Page 1 of 1
SSD AES access
Posted: July 8th, 2014, 16:14
by PS87
Hello forum.
I was wondering around the internet about data encryption, the idea was to secure my computer data so nobody accept me (the guy who knows the password) can access my information, so I stumbled upon this AES thing, I like it a lot. It greatly protects my data (AES built in to controller) on hardware level.
What I want is, to use the drive as my portable desktop computer, by just connecting it to specially set up PC's, at multiple locations. The procedure would be, I install the drive, system on, log in with key, and then all normal PC operations (OS, browsers, etc.).
SO, I happily look for my product at the stores and just choose between manufacturers and parameters, BUT in the process the question is born "how do I insert the key in the SSD if no software can be read for the drive?". The internet told me that the key is stored on the drive and is derived form the motherboard BIOS password, that you enter when the PC starts. This is BS! If I remember correctly the BIOS pass is about 6 char. long. I feel no safety with that!
The question is, how is it possible to truly enter the AES key to SSD before the drive data is accessed?
Thank you.
Re: SSD AES access
Posted: July 8th, 2014, 20:48
by HaQue
There are a number of issues with your post. I will start with the obvious, and biggest. AES is a type of encryption, an algorithm. It depends on how the vendors implemented it. You don't use "AES" you use an implementation of it. The same as if you like reading, you don't go and look for a group of Sentences and paragraphs, you look for a book, and the book has to be formatted and written how you would like for YOUR particular purpose. A 1 page book on roses may not be what you want, even if it does actually fit the description of a group of sentences and paragraphs..
So you need to find a solution that does what you want. IMHO a bootable USB drive would do what you want, say a bootable Kali Linux, or even windows.
you need to plan out all things. What if the PC you are booting your hard drive on has different hardware.. can your disk cope with new hardware. etc etc
Re: SSD AES access
Posted: July 9th, 2014, 1:23
by PS87
Ok, no problem. AES = encryption algorithm. Uses a key, 128;192;256 bits(Wiki told me). Vendor can implement it however he want, but you always need some sort of the password.
I talk about full disk hardware based encryption. No performance impact, no software to get dirty with. As simple as 123, power on, key in, go on. hehe=]
Bootable USB = in my world, performance suicide(plus, got it working only one time, and it was glitching as hell)
I had made universal OS HDD before, and it was a good experience, just pop the disk in and be happy.
Found some info on the net, as I understand the best usable option is to buy some of the Intel SSD with AES, it sort of encrypts the key from the ATA password, and some BIOSes allow 32 char. passwords (So it's probably Ok).
The problem is that only one of my machines got this feature, I'l check out later. So there would be no problem if the program for pass enter would be on the bootable key or a CD.
Is there any soft to enter ATA password, not BIOS dependant?
Re: SSD AES access
Posted: July 9th, 2014, 1:36
by HaQue
Well you would be entering the password before the system starts up so soft is not going to help you. Software is on disk - have to enter password before you access disk - catch22
Seems to me easier to carry a laptop, say a ultra book around they have grey specs and if you need a larger screen then take a hdmi cable and plug in to whatever minito is there
Putting in a hdd in different locations like that seems unusual
I understand you want portable security but not sure that is best way
Also starting windows on a hdd that is swapping physical hardware a lot is asking for trouble. The hardware is VERY ingrained on a windows box
Re: SSD AES access
Posted: July 9th, 2014, 3:30
by PS87
Soft can be on bootable USB, or CD, I had seen this BIOS extension somewhere( looked complicated, I'l leave it last)
I don't like laptops, I don't use laptop when i'm mobile, prefer tablet. Laptop 2500g vs SSD 78g, it's small, light, shock resistant(Vs. HDD). I'm thinking for external bay, like eSATA on all machines. At work I have 24 inch screen, printer, audio+2.4Ghz transmitter for remote audio, 2nd display, and what ever I'l plug in someday, at home same all accept one simple LCD, at 3rd location got different setup. The thing is that there is a lot of not portable periphery connected, and I plan to connect even more. I feel like it's the best solution for me, last time I used such drive was very unproblematic, there was just this driver configuration in device manager and I was even able to use it on neighbor desktop.
The idea of one universal windows, that I use all the time comforts me. I always had trouble with PC's it's normal, there is always something. When there is 3 or more desktops you just fail to remember where is the files you need, is there any confidential data left, so frustrating.