一个基于实际安全性的整盘加密方案

作为一项新技术,整盘加密由于引入了可调加密模式作为它的核心算法,能提供比文件系统加密更优化的抗攻击防御方法。为使这样的算法在系统设计时能发挥出接近信息理论意义上的强安全性能,为算法选取合适的密钥是一个必要因素。然而,现有方案并没有实现满足要求的获取密钥方法,留下了一个可能被攻击的潜在弱密钥的"后门"。为解决这样的问题,我们提出一个基于安全存储介质的整盘加密方案,并分析了该方案的效率与安全性。

A Scheme of Full Disk Encryption Based on Practical Security

As a new technique,full disk encryption into which the tweakable enciphering mode as its core algorithm is introduced,can give the more optimized defense against attack than filesystem-level encryption.It is an essential factor that the appropriate encryption key is selected in the design of full disk encryption system for such an algorithm performance is really close to security in the sense of information theory.However,the counterpart keys derived by such schemes available cannot do so,which leaves a wea...