Encryption ssd X300

Message

plaj · #1 Post by **plaj** » Tue Jul 15, 2008 12:44 pm

Hello, how to make for encryption all the hard drive of X300. Which method to employ or software. Thank you

Excuse me, i m french

loyukfai · #2 Post by **loyukfai** » Tue Jul 15, 2008 1:59 pm

Since you've mentioned SSD in the title, I presume that you're asking based on a SSD setup.

And a guess that you're running Windows.

First I'm not aware of any SSD model with built-in on-the-fly encryption, at least for the consumer models.

So you may consider those software solutions. For example, BitLocker offered in Windows Vista Enterprise and Ultimate, and TrueCrypt, which is free and open source.

Kindly refer to the below pages for more information:

http://technet.microsoft.com/en-us/wind ... 05065.aspx
http://www.truecrypt.org/

Puppy · #3 Post by **Puppy** » Tue Jul 15, 2008 2:06 pm

I'd like to point out that NTFS file system supports file encryption by design. Not a good idea for full-disk encryption but for sensitive data only.

plaj · #4 Post by **plaj** » Tue Jul 15, 2008 4:25 pm

It n' does not exist a native solution with LENOVO?

#5 Post by **erik** » Tue Jul 15, 2008 5:22 pm

plaj wrote:It n' does not exist a native solution with LENOVO?

it doesn't exist as a native solution with any company right now, not just lenovo.

plaj · #6 Post by **plaj** » Wed Jul 16, 2008 1:28 am

I thought that disc SSD had a coding by defect
Thank you

loyukfai · #7 Post by **loyukfai** » Wed Jul 16, 2008 2:19 am

Lenovo has a alliance (or something like that) with Ultimaco... If you would call that "native"...

http://www.pc.ibm.com/europe/think/en/s ... &cc=europe
http://americas.utimaco.com/safeguard_e ... 1-230.html

plaj · #8 Post by **plaj** » Wed Jul 16, 2008 4:00 am

thank you for your answer. And doesn't hard drive SSD contain an encoding by defect to be activated with the bios? Thank you

plaj · #9 Post by **plaj** » Wed Jul 16, 2008 4:05 am

If not, know how to protect totality from hard drive SSD by combining TPM and reader fingerprint. Thank you

plaj · #10 Post by **plaj** » Wed Jul 16, 2008 4:07 am

Another asset of X300, a reader d' digital fingerprints integrated. “We also chose to quantify hard drive SSD”, explains Jean-Michel Donner. Side system d' exploitation, it is delivered either with Vista, or with XP, “because much d' companies continue d' to be equipped in XP”, specifies the France vice-president

http://www.01net.com/editorial/372341/x ... on-lenovo/

???

loyukfai · #11 Post by **loyukfai** » Wed Jul 16, 2008 8:43 am

Could you clarify if you just want to "lock down", or "encrypt" your drive...?

To quote Hitachi (emphasis mine)...

The "basic" HDD password...

"The HDD itself may also have a password, whose behavior is defined by the ATA security feature set. If enabled, the drive cannot be used without this password. In most notebook computers, this represents the strongest security method available. A search of the Internet, including some forums where people routinely discuss how to defeat security schemes, reveals information that HDD passwords are very tough to crack. However, there are two potential weaknesses. First, a skilled technician could develop a custom tool to swap the electronics cards on the fly from two HDDs — one password protected, the other not — after startup in order to potentially defeat the password. Second, a person determined to read the contents of the hard drive could pay a data recovery service to physically dismantle the hard drive and then attempt to directly read all of the data from the disks using commercially available tools."

So to provide additional security in case you want to mitigate the risk further...

"A useful and strong solution for providing data security is encryption of the data on the disk , either by use of software or hardware. In other words, if the data on the disk drive is scrambled in a way that cannot be understood without the decoding key, then even if a thief were to pay a data recovery service to recover the actual data on the disk drive, the data would be nothing but meaningless characters."

You can enable the "basic" HDD password for ThinkPad SSD in the BIOS (according to what is mentioned in the troubleshooting guide).

Hope this helps.

Article quoted: http://www.hitachigstpartnerbyte.com/pa ... _paper.pdf

Further read:
http://www.thinkpads.com/fingerprint.htm

loyukfai · #12 Post by **loyukfai** » Wed Jul 16, 2008 9:11 am

And if you want to use the fingerprint reader... Setup the passwords in BIOS, and enable the power-on security feature via the Fingerprint Software's Control Center in Windows. And you have to select which fingerprints can be used for power-on logon as well.

plaj · #13 Post by **plaj** » Wed Jul 16, 2008 10:21 am

I am legal expert and I would like to quantify all the hard drive. Thank you for your assistance

loyukfai · #14 Post by **loyukfai** » Wed Jul 16, 2008 2:23 pm

You're welcome and I hope that it helps. During the process I've also learnt much about this.

BTW, done a bit further searches, it seems that recovering data from a physically-damaged SSD is more difficult than that of its rotating counterpart. Which could also mean that, the methods used to bypass the ATA password on mechanical HDD in order to "steal" the data may not be usable on SSD.

Now, I don't know how all those SSD handle the ATA password thing. It could be simple (let's say it will be gone if the controller chip is replaced from an identical model). Or it could be sophisticated.

If you're interested, I find Scott Moulton's talks on HDD recovery informative, and they're available at YouTube.

http://www.youtube.com/user/SuperFlyFlippingA

Edit: An interesting read about the ATA security feature... http://www.heise.de/ct/english/05/08/172/

plaj · #15 Post by **plaj** » Sat Jul 19, 2008 4:35 am

Hello with all, on pub of X300, j' saw that the disc was " full disk encryption." that to say that if I do put a password at the hard drive, it is quantified? Thank you

Ecusez moi, je suis français

loyukfai · #16 Post by **loyukfai** » Sat Jul 19, 2008 2:18 pm

Disc...? Mind to take a photo and show us...?

plaj · #17 Post by **plaj** » Sun Jul 20, 2008 6:20 am

http://www.rueducommerce.fr/Ordinateurs ... n-13-3.htm

disc fde is mentioned

Thank you

loyukfai · #18 Post by **loyukfai** » Sun Jul 20, 2008 11:35 am

Oh good... Seems there's at least one consumer SSD does real-time hardware encryption afterall... : )

There seem to be 2 SSD options for the X300, one from Samsung and the other one from TDK.

The one from TDK does hardware encryption (128-bit AES).

References:
http://forums.lenovo.com/lnv/board/mess ... age.id=731
http://hwzone.co.il/view-image/reviews- ... C_0015.jpg
http://www.tdk.co.jp/teaah01/aah26600.htm

Encryption ssd X300

Encryption ssd X300

Who is online