How does SafeGuard Easy ensures a fast encryption of the hibernation file?

  • Article ID: 108076
  • Updated: 27 Jun 2009


Product
SafeGuard Easy multi-platform 4.5x

Client OS

Windows XP SP2 Professional Edition

Server OS

None

Question

How does SafeGuard Easy ensures a fast encryption of the hibernation file on Windows XP, while maintaining the highest level of security?

Answer

SafeGuard Easy performs volume encryption on a sector basis. It loads blocks of one or more sectors, and en-/decrypts each sector individually.

As a consequence, the hibernation file is nothing else but another (in this case, contiguous) chunk of sectors, which is processed by the SafeGuard Easy encryption engine. Although it does require some special treatment by the SafeGuard Easy filter device driver in the phase of recovery from hibernation, this is transparent to the user and does not at all affect the character of sector-based encryption. Encryption of the hibernation file and encryption of the rest of the volume have no impact on each other, and do not affect each other negatively or reduce performance.

SafeGuard Easy uses the Cipher Block Chaining (CBC) mode with symmetric block encryption algorithms, such as AES. This is the industry standard for block device encryption without data expansion. CBC is initialized for each sector individually. Due to CBC, SafeGuard Easy does not introduce any additional integrity check mechanisms beyond the ones that the operating system already has in place. Again, this is transparent to the operating system.


Related documents:
- 107395 Secure hibernation on systems with S-ATA drives
- 102230 Does SafeGuard Easy support the Windows hibernation mode (Suspend-to-disk)?

Keywords: Ruhezustand sge

 
If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent

Comments