News for hackers. Stuff that matters.

A comment on Uber Tries to Remotely Encrypt Corporate Data During Government Raid [ENGLISH]. Parent comment

Re:Uber Tries to Remotely Encrypt Corporate Data During Gove... by spacehome on Thursday May 28, 2015 @12:15AM (#9616037)
The really clever way to encrypt your drives is to make the passphrase for the drive decrypt a very small (512-bit) header that contains the decryption key for the rest of the drive. Then wiping the drive consists of just erasing those critical bits quickly.
[ Parent | on HN ]
Re:Uber Tries to Remotely Encrypt Corporate Data During Gove... by contingencies on Thursday May 28, 2015 @12:48AM (#9616113)
Except that erasure on modern drives rarely actually erases things...
[ Parent | on HN ]
Re:Uber Tries to Remotely Encrypt Corporate Data During Gove... by cnvogel on Thursday May 28, 2015 @03:44AM (#9616608)
Hence it is advisable to store the encryption key somewhere where erasure was properly accounted for during design, e.G. a TPM (trusted platform module).
[ Parent | on HN ]