Laptop disk encryption technology

Recently, due to work needs, I began to contact my laptop hard disk encryption.

In a rough view, there are three types of encryption implementation for laptops: computers containing encryption chips use BIOS to set disk password encryption, mac laptops use filevault encryption, and computers without encryption chips use software to encrypt TrueCrypt ). Perform the following analysis on the three types:

Encryption chip bios encryption:

The advantage of this type of encryption is that it can achieve full encryption, or even encrypt MBR, to truly achieve full encryption, because the encryption is achieved by the chip, even if the hard disk is detached, it cannot read the content. However, the disadvantages of this encryption method are also obvious. Flexible encryption is not allowed. You can only encrypt the hard disk and decrypt it when it is started. Therefore, you cannot keep the computer that has been started confidential.

Mac machine filevault encryption:

Filevault is divided into filevault1 and filevault2. filevault2 is used since mac 10.7. filevault1 has been confirmed to be cracked, so it has exited the stage.

Without an encrypted chip, the computer uses software to encrypt TrueCrypt ):

Software Encryption is more flexible than hardware encryption. Files and partitions can be separately encrypted. However, meta information cannot be encrypted, which may cause information leakage and the password is stored locally, there is a possibility of cracking.

This article is from the "column _ ma" blog, please be sure to keep this http://lennonma.blog.51cto.com/643621/1294187