Publication details
Practical Cryptographic Data Integrity Protection with Full Disk Encryption
| Authors | |
|---|---|
| Year of publication | 2018 |
| Type | Article in Proceedings |
| Conference | 2018 IFIP International Conference on ICT Systems Security and Privacy Protection |
| MU Faculty or unit | |
| Citation | |
| Web | https://link.springer.com/chapter/10.1007/978-3-319-99828-2_6 |
| Doi | http://dx.doi.org/10.1007/978-3-319-99828-2_6 |
| Keywords | Full Disk Encryption; Linux; cryptographic integrity protection |
| Description | Full Disk Encryption (FDE) has become a widely used security feature. Although FDE can provide confidentiality, it generally does not provide cryptographic data integrity protection. We introduce an algorithm-agnostic solution that provides both data integrity and confidentiality protection at the disk sector layer. Our open-source solution is intended for drives without any special hardware extensions and is based on per-sector metadata fields implemented in software. Our implementation has been included in the Linux kernel since the version 4.12. |