Kako pravilno kriptirati dva SSD diska?

Pozdravljeni,

v prenosnik (Lenovo ThinkPad T440p) želim vgraditi dva SSD diska - Samsung 850 EVO (250 GB), kot primarni disk in Samsung 840 EVO (500 GB), kot sekundarni disk. Operacijski sistem je Windows 10 Pro.

Do sedaj sem diske kriptiral z BitLockerjem, vendar programsko, kar jih nekoliko upočasni. Oba omenjena SSD-ja imata opcijo strojnega kriptiranja in kolikor razumem, bi naj bilo dovolj že, če se v BIOS-u omogoči geslo za trdi disk.

Zanima me, ali se z določitvijo gesla kriptira samo primarni disk, ali pa oba in če je to res dovolj?

Moti me to, da je v Samsung Magicianu postopek drugače opisan:



Piše, da če želim disk kriptirati, moram klikniti na "Ready to enable", nato pa disk formatirati (Secrure Erase) in nato ponovno naložiti OS? Je to res obvezno?

Potemtakem je najboljše, da nov disk (850 EVO) priklopim, kot zunanji disk, kliknem na "Ready to enable", naredim Secure Erase, ga vgradim v računalnik in nato namestim OS, ter zaženem BitLocker? S starim diskom (840 EVO) pa naredim enako, s to razliko, da ga samo vgradim v računalnik, brez nameščanja OS-a?

Če kdo ve kaj več o tem, bi bil hvaležen za pomoč. :)

Hvala za info. Gre za moj poslovni računalnik in dokumenti niso ravno top secret, vendar pa če ga kdo ukrade, ne želim, da zlahka pride do podatkov.

Osnovna ideja je omogočiti hardware kriptiranje na disku, plus BitLocker. Kombinacija obojega je že trd oreh za zlomiti. Vendar če se SSD disk pravilno pripravi, potem BitLocker kriptranje opravlja hardware in ne software. To želim doseči.

Vmes sem našel precej dober vodič: https://helgeklein.com/blog/2015/01/how...

Bom poskusil na ta način. Javim, kako bo šlo. :) Če pa ima kdo kakšne izkušnje, naj samo pove.

>Če želiš resno varnost, potem se izogibaj strojnemu kriptiranju, ker ne veš, če ti vsebujejo stranska vrata.


niti ni nujnno da ima namerno vgrajena stranska vrata, lahko je že bolj površno narejeno

O TrueCryptu sem tudi razmišljal (uporabljam ga na zunanjem trdem disku za varnostne kopije), vendar baje ni primeren za SSD diske. Zato je tudi pomembno, da ko se dela "clean wipe" SSD-ja (priprava za BitLocker kriptiranje), da se uporabi Samsungov program. Klasičen clean wipe, ki "popiše" cel disk, bi kar pošteno izrabil SSD.

bobby pojasni.

trim, thats why.

malo pomisli, kako trim deluje in bo hitro jasno, zakaj je security risk.

up vote
1
down vote
accepted
The warning just want to say, that if you enable the discard option, the firmware of your SSD will zero out the unused blocks on your drive. And these zeroed blocks can be easily identified and analyzed for a pattern.

Obviously the zeroed blocks will show the attacker the unused space and because of that he will know what is the used space. So if he want to crack the encryption he will have to deal with a smaller encrypted data, because he won't care about the unused blocks. And from the pattern of the unused blocks the attacker may be able to guess the filesystem type and the filesystem parameters, which may help him in cracking the encryption.

I'm not a cryptographer nor a cryptoanalyst but these informations are likely just a minimal help for the attacker. I think the warning is just there because in cryptology every minimal leaked information about the encrypted data can lead to the break of the encryption. So the authors of this encrypting software wanted to inform you that you have better security without enabling that feature, but how much better is not really known, because we can't know how much these leaked information help the attacker in breaking of the encryption. Obviously if the authors thought that the enabling of this feature would lead to a bigger than minimal risk for the encryption then this feature wouldn't be present in the software.

If you want to know more about this topic I advise you to read this article from Milan Broz and the comments on that page which also contain some good links. From that good article I paste here his conclusions:

If there is a strong requirement that information about unused sectors must not be available to attacker, TRIM must be always disabled.
TRIM must not be used if there is a hidden device on the disk. (In this case TRIM would either erase the hidden data or reveal its position.)
If TRIM is enabled and executed later (even only once by setting option and calling fstrim), this operation is irreversible. Discarded sectors are still detectable even if TRIM is disabled again.
In specific cases (depends on data patterns) some information could leak from the ciphertext device. (In example above you can recognize filesystem type for example.)
Encrypted disk cannot support functions which rely on returning zeroes of discarded sectors (even if underlying device announces such capability).
Recovery of erased data on SSDs (especially using TRIM) requires completely new ways and tools. Using standard recovery tools is usually not successful.

fora je, da je security issue (pa še tako majhen)..

bobby je 7. apr 2016 ob 17:30 izjavil:

Ja, Microsoftov Bitlocker je pa,.. (Dodaj sam),..
Definitivno pa bi prosil revizijo MSove kode Bitlockerja, ki jo je naredil open comunity,.. U sej res, ni v upogled javnosti.

Sorry, niti z enim tvojim postom tudi blizu nisi prisel, da bi me razsvetlil, pa ti je cel internet na voljo.

Try again.

Ps:seveda se lahko motim ampak bi rad vsaj kaksen priblizek, zakaj TC no go.

Piše na njihovi strani