75
You save:  Bs276.52
COP$389,029.38
List Price:  COP$544,656.70
You save:  COP$155,627.31
₡50,979.09
List Price:  ₡71,372.77
You save:  ₡20,393.67
L2,470.17
List Price:  L3,458.33
You save:  L988.16
₲730,160.41
List Price:  ₲1,022,253.79
You save:  ₲292,093.37
$U3,841.23
List Price:  $U5,377.88
You save:  $U1,536.64
zł395.31
List Price:  zł553.46
You save:  zł158.14
Already have an account? Log In

Transcript

One of the most powerful tools you have in your toolbox when it comes to data security is disk encryption. disk encryption, as the name implies, literally encrypts the data that is stored on your mass storage. We usually think about this in terms of hard drives, but it works for just about any type of mass storage. The important thing that we have to be comfortable with disk encryption is Well, number one, it could slow systems down. So if you had a big file server, for example, that was really doing a lot of data moving, I probably wouldn't consider disk encryption. Where we do like to use disk encryption is number one, any devices that are out in the wild.

So mobile devices, laptops, smartphones, whatever you might have out there. Also, if you have desktop systems that may not move, but may not have really good physical security, because that's really where the power of disk encryption comes into play. And that is somebody can get to it and they're just not going to be able to access that data. There are No really well known common ways to crack almost any type of the many, many types of disk encryption out there. Now, when we're talking about disk encryption, you can pretty much break all the encryption tools into two camps. There's the camp that has TPM, or Trusted Platform Module support.

And there's the camp that doesn't. TPM, or Trusted Platform Module simply means that you have a chip burned into the device. If it's a laptop, it's on the motherboard somewhere. If it's a smartphone, it's in the electronics. And inside this chip is a full blown public private key. And there is no way to get the private key out of this physical chip.

So with that little tool set, you can do some amazing things. Like for example, you've got a motherboard and you've got a whole system and in the system, you have a hard drive and that hard drives encrypted. If a bad guy grabs the hard drive and tries to go do something with it in a faraway place. The fact that it's not connected to the TPM chip will prevent anybody from being able to do anything, so it is a wildly powerful tool. Now, that doesn't mean that every disk encryption out there that does not use TPM is bad. In fact, you'd be surprised who doesn't use TPM.

Now what I want to do is I've gone ahead and rebooted my computer. And I want to show you because if you have TPM, on almost any system, you've got to go ahead and turn it on at some level. And in this case, on this particular system, I had to turn it on at the BIOS level. So if you take a look right here, alright, so you see that PTT, as they call it there. That is an example of turning it on at the system level. I don't know why this motherboard calls it PTT, I had to look it up that is TPM for that particular system.

So there are lots and lots of wonderful disk encryption tools out there. Probably one of the oldest is something called PGP or pretty good privacy disk, then around arguably since the late 90s. Another popular one was one called TrueCrypt. I'm using the word past tense because surprisingly, in the middle of 2014, the true kit TrueCrypt. People simply said, We're out of business and they just kind of almost disappeared. However, TrueCrypt is still available.

In fact, there have been forks to TrueCrypt with things like Cypher shed, or there's a crypt that really just pick up where TrueCrypt left off. And they are very, very powerful tools. So if anybody were to ask you, is true crypt bad. There have been audits and all types of stuff done to it that says we don't know why these guys quit doing it. But they did. By the way, TrueCrypt completely free.

Within the Windows environment, you're probably going to be using something like BitLocker BitLocker comes with all the later versions of Windows for the office environment, and it does a great job. I'm going to show you that one in just a minute. for Mac folks, you'd use something like file vault file vault is actually very interesting because Mac's choose not to use TPM. There's some arguments about TPM being used for digital rights management. So people keeping you from being able to watch movies and stuff like that. And that's my opinion as to why Apple probably stayed out of that, which is kind of interesting.

If you're in the Linux world, you've got, literally probably over 100 different types of encryption methodologies. I'm gonna let you sort it out and choose the one you want. Okay, so what I want to do now is just take a minute, I've got the Trusted Platform Module running on my system here. So I've rebooted and what I want to do is show you BitLocker in action. So to start up, BitLocker, and I'm using Windows 10 Pro here, so I'm going to go to BitLocker drive encryption. And I'm just going to go ahead and turn it on.

So the first thing it's doing right now is it's checking to make sure that I have a TPM chip and that the TPM chip is turned on. So once it does that, it's going to be like okay, so what we need to do Keep a recovery key handy in case something were to happen. So this recovery key is incredibly important. So I'm going to print it. I will printer over here. So I'm going to hit and I'm just printing the key on my local printer here.

And now what it's asking me it's it says, Do you want to encrypt the use space only or do you want me to encrypt the entire drive, I'm going to go ahead and click Next. And, in fact, we'll just going to go ahead and let that go. Because BitLocker is going to take a good long time before it actually completes this encryption. Do not ever run any form of disk encryption software without making very, very sure that you have a key either printed or stored in a file or something because there's literally no way to get this back. There is no way I can't stress this enough. In the United States, all the major law enforcement people, there's zillions of court situations where they just simply couldn't get to the data on bad guys encrypted drives.

And it is a powerful tool, but failure to have a little backup and nobody's going to get to that data.

Sign Up

Share

Share with friends, get 20% off
Invite your friends to LearnDesk learning marketplace. For each purchase they make, you get 20% off (upto $10) on your next purchase.