Full-disk encryption mostly uses a single key to encrypt the whole volume. And all data can be decrypted when the system runs. So, if an attacker gets access to the computer at run time, he can get access to all the files.

Filesystem-level encryption, on the other hand, uses different keys to encrypt different parts of the disk. So, the attacker cannot extract information from still encrypted files and folders. So, from this aspect, filesystem-level encryption seems to be a better solution than full-disk encryption.

But, filesystem-level encryption does not typically encrypt the filesystem metadata, such as directory structure, file names, modification timestamps, sizes, etc. So, if an attacker gets access to a stolen disk, he will still be able to get some information from the filesystem metadata.

Which one is better – Full Disk Encryption or File System Level Encryption?

As we have seen, both of these technologies have their own pros and cons. So, a better solution is to go with Full-disk encryption along with filesystem-level encryption rather than going with any one of the technologies alone.

Full-disk encryption with filesystem-level encryption is always robust and secure enough to prevent any data theft from the system.

I hope this helps. Interested readers who want to know more about how different cryptographic algorithms and Public Key Infrastructure work may want to refer to the book “Cryptography And Public Key Infrastructure.”

Security Fundamentals Practice Tests

The Security Fundamentals Practice Tests test one’s fundamental knowledge of cyber security. The practice tests are good for those who are preparing for various certification exams like the CCNA, CCNP, or CompTIA. They are also good for students and IT/security professionals who want to improve their understanding of cybersecurity.