You are viewing a single comment's thread.

view the rest of the comments →

0
1

[–] MrMongoose 0 points 1 point (+1|-0) ago 

You can use hardware encryption, where a device sits between the computer and the drive and does all of the encryption on the fly. The drive is unreadable without the encryption device/key. However, AFAIK, all those systems use hardware keys and not passwords.

0
0

[–] Craftkorb ago 

Aaand there's the trust issue. Why should I trust that device that it does the job correctly? Without unintentional or maliciously introduced crypto bugs bogging security?

0
1

[–] ffs 0 points 1 point (+1|-0) ago 

Because it's hopefully open source and audited.

0
0

[–] MrMongoose ago 

Well, you can always apply whatever additional software encryption you want underneath it. It's just one more layer of security.

0
0

[–] ImSureImPerfect [S] ago 

Hm. I'll have to read more about that. I'm fascinated by the idea.

If you install hardware encryption, the hardware key is...what...a physical, literal key of some sort? A piece of tech you slot in?

0
1

[–] MrMongoose 0 points 1 point (+1|-0) ago 

Yep. Usually a small dongle. There may be other variations, though. Search for the Addonics Saturn series - that's what I ended up with.

0
1

[–] e0steven 0 points 1 point (+1|-0) ago 

AFAIK hardly anyone uses these devices. If you need small portable enterprise encrypted USB check out Iron Key. I've been using encryption for years across all different health systems, never once saw something like that.

0
1

[–] Ninbyo 0 points 1 point (+1|-0) ago 

It's usually a card or device you plug in. Your phone's SIM card for example. A physical key might be used to prevent you from messing with the hardware in addition to it.