3 ms·
That depends on your threat model. Securing a removed/stolen (or failed) drive is achieved by this method. Securing the entire device from theft is not achieve
by lathiat 3y ago
That depends on your threat model.
Securing a removed/stolen (or failed) drive is achieved by this method. Securing the entire device from theft is not achieved.
An equally if not more likely threat for many is losing or forgetting the encryption key and losing all your data.
All of these scenarios should be clearly spelled out and noted.
Storage is one of the worst for losing keys it stays powered on for months or years without a reboot. Then you suddenly realise you lost the key. Or the person that had it left.
- aborsy 3y agoI don’t think the keys are device specific. If a drive is stolen but not the NAS, the key is stored in drive, not linked to device, and data can be unlocked. That’s my understanding from what I read. It seems to be a good obfuscation.