Chapter 9 Encrypting Volumes
FIGURE 9.0.F01: A hard drive volume with full-disk encryption (FDE).
TABLE 9.0.T01: Effectiveness of access control and encryption
TABLE 9.0.T02: Policy statements for an unencrypted volume
TABLE 9.0.T03: Policy statements for volume encryption
FIGURE 9.0.F02: A block cipher encrypts data in fixed-sized blocks.
FIGURE 9.0.F03: Triple DES encryption.
FIGURE 9.0.F04: Encryption failure using a block cipher. Courtesy of Dr. Richard Smith
FIGURE 9.0.F05: Identical blocks encrypt to identical ciphertext.
FIGURE 9.0.F06: Using a mixing mode with a block cipher. Courtesy of Dr. Richard Smith
FIGURE 9.0.F07: Key stream made with OFB (output feedback mode).
FIGURE 9.0.F08: Include the IV with the ciphertext when required.
FIGURE 9.0.F09: Mode encryption diagram: Encrypting with OFB.
FIGURE 9.0.F10: Key stream with CTR—the counter mode.
FIGURE 9.0.F11: Mode encryption diagram for CFB (cipher feedback mode).
FIGURE 9.0.F12: Mode encryption diagram for CBC (cipher block chaining).
FIGURE 9.0.F13: Mode decryption diagram for CBC.
FIGURE 9.0.F14: Full disk encryption in software.
FIGURE 9.0.F15: Password prompt to mount an encrypted volume. Screen shot reprinted with permission from Apple Inc.
FIGURE 9.0.F16: Encrypting disk data with AES and Counter mode.
FIGURE 9.0.F17: Sector encryption with CBC and ESSIV.
FIGURE 9.0.F18: XTS mode to encrypt data on a disk sector.
FIGURE 9.0.F19: Internal functions of a self-encrypting drive.
FIGURE 9.0.F20: Block diagram of a self-encrypting drive controller.
FIGURE 9.0.F21: Self-encrypting drive controller’s state diagram.
FIGURE 9.0.F22: Preboot authentication with software encryption.
FIGURE 9.0.F23: Passphrase interception risks.