Auditable and Transparent Fully Authenticated Disk Encryption via USB Storage Interposition

• URL: http://arxiv.org/abs/2607.12716v1
• Date: Tue, 14 Jul 2026 12:42:17 GMT
• Title: Auditable and Transparent Fully Authenticated Disk Encryption via USB Storage Interposition
• Abstract summary: Full Disk Encryption (FDE) has become increasingly important in the last decades due to the evident confidentiality concerns.<n>In most systems, encryption is provided by an operating system driver, through which the user can transparently access the encrypted disk.<n>We explore an alternative approach: the use of an intermediate USB device placed between the host system and the external hard disk.
• Score: 0.0
• License: http://creativecommons.org/licenses/by-nc-nd/4.0/
• Abstract: Full Disk Encryption (FDE) has become increasingly important in the last decades due to the evident confidentiality concerns. In most systems, encryption is provided by an operating system driver, through which the user can transparently access the encrypted disk after supplying the required keys (or the credentials from which those keys are derived). In this work, we explore an alternative approach: the use of an intermediate USB device placed between the host system and the external hard disk, where the encrypted data are stored. Although there are existing devices that follow this inline approach (such as RAID controllers and USB enclosures with built-in encryption), we explore the use of a general-purpose single-board computer running Linux with USB On-The-Go support (e.g. a Raspberry Pi), to provide FADE (Fully Authenticated Disk Encryption). Our system, named CC (Cryptographic Companion), performs the cryptographic operations (encryption/decryption and authentication), providing a standard USB mass-storage interface to the host (which is entirely unaware of the presence of encryption) while relying on the external USB hard disk to store the corresponding encrypted blocks. Our design provides several key advantages: flexibility, low cost, transparency, the use of generic hardware and free and open-source software, adaptability to emerging cryptographic schemes, and mitigations against malicious disk firmware. This paper presents the design and implementation of the CC and an experimental evaluation of our current research prototype, which indicates that it is sufficiently efficient for most common use cases.

