Re: Good design for a Algorithmically Derived Passphrase for FDE (?!)

["Ali, Saqib" <docbook.xml () gmail com>]

On Nov 17, 2007 8:51 PM, ManInWhite <maninwhite () tpg com au> wrote:
> It has been suggested that we use an
> algorithm derived passphrase based on some unique hardware number.
> [ HDD Serial# / Laptop Serial# ]

So when the laptop is stolen, the thief will also have all these
serial number, and if they get hold of their algorithm, they can
re-construct passphrase for any laptop.

this kind of scheme may work for equipment that doesn't leave the
facility e.g. servers in datacenter. But definitely don't use this for
laptops.

I suspect you are trying to use BitLocker, which lack centralized key
management. I would suggest you take a look at some other holistic
solutions for encrypting your laptops.

Saqib
http://www.full-disk-encryption.net/