磁盘加密

磁盘加密（）是一种通过将信息转换为无法识别的编码来保护信息的技术，这些编码无法被未经授权的人轻易破译，最终防止未经授权访问数据存储。磁盘加密使用或来加密磁盘或磁盘卷上的每一位数据。

术语全磁盘加密（，FDE）表示磁盘上的所有内容都已加密，但主引导记录（MBR）或类似区域是未加密的。一些基于硬件的全磁盘加密可以真正加密整个启动盘，包括MBR。不过基于硬件的磁盘加密也出现过密钥可提取等安全问题。

参见条目
*加密
*數位鑑識
*單一登入

参考文献
延伸阅读
*

外部链接

• [http://www.whitehouse.gov/omb/memoranda/fy2006/m06-16.pdf Presidential Mandate requiring data encryption on US government agency laptops]
• [https://web.archive.org/web/20130117220829/http://otfedb.sdean12.org/ On-The-Fly Encryption: A Comparison] – Reviews and lists the different features of disk encryption systems (archived version from January 2013)
• [https://web.archive.org/web/20150917051251/http://www.markus-gattol.name/ws/dm-crypt_luks.html All about on-disk/full-disk encryption on one page] – covers the use of dm-crypt/LUKS on Linux, starting with theory and ending with many practical examples about its usage (archived version from September 2015).
• [http://www.esecurityplanet.com/mobile-security/buyers-guide-to-full-disk-encryption.html Buyer's Guide to Full Disk Encryption] – Overview of full-disk encryption, how it works, and how it differs from file-level encryption, plus an overview of leading full-disk encryption software.