encrypt hibernation file

NTDEV
1

Hi

Hibernation file is not written to disk in usual way.

does anyone of you know how the hibernation file is written to disk.

IRP_MN_DEVICE_USAGE_NOTIFICATION) . what is the use of this IRP. Is
this IRP linked in some way with the procedure used for writing
hibernation file to disk.

Thanks
Rohit

2

As Tony Mason explained last week on NTFSD, there is an alternate stack set
up for the hibernation and crash dump cases. If you want more information,
I recommend you contact OSR (with lots of money in your pocket). I am being
real here, this stuