Full Disk Encryption (FDE)
Full Disk Encryption (FDE) means encrypting an entire hard drive on a sector-by-sector basis rather than only encrypting specific files or folders.
The advantage of Full Disk Encryption is that you don't have to create rules and policies to define what files and folders should be protected. Consequently it mitigates the risk of leaving data such as temporary files or swap files unprotected.
Full Disk Encryption Solutions have evolved out of file and folder encryption solutions over the years and can be categorized into the following generations:
- Generation 1: File and folder encryption
- Generation 2: Software-based FDE
- Generation 3: Hardware-based FDE
- Generation 4: Hybrid (supports both SW and HW Full Disk Encryption)
SECUDE was the first vendor to provide a 4th generation Full Disk Encryption solution supporting legacy software-based and hardware-based FDE in a single hybrid solution.