GBDE

GBDE

GBDE, standing for GEOM Based Disk Encryption, is a block device-layer disk encryption system written for FreeBSD, initially introduced in version 5.0. It is based on the GEOM disk framework. GBDE was designed and implemented by Poul-Henning Kamp and Network Associates Inc. (now known as McAfee). [cite web |title=gbde(4) man page in FreeBSD 4.11 |work=GBDE manual page |url=http://www.freebsd.org/cgi/man.cgi?query=gbde&apropos=0&sektion=4&manpath=FreeBSD+5.0-RELEASE&format=html |accessdate=2007-01-01 ]

Design decisions

Unlike most disk encryption software, GBDE does not attempt to defeat watermarking attacks through the use of disk encryption-specific modes of operation (see disk encryption theory), but instead generates a random key each time a sector is written. [cite paper |author=Poul-Henning Kamp |title=GBDE - GEOM Based Disk Encryption |work=GBDE design document |url=http://phk.freebsd.dk/pubs/bsdcon-03.gbde.paper.pdf |format=PDF |accessdate=2007-01-01 ] Unlike some alternatives, such as CBC with sector-specific initialization vectors, this approach does not reveal any information to the attacker even if they have access to snapshots of the disk image from different points in time, since encryption keys are never re-used.

The one time sector key is encrypted using a pseudorandom key. This pseudorandom key is derived from the sector number and a static 2048-bit master key with 128 bits of salt. The pseudorandom number generator used for this purpose is called the Cherry Picker. This is not a well established PRNG, but rather one invented for GBDE. This generator may not meet the security levels of standard algorithms, and could be distinguishable from random numbers.cite paper |author=Roland C. Dowdeswell |date=2005-03-26 |title=Initial Analysis of GBDE |url=http://www.imrryr.org/~elric/cgd/gbde-analysis2.pdf |accessdate=2007-01-26]

Due to this unique approach, GBDE only supports 128-bit AES. Using a different key for each write also introduces a significant CPU overhead, as most block ciphers use key-specific precomputations, and makes disk updates non-atomic since the keys are written separately from the data. As a result, data loss can occur on unexpected power drops, even when used with journaling file systems. GBDE also has a disk space overhead of about 3% to store the per-sector keys.

To address these shortcomings, a more typical disk encryption solution for FreeBSD, GELI, was written later by Pawel Jakub Dawidek.

See also

* Disk encryption
* Disk encryption software
* Comparison of disk encryption software

References


Wikimedia Foundation. 2010.

Игры ⚽ Нужно решить контрольную?

Look at other dictionaries:

  • Comparison of disk encryption software — This is a technical feature comparison of different disk encryption software. Contents 1 Background information 2 Operating systems 3 Features 4 Layering …   Wikipedia

  • Poul-Henning Kamp — (sometimes known as PHK ) is a Danish FreeBSD developer, responsible for implementation of the widely used MD5 password hash algorithm, a vast quantity of systems code, including the FreeBSD GEOM storage layer, GBDE cryptographic storage… …   Wikipedia

  • CommerceNet Singapore — Limited Type Public, Limited by Guarantee Founded 1997 location = Singapore Key people Charlie C. Tan, Founder (Singapore Chapter) Tay Kheng Tiong, Chairman Wong Jeh Shyan, CEO Ramesh Vakkiprath, COO Products Technology …   Wikipedia

  • Air Alpes — Infobox Airline airline = Air Alpes image size = IATA = LP ICAO = ALP callsign = AIRALPES founded = 1961 commenced = ceased = 1981 hubs = secondary hubs = focus cities = frequent flyer = lounge = alliance = subsidiaries = fleet size =… …   Wikipedia

  • AIR ALPES — [[Image: |250px|center]] AITA LP OACI ALP Indicatif d appel Air Alpes Repères historiques Date de création 1961 Fond …   Wikipédia en Français

  • Air Alpes — Codes AITA OACIL Indicatif d appel LP ALP …   Wikipédia en Français

  • List of programmers — This list is incomplete; you can help by expanding it. This is a list of programmers notable for their contributions to software, either as original author or architect, or for later additions. Contents: A B C D E F G H I J K L M N …   Wikipedia

  • Online dispute resolution — Alternative Dispute Resolution Arbitration …   Wikipedia

  • FreeBSD — welcome screen Company / developer The FreeBSD Project …   Wikipedia

  • GEOM — is the storage framework available in the FreeBSD Operating System. It is available in FreeBSD 5.0 and higher and provides a standardized way to access storage layers. GEOM is modular and allows for geom modules to connect to the framework. For… …   Wikipedia

Share the article and excerpts

Direct link
Do a right-click on the link above
and select “Copy Link”