Web lists-archives.com

Re: Possible for full-disk encryption to encrypt /boot as well?

On 2018-05-26, Robert Dodier <robert.dodier@xxxxxxxxx> wrote:
> On Sat, May 26, 2018 at 1:16 AM, Pascal Hambourg <pascal@xxxxxxxxxxxxxxx> wrote:
>> I don't know how Symantec's "full" disk encryption works, but AFAIK a boot
>> disk cannot be fully encrypted,
> Yes, this is an important question -- what, exactly, is provided by
> Symantec here, so that I can look for something to do the same for
> Linux. But not surprisingly I haven't been able to find a careful
> description -- so far all I have found is some marketing material. I
> will keep looking.

They seem to be saying the boot loader is decrypted prior to the point
at which it begins execution (a "pre-boot environment" is installed that
prompts the user for pass phrase, etc.)

> best,
> Robert Dodier