Related papers

• Linux disk encryption and self-encrypting drives -- A case study on Opal2 drives security [0.0]
  Opal2 self-encrypting drives provide hardware-based disk encryption serving as an additional layer of protection.<n>This paper presents a case study of real-world Linux integration of Opal2 drives and the security of Opal2 firmware.
  arXiv  Detail & Related papers  (2026-07-13T13:45:59Z)
• PriSrv+: Privacy and Usability-Enhanced Wireless Service Discovery with Fast and Expressive Matchmaking Encryption [42.621633702087074]
  PriSrv+ is an advanced privacy and usability-enhanced service discovery protocol for modern wireless networks.<n>Key innovation in PriSrv+ is the development of Fast and Expressive Matchmaking Encryption (FEME)<n>PriSrv+ achieves superior performance, scalability, and efficiency compared to existing state-of-the-art protocols.
  arXiv  Detail & Related papers  (2026-06-04T09:07:19Z)
• Location-Dependent Cryptosystem [0.3553493344868414]
  Digital content distribution and proprietary research-driven industries face persistent risks from intellectual property theft and unauthorized redistribution.<n>Conventional encryption schemes such as AES, TDES, ECC, and ElGamal provide strong cryptographic guarantees.<n>We present a location-dependent cryptosystem in which the decryption key is not transmitted as human- or machine-readable data.
  arXiv  Detail & Related papers  (2025-11-18T01:24:08Z)
• The Reverse File System: Towards open cost-effective secure WORM storage devices for logging [0.0]
  Write Once Read Many (WORM) properties for storage devices are desirable to ensure data immutability.<n>We introduce Socarrat, a novel, cost-effective, and local WORM storage solution that leverages a simple external USB device.<n>Socarrat significantly reduces the attack surface and ensures that even privileged attackers cannot modify or erase stored data.
  arXiv  Detail & Related papers  (2025-09-22T16:19:08Z)
• CipherGuard: Compiler-aided Mitigation against Ciphertext Side-channel Attacks [26.849878609957386]
  CipherGuard is a compiler-based mitigation tool to counteract ciphertext side channels with high efficiency and security guarantees.<n>In its most efficient strategy, CipherGuard incurs an average performance overhead of only 1.41X, with a maximum of 1.95X.
  arXiv  Detail & Related papers  (2025-02-19T03:22:36Z)
• Gradient-based facial encoding for key generation to encrypt and decrypt multimedia data [0.873811641236639]
  Security systems relying on passwords are vulnerable to being forgotten, guessed, or breached.<n>This paper introduces a biocryptosystem utilizing face recognition techniques to address these issues.<n>The proposed system creates a distinct 32-bit encryption key derived from facial features.
  arXiv  Detail & Related papers  (2024-12-09T19:12:17Z)
• Understanding crypter-as-a-service in a popular underground marketplace [51.328567400947435]
  Crypters are pieces of software whose main goal is to transform a target binary so it can avoid detection from Anti Viruses (AVs) applications. The crypter-as-a-service model has gained popularity, in response to the increased sophistication of detection mechanisms. This paper provides the first study on an online underground market dedicated to crypter-as-a-service.
  arXiv  Detail & Related papers  (2024-05-20T08:35:39Z)
• Enc2DB: A Hybrid and Adaptive Encrypted Query Processing Framework [47.11111145443189]
  We introduce Enc2DB, a novel secure database system following a hybrid strategy on and openGauss. We present a micro-benchmarking test and self-adaptive mode switch strategy that can choose the best execution path (cryptography or TEE) to answer a given query. We also design and implement a ciphertext index compatible with native cost model and querys to accelerate query processing.
  arXiv  Detail & Related papers  (2024-04-10T08:11:12Z)
• FileDES: A Secure Scalable and Succinct Decentralized Encrypted Storage Network [30.775493810737192]
  Decentralized Storage Network (DSN) is an emerging technology that challenges traditional cloud-based storage systems. We propose FileDES, which incorporates three essential elements: privacy preservation, scalable storage proof, and batch verification. Our protocol outperforms the others in terms of proof generation/verification efficiency, storage costs, and scalability.
  arXiv  Detail & Related papers  (2024-03-22T06:41:30Z)
• EmojiPrompt: Generative Prompt Obfuscation for Privacy-Preserving Communication with Cloud-based LLMs [34.77734655124251]
  EmojiPrompt performs generative transformation, obfuscating private data within prompts with linguistic and non-linguistic elements.<n>We evaluate EmojiPrompt's performance across 8 datasets from various domains.<n>EmojiPrompt's atomic-level obfuscation allows it to function exclusively with cloud-based LLMs.
  arXiv  Detail & Related papers  (2024-02-08T17:57:11Z)
• dabih -- encrypted data storage and sharing platform [0.0]
  dabih is an open-source web application designed to facilitate user-friendly encrypted data management. Its approach to data security involves a two-stage envelope encryption process. The private key necessary for decrypting the data remains exclusively on the owner's device.
  arXiv  Detail & Related papers  (2024-01-16T12:57:35Z)
• Revocable Cryptography from Learning with Errors [61.470151825577034]
  We build on the no-cloning principle of quantum mechanics and design cryptographic schemes with key-revocation capabilities. We consider schemes where secret keys are represented as quantum states with the guarantee that, once the secret key is successfully revoked from a user, they no longer have the ability to perform the same functionality as before.
  arXiv  Detail & Related papers  (2023-02-28T18:58:11Z)
• Recovering AES Keys with a Deep Cold Boot Attack [91.22679787578438]
  Cold boot attacks inspect the corrupted random access memory soon after the power has been shut down. In this work, we combine a novel cryptographic variant of a deep error correcting code technique with a modified SAT solver scheme to apply the attack on AES keys. Our results show that our methods outperform the state of the art attack methods by a very large margin.
  arXiv  Detail & Related papers  (2021-06-09T07:57:01Z)
• DeepKeyGen: A Deep Learning-based Stream Cipher Generator for Medical Image Encryption and Decryption [36.7308894683354]
  In this paper, a novel deep learning-based key generation network (DeepKeyGen) is proposed. DeepKeyGen is proposed as a stream cipher generator to generate the private key. The proposed key generation network can achieve a high-level security in generating the private key.
  arXiv  Detail & Related papers  (2020-12-21T03:21:59Z)
• A multi-level approach with visual information for encrypted H.265/HEVC videos [33.908744297617496]
  This paper proposes a multi-level encryption scheme that is composed of lightweight encryption, medium encryption and heavyweight encryption. It is found that both encrypting the luma intraprediction model (IPM) and scrambling the syntax element of the DCT coefficient sign can achieve the performance of a distorted video.
  arXiv  Detail & Related papers  (2020-11-05T02:20:43Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.