Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #196122

Re: Possible for full-disk encryption to encrypt /boot as well?

From Paul Johnson <baloo@ursamundi.org>
Newsgroups linux.debian.user
Subject Re: Possible for full-disk encryption to encrypt /boot as well?
Date 2018-05-27 08:50 +0200
Message-ID <vTXF8-5z6-1@gated-at.bofh.it> (permalink)
References <vTq6t-1wc-1@gated-at.bofh.it> <vTRJn-1KU-1@gated-at.bofh.it> <vTVjX-43X-1@gated-at.bofh.it> <vTWJ3-4YR-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On Sun, May 27, 2018 at 12:43 AM, David Christensen <
dpchrist@holgerdanske.com> wrote:

> On 05/26/18 21:16, Paul Johnson wrote:
>
>> On Sat, May 26, 2018 at 7:21 PM, David Christensen
>>
>>> Have you considered a self-encrypting drive ...
>>>
>>
>> I'm 99.99% sure (like Dove soap sure) that Symantec full disk
>> encryption doesn't work this way because I'm just as sure that none
>> of the Dell models I've ever worked with have this hardware
>> capability.
>>
>
> I have tested Intel 520 Series SSD's with self-encryption in two Dell
> laptop models:
>
> - They do not work in Dell Inspiron E1505's (~2007, Core Duo).
>
> - They do work in Dell Latitude E6520's (2011~2012, Sandy Bridge).


 Right, but is the basic system unencrypted or not?  I very, very, very
highly suspect not, since it seems fairly obviously to me (given that all
the Dell hardware stuff has finished and it's handed off to whatever is on
the boot device) it's handing off to encrypted software off the hard drive
to bootstrap the rest by the time anything Symantec gets involved with.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Possible for full-disk encryption to encrypt /boot as well? Robert Dodier <robert.dodier@gmail.com> - 2018-05-25 21:00 +0200
  Re: Possible for full-disk encryption to encrypt /boot as well? Pascal Hambourg <pascal@plouf.fr.eu.org> - 2018-05-25 21:50 +0200
    Re: Possible for full-disk encryption to encrypt /boot as well? Robert Dodier <robert.dodier@gmail.com> - 2018-05-26 02:40 +0200
      Re: Possible for full-disk encryption to encrypt /boot as well? Abdullah Ramazanoğlu <ar018@yahoo.com> - 2018-05-26 03:20 +0200
      Re: Possible for full-disk encryption to encrypt /boot as well? Pascal Hambourg <pascal@plouf.fr.eu.org> - 2018-05-26 10:20 +0200
        Re: Possible for full-disk encryption to encrypt /boot as well? Robert Dodier <robert.dodier@gmail.com> - 2018-05-26 18:00 +0200
          Re: Possible for full-disk encryption to encrypt /boot as well? Curt <curty@free.fr> - 2018-05-26 19:00 +0200
            Re: Possible for full-disk encryption to encrypt /boot as well? David Wright <deblis@lionunicorn.co.uk> - 2018-05-26 21:10 +0200
  Re: Possible for full-disk encryption to encrypt /boot as well? Celejar <celejar@gmail.com> - 2018-05-25 22:00 +0200
  Re: Possible for full-disk encryption to encrypt /boot as well? David Christensen <dpchrist@holgerdanske.com> - 2018-05-27 02:30 +0200
    Re: Possible for full-disk encryption to encrypt /boot as well? Paul Johnson <baloo@ursamundi.org> - 2018-05-27 06:20 +0200
      Re: Possible for full-disk encryption to encrypt /boot as well? David Christensen <dpchrist@holgerdanske.com> - 2018-05-27 07:50 +0200
        Re: Possible for full-disk encryption to encrypt /boot as well? Paul Johnson <baloo@ursamundi.org> - 2018-05-27 08:50 +0200
          Re: Possible for full-disk encryption to encrypt /boot as well? David Christensen <dpchrist@holgerdanske.com> - 2018-05-27 19:40 +0200

csiph-web