Groups > linux.debian.user > #196096

Re: Possible for full-disk encryption to encrypt /boot as well?

From	Curt <curty@free.fr>
Newsgroups	linux.debian.user
Subject	Re: Possible for full-disk encryption to encrypt /boot as well?
Date	2018-05-26 19:00 +0200
Message-ID	<vTKHU-5Le-5@gated-at.bofh.it> (permalink)
References	<vTq6t-1wc-1@gated-at.bofh.it> <vTqSS-21j-7@gated-at.bofh.it> <vTvpv-4HK-3@gated-at.bofh.it> <vTCAF-OH-5@gated-at.bofh.it> <vTJLP-5b0-1@gated-at.bofh.it>
Organization	Unorganized

Show all headers | View raw

On 2018-05-26, Robert Dodier <robert.dodier@gmail.com> wrote:
> On Sat, May 26, 2018 at 1:16 AM, Pascal Hambourg <pascal@plouf.fr.eu.org> wrote:
>
>> I don't know how Symantec's "full" disk encryption works, but AFAIK a boot
>> disk cannot be fully encrypted,
>
> Yes, this is an important question -- what, exactly, is provided by
> Symantec here, so that I can look for something to do the same for
> Linux. But not surprisingly I haven't been able to find a careful
> description -- so far all I have found is some marketing material. I
> will keep looking.

They seem to be saying the boot loader is decrypted prior to the point
at which it begins execution (a "pre-boot environment" is installed that
prompts the user for pass phrase, etc.)

 https://www.symantec.com/content/en/us/enterprise/white_papers/b-pgp_how_wholedisk_encryption_works_WP_21158817.en-us.pdf
> best,
> Robert Dodier
>
>


--

Thread

Possible for full-disk encryption to encrypt /boot as well? Robert Dodier <robert.dodier@gmail.com> - 2018-05-25 21:00 +0200
  Re: Possible for full-disk encryption to encrypt /boot as well? Pascal Hambourg <pascal@plouf.fr.eu.org> - 2018-05-25 21:50 +0200
    Re: Possible for full-disk encryption to encrypt /boot as well? Robert Dodier <robert.dodier@gmail.com> - 2018-05-26 02:40 +0200
      Re: Possible for full-disk encryption to encrypt /boot as well? Abdullah Ramazanoğlu <ar018@yahoo.com> - 2018-05-26 03:20 +0200
      Re: Possible for full-disk encryption to encrypt /boot as well? Pascal Hambourg <pascal@plouf.fr.eu.org> - 2018-05-26 10:20 +0200
        Re: Possible for full-disk encryption to encrypt /boot as well? Robert Dodier <robert.dodier@gmail.com> - 2018-05-26 18:00 +0200
          Re: Possible for full-disk encryption to encrypt /boot as well? Curt <curty@free.fr> - 2018-05-26 19:00 +0200
            Re: Possible for full-disk encryption to encrypt /boot as well? David Wright <deblis@lionunicorn.co.uk> - 2018-05-26 21:10 +0200
  Re: Possible for full-disk encryption to encrypt /boot as well? Celejar <celejar@gmail.com> - 2018-05-25 22:00 +0200
  Re: Possible for full-disk encryption to encrypt /boot as well? David Christensen <dpchrist@holgerdanske.com> - 2018-05-27 02:30 +0200
    Re: Possible for full-disk encryption to encrypt /boot as well? Paul Johnson <baloo@ursamundi.org> - 2018-05-27 06:20 +0200
      Re: Possible for full-disk encryption to encrypt /boot as well? David Christensen <dpchrist@holgerdanske.com> - 2018-05-27 07:50 +0200
        Re: Possible for full-disk encryption to encrypt /boot as well? Paul Johnson <baloo@ursamundi.org> - 2018-05-27 08:50 +0200
          Re: Possible for full-disk encryption to encrypt /boot as well? David Christensen <dpchrist@holgerdanske.com> - 2018-05-27 19:40 +0200

csiph-web