HackerPapers

arXiv:1807.00309cs.CR

Practical Cryptographic Data Integrity Protection with Full Disk Encryption Extended Version

Milan Broz, Mikulas Patocka, Vashek Matyas

Early discovery. Linked by one identifiable commenter. This paper is outside the main ranking; a mention is not an endorsement.

Abstract

Full Disk Encryption (FDE) has become a widely used security feature. Although FDE can provide confidentiality, it generally does not provide cryptographic data integrity protection. We introduce an algorithm-agnostic solution that provides both data integrity and confidentiality protection at the disk sector layer. Our open-source solution is intended for drives without any special hardware extensions and is based on per-sector metadata fields implemented in software. Our implementation has been included in the Linux kernel since the version 4.12. This is extended version of our article that appears in IFIP SEC 2018 conference proceedings.

arXiv comments
Journal reference
DOI
Subjects
cs.CRCryptography and Security

On Hacker News

Linked by 1 identifiable commenter in 1 comment across 1 thread, from Jan 2022 to Jan 2022.

Comments linking this paper, per year.

Discussed in comments1 thread

  1. Decryption through LUKS2 reencryption crash recovery 1 comment

    • cryptsetup supports using AEAD modes for encryption, primarily using AEGIS-128 as algorithm. Some background information https://arxiv.org/abs/1807.00309 There is also old presentation, which explicitly refers to protecting against "returned disk" scenario…

      zokierView on HNParent context

Submitted to Hacker News

Connected through shared HN threads, not inferred similarity or a recommendation.