It's a Presidential Mandate, Feds use it. How come you are not using FDE?

Steven M. Bellovin smb at
Tue Jan 16 17:03:52 EST 2007

On Tue, 16 Jan 2007 08:58:27 -0800
"Saqib Ali" <docbook.xml at> wrote:

> > Yes, encrypted disks aren't much good unless the OS also encrypts
> > (at least) swap space.  I note that OpenBSD ships with swap-space
> I think you are confusing "Disk Encryption" with "Full Disk Encryption
> (FDE)". They are two different beast.
> FDE encrypts the "entire" boot drive, including the OS, kernel and the
> swap space.
> Disk Encryption, on the other hand, only encrypts the non-OS portion.
> saqib

I don't think that that distinction is either necessary or sufficient.

		--Steve Bellovin,

The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at

More information about the cryptography mailing list