StrongDisk Emergency Options: Volumes Secured with a Password Only

Written: 24th January 2002
Last updated: 24th January 2002

Contents

Introduction

This document details the expected and actual results of using the various "emergency options" provided by StrongDisk when used in conjunction with volume files that are secured using passwords only (i.e. no external keys or keyfiles are used)

These tests results were obtained from StrongDisk v2.8.5.7

Explanation of the Results Reported

Each of the two result tables following use the following abbreviations to indicate the actual/expected outcome of the test:
 
Result Explanation
(Wrong pass) StrongDisk reports that the "wrong password" was entered; no further action is taken and the user is returned to the "Mount disk" dialog
Real volume mounted The real volume was correctly mounted
False volume mounted The false volume was mounted
Volume files swapped The real and false volume files were swapped
FVP changed to DP The password for the false volume file was changed to the "destruction password"
Real volume destroyed The real volume file should be destroyed: "erased completely, and further recovery is impossible" as StrongDisk's documentation puts it

Expected Results

The following table details the expected results of turning on each of StrongDisk's "emergency" options, as described in the StrongDisk documentation.

An explanation of each of the result entries can be found towards the beginning of this document
 
Test # Options selected Password entered
Enable destrution of volume file Enable destruction of keys Replace real volume with false Enable mounting false disks Real volume's password False volume's password "Destruction" password
0 No No No No Real volume mounted (Wrong pass) (Wrong pass)
1 Yes Real volume mounted False volume mounted (Wrong pass)
2 Yes No n/a [*1]
3 Yes Real volume mounted
  • Volume files swapped
  • False volume mounted
    		•  (Wrong pass)
    4 Yes No No Real volume mounted Nothing (wrong password)
  • Volume files swapped
  • FVP changed to DP
  • False volume mounted
    		•
    5 Yes Real volume mounted False volume mounted
  • Volume files swapped
  • FVP changed to DP
  • False volume mounted
    		•
    6 Yes No n/a [*1]
    7 Yes Real volume mounted
  • Volume files swapped
  • False volume mounted
    		•
  • Volume files swapped
  • FVP changed to DP
  • False volume mounted
    		•
    8 Yes No No No Real volume mounted (Wrong pass)
  • Volume files swapped
  • Real volume destroyed
    		•
    9 Yes Real volume mounted False volume mounted
  • Volume files swapped
  • Real volume destroyed
    		•
    10 Yes No n/a [*1]
    11 Yes Real volume mounted
  • Volume files swapped
  • False volume mounted
    		•
  • Volume files swapped
  • Real volume destroyed
    		•
    12 Yes No No Real volume mounted (Wrong pass) (Wrong pass)
    13 Yes Real volume mounted False volume mounted (Wrong pass)
    14 Yes No n/a [*1]
    15 Yes Real volume mounted
  • Volume files swapped
  • False volume mounted
    		•  (Wrong pass)

    Notes:
    [*1] = The "Replace real volume with false" option cannot be selected unless "Enable mounting false disks" is also selected

    Test Results

    The following table reports the effects of turning on the various StrongDisk options when using real and false volume files that were secured using different passwords

    The results obtained were achieved by selecting the "real" volume file, and entering the passwords described in the table

    An explanation of each of the result entries can be found towards the beginning of this document

    Where the actual results obtained deviate from the expected result, this is indicated by the relevant cell being coloured red
     
    Test # Options selected Password entered
    Enable destrution of volume file Enable destruction of keys Replace real volume with false Enable mounting false disks Real volume's password False volume's password "Destruction" password
    0 No No No No Real volume mounted (Wrong pass) (Wrong pass)
    1 Yes Real volume mounted False volume mounted (Wrong pass)
    2 Yes No n/a [*1]
    3 Yes Real volume mounted
  • Volume files swapped
  • False volume mounted
    		•  (Wrong pass)
    4 Yes No No Real volume mounted Nothing (wrong password)
  • Volume files swapped
  • FVP changed to DP
  • False volume mounted
    		•
    5 Yes Real volume mounted False volume mounted
  • Volume files swapped
  • FVP changed to DP
  • False volume mounted
    		•
    6 Yes No n/a [*1]
    7 Yes Real volume mounted
  • Volume files swapped
  • False volume mounted
    		•
  • Volume files swapped
  • FVP changed to DP
  • False volume mounted
    		•
    8 Yes No No No Real volume mounted (Wrong pass)
  • Volume files swapped
  • FVP changed to DP
  • False volume mounted
    		•
    9 Yes Real volume mounted False volume mounted
  • Volume files swapped
  • FVP changed to DP
  • False volume mounted
    		•
    10 Yes No n/a [*1]
    11 Yes Real volume mounted
  • Volume files swapped
  • False volume mounted
    		•
  • Volume files swapped
  • FVP changed to DP
  • False volume mounted
    		•
    12 Yes No No Real volume mounted (Wrong pass)
  • Volume files swapped
  • FVP changed to DP
  • False volume mounted
    		•
    13 Yes Real volume mounted False volume mounted
  • Volume files swapped
  • FVP changed to DP
  • False volume mounted
    		•
    14 Yes No n/a [*1]
    15 Yes Real volume mounted
  • Volume files swapped
  • False volume mounted
    		•
  • Volume files swapped
  • FVP changed to DP
  • False volume mounted
    		•

    Notes:
    [*1] = The "Replace real volume with false" option cannot be selected unless "Enable mounting false disks" is also selected

    Summary

    When volume files are secured by only using simple password, using no keyfiles or other "external keys", StrongDisk operates correctly, unless the option to "Enable destruction of volume files" is turned on. In this case, StrongDisk does not operate as it claims.

    In no way did StrongDisk fulfil it's claim that it would erase the real volume completely such that recovery of the real volume would be impossible. Instead the real volume could easily be mounted using it's correct password, and all data stored within this volume was 100% intact and readable. Contrary to it's claims, StrongDisk did not alter the real volume file at all, instead it simply changed the false volume's password to be the "destruction password", and mounted the false volume.