Скачать или смотреть kmille: The current state of full disk encryption is still not good (2025)

https://media.ccc.de/v/gpn23-162-the-...

In theory, full disk encryption (FDE) just works. You just have to enable it. But in practice, cops get access to a lot of devices, even when they are encrypted.

I want to summarize the current state of full disk encryption. I will explain conceptional weaknesses/attacks, practical physical attacks (videos of live demos) and give recommendations. I will explain how TPMs work and how you can use them to increase (but also break) the security of your device.

The focus is on Linux and TPMs. I will briefly talk about the broken state of Smartphone Security and Window's FDE Bitlocker. There is also Linux hands-on.

##### AGENDA
Motivation & Threat Model
Smartphone Security
History of cold boot attacks
Full disk encryption on Linux
TPM 2.0 (How does it work? How can I use it? Attacks, benefits and problems)
Windows FDE (is currently broken)
How I do FDE on Linux

kmille

https://cfp.gulas.ch/gpn23/talk/FJMWAE/

#gpn23 #CyberSecurity

Licensed to the public under https://creativecommons.org/licenses/...