Block-Ebene (EN)

Block-Ebene

Block-level encryption refers to the encryption of data at the level of individual data blocks, rather than files or entire file systems. This method works directly with the physical or logical blocks of the storage medium and is transparent to the file system above it. dm-crypt implements exactly this type of encryption by being able to read and write data before it is written to or read from the hard disk. The advantage of this method is that it is transparent to the entire system and protects all data on the storage medium.

Architektur

flowchart TD   A[Anwendung] --> B[Dateisystem]   B --> C[Block-Ebene-Verschlüsselung
(z.B. dm-crypt)]   C --> D[Physischer Speicher]      subgraph Verschlüsselungsprozess     E[Klartext-Block] --> F[Verschlüsselungsalgorithmus]     F --> G[Verschlüsselter Block]   end      subgraph Entschlüsselungsprozess     H[Verschlüsselter Block] --> I[Entschlüsselungsalgorithmus]     I --> J[Klartext-Block]   end 

Im Kontext

• Wird typischerweise zusammen mit LUKS (Linux Unified Key Setup) verwendet
• Verwandt zu: Dateisystem-Verschlüsselung, Vollverschlüsselung
• Beispiel-Einsatz: Verschlüsselung von Festplatten, SSDs oder USB-Laufwerken