What is the Encrypting File System (EFS) and how does it work?

by | Feb 28, 2017 | CCNP, CompTIA, Data Breaches and Prevention, Data Security, Encryption, End Point Protection, Privacy

What is the Encrypting File System?

The Encrypting File System is a technology that does data encryption at the file level. This technology enables transparent encryption of data so that it can protect confidential data from attackers who have gained physical access to the system. It ensures data protection in file-level granularity. It can encrypt files and directories selectively or all of them using encryption keys.

Encrypting File System is available in all versions of Windows (starting from Windows 2000 onwards) developed for business environments.

How does the Encrypting File System work?

In the Encrypting File System, if we encrypt and decrypt files using asymmetric keys, it may take a longer time and degrade the performance of the file system. So, symmetric key encryption is used for that purpose.

The symmetric encryption algorithm used in the Encrypting File System varies with file systems and their versions. Usually, a file symmetric key is used to encrypt and decrypt the files, and the file symmetric key is again encrypted with the public key of the user.

When a user authenticates himself, the Encrypting File System component driver checks the digital certificate to retrieve the private key and then decrypts the symmetric key using that private key. All files and directories later are encrypted and decrypted using the symmetric key.

Folders or directories whose contents are to be encrypted in the file system are marked with a special field. If a folder or directory is marked to be encrypted, then all subfolders or subdirectories under it are marked to be encrypted.

If a file or directory is copied to a volume formatted with a different file system, then the file or directory is first decrypted with the symmetric key and then copied. But, usually, at the time of backup, the files are copied in encrypted form. The backup applications take care of that.

What are the vulnerabilities of the Encrypting File System?

There are mainly two vulnerabilities in the Encrypting File System.

  • Usually, the local administrator is the default data recovery agent. He can decrypt the encrypted files of all users. So, an attacker can hack the local administrator’s account and steal the data. However, some Encrypting File Systems prevent this vulnerability by keeping no default data recovery agent. Instead, the password files of all users are again encrypted with another key and that passphrase and key are kept safeguarded from the attacker.
  • The attacker can hack a user’s account and reset the local user’s password. This will enable him to gain access to the RSA private key and decrypt all the files. Some Encrypting File Systems prevent this vulnerability by encrypting the user’s private key with the hash of the user’s password as well as a salt. So, the attacker would still need the user’s passphrase to get access to the user’s private key.
Facebooktwitterredditpinterestlinkedinmail

Calculate the pseudoinverse of a matrix using Python

What is the pseudoinverse of a matrix? We know that if A is a square matrix with full rank, then A-1 is said to be the inverse of A if the following condition holds: $latex AA^{-1}=A^{-1}A=I $ The pseudoinverse or the Moore-Penrose inverse of a matrix is a...

Cholesky decomposition using Python

What is Cholesky decomposition? A square matrix A is said to have Cholesky decomposition if it can be written as a product of a lower triangular matrix and its conjugate transpose. $latex A=LL^{*} $ If all the entries of A are real numbers, then the conjugate...

Tensor Hadamard Product using Python

In one of our previous articles, we already discussed what the Hadamard product in linear algebra is. We discussed that if A and B are two matrices of size mxn, then the Hadamard product of A and B is another mxn matrix C such that: $latex H_{i,j}=A_{i,j} \times...

Perform tensor addition and subtraction using Python

We can use numpy nd-array to create a tensor in Python. We can use the following Python code to perform tensor addition and subtraction. import numpy A = numpy.random.randint(low=1, high=10, size=(3, 3, 3)) B = numpy.random.randint(low=1, high=10, size=(3, 3, 3)) C =...

How to create a tensor using Python?

What is a tensor? A tensor is a generalization of vectors and matrices. It is easily understood as a multidimensional array. For example, in machine learning, we can organize data in an m-way array and refer it as a data tensor. Data related to images, sounds, movies,...

How to combine NumPy arrays using horizontal stack?

We can use the hstack() function from the numpy module to combine two or more NumPy arrays horizontally. For example, we can use the following Python code to combine three NumPy arrays horizontally. import numpy A = numpy.array([[1, 2, 3], [4, 5, 6], [7, 8, 9]]) B =...

How to combine NumPy arrays using vertical stack?

Let’s say we have two or more NumPy arrays. We can combine these NumPy arrays vertically using the vstack() function from the numpy module. For example, we can use the following Python code to combine three NumPy arrays vertically. import numpy A = numpy.array([[1, 2,...

Singular Value Decomposition (SVD) using Python

What is Singular Value Decomposition (SVD)? Let A be an mxn rectangular matrix. Using Singular Value Decomposition (SVD), we can decompose the matrix A in the following way: $latex A_{m \times n}=U_{m \times m}S_{m \times n}V_{n \times n}^T $ Here, U is an mxm matrix....

Eigen decomposition of a square matrix using Python

Let A be a square matrix. Let’s say A has k eigenvalues λ1, λ2, ... λk. And the corresponding eigenvectors are X1, X2, ... Xk. $latex X_1=\begin{bmatrix} x_{11} \\ x_{21} \\ x_{31} \\ ... \\ x_{k1} \end{bmatrix} \\ X_2=\begin{bmatrix} x_{12} \\ x_{22} \\ x_{32} \\ ......

How to calculate eigenvalues and eigenvectors using Python?

In our previous article, we discussed what eigen values and eigenvectors of a square matrix are and how we can calculate the eigenvalues and eigenvectors of a square matrix mathematically. We discussed that if A is a square matrix, then $latex (A- \lambda I) \vec{u}=0...

Amrita Mitra

Author

Ms. Amrita Mitra is an author, who has authored the books “Cryptography And Public Key Infrastructure“, “Web Application Vulnerabilities And Prevention“, “A Guide To Cyber Security” and “Phishing: Detection, Analysis And Prevention“. She is also the founder of Asigosec Technologies, the company that owns The Security Buddy.

0 Comments

Submit a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Not a premium member yet?

Please follow the link below to buy The Security Buddy Premium Membership.

Featured Posts

Translate »