PPRuNe Forums - View Single Post - File/Folder Encryption
View Single Post
Old 15th Dec 2017, 17:56
  #3 (permalink)  
MG23
 
Join Date: Jun 2009
Location: Canada
Posts: 464
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by Capn Bloggs
My question is, if all I need is a password to get into the program and therefore the files, where does the encryption come into the equation?
Typically, the encryption software picks a random key and uses that to encrypt the disk. Then it encrypts the key with the password and stores it in a file on the disk. So, to read the disk, you need the password to decrypt the key, which is then used to decrypt the disk.

Obviously, it doesn't matter if the software uses a random 256-bit encryption key to encrypt the disk if you then pick 'password' as your password.

Conversely, if I use a really strong password, why the need for "encryption"?
If the disk isn't encrypted, anyone can boot the machine from a Linux DVD or USB stick and read what's on it, regardless of what Windows software you install to ask for a password first.
MG23 is offline