It's a Presidential Mandate, Feds use it. How come you are not using FDE?

Steven M. Bellovin smb at cs.columbia.edu
Tue Jan 16 17:03:52 EST 2007


On Tue, 16 Jan 2007 08:58:27 -0800
"Saqib Ali" <docbook.xml at gmail.com> wrote:

> > Yes, encrypted disks aren't much good unless the OS also encrypts
> > (at least) swap space.  I note that OpenBSD ships with swap-space
> 
> I think you are confusing "Disk Encryption" with "Full Disk Encryption
> (FDE)". They are two different beast.
> 
> FDE encrypts the "entire" boot drive, including the OS, kernel and the
> swap space.
> 
> Disk Encryption, on the other hand, only encrypts the non-OS portion.
> 
> saqib
> http://www.full-disk-encryption.net
> 

I don't think that that distinction is either necessary or sufficient.


		--Steve Bellovin, http://www.cs.columbia.edu/~smb

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com



More information about the cryptography mailing list