Info regd Hard Disk Encryption required.

  • Thread starter Thread starter Badrinath Mohan
  • Start date Start date
B

Badrinath Mohan

Hi All
How can any one perform On-the-fly encryption, means the automatic
encryption of files when they are being saved and automatic decryption as
they are accessed.
I have used AES algorithm and i need to incorporate it to encrypt hard
disks. Is it that i should write some driver and include the encryption in
that.

Any sites/Links or sample codes are welcome

Expecting replies.

Thanks and Regards

Badri
 
EFS can do this, to a large degree. If you've already considered this and
it is not satisfactory, you'll need to be more specific about what you're
after.
 
Thanks
But the main problem is i have to encrypt the entire hard disk and have to
decrypt it while the system is booting. and the major requirement is the
users tolerance must not be affected in any sense. User must be of the
impression that its a normal boot.

I need to encrypt everthing probably leaving out some system files.
I am of the impression that Windows EFS cannot handle things at boot time.

What about defrag APIs ?.Any ideas on this.

Expecting replies,
Regards
Badri
 
I would suggest you review what you want in light of cause / effect.

To encrypt / decrypt the majority of a disc drive at boot time will be
prohibitive in execution time.

EFS and schemes like it are a viable alternative as the data is stored
encrypted and only decrypted when the data is read by the authorised user.
The decryption / encryption is transparent to the authorised user and is on
a directory / folder basis.
Before using EFS, it is essential that the repurcusion of Windows system
loss will result in loss of data is understood, so a System State backup
with the proven ability to restore is a pre-requisite at all times.

At least your second requirement is satisfied. You can mark many folders as
encrypted if you wish.

An alternative to EFS is the older PGP Disc. I am not too sure if it is
still available. Do a google search for PGP - the disc enryption option has
always been a commercial product.

There are no doubt hardware encryption devices, but don't expect to see much
knowledge of them in the user community as they will be low volume, high
price, and are likely to be export restricted.

For Windows XP -> EFS.
Otherwise -> PGP Disc.

- Tim
 
There are 3rd party apps that do this, some better than others. I'm not
supposed to endorse any 3rd party products, so I'll recommend doing a web
search for them.
Another similar solution is to run a virtual machine and encrypt its entire
image. EFS can handle that.

EFS doesn't do whole volume encryption yet because we haven't had enough
customer demand for this compared with demand for other possible future
features.
 
Back
Top