Reply to post: Degrees of trust?

Solid state of fear: Euro boffins bust open SSD, Bitlocker encryption (it's really, really dumb)

Long John Silver
Pirate

Degrees of trust?

Presumably hardware mediated encryption offers simplicity of setup and speedier on-the-fly processing than software equivalents. For most people and for most purposes that sits well despite concerns over security; at very least hardware implementations keep out casual intruders. Someone opting for hardware encryption retains capacity to implement additional software encryption for highly confidential material.

Speed advantages of hardware based encryption may be not noticeable by most users. They choose operating system controlled encryption and/or independent software like VeraCrypt. If using an open-source operating system (or software add-on) they belong within a community containing people with high level security skills and thus will be alerted to problems.

It all boils down to trust. Trust at two levels: that the provider of hardware/software does their best without malicious intent and errors are infrequent, or that trust in integrity itself cannot be guaranteed. Individual decisions weigh these factors in the light of tightness of security required; this in realisation that it (seemingly) can never be absolute; moreover, beyond the minimum, enhancing security comes at a cost (e.g. that of multiple layers of encryption consuming resources); diminishing returns set in.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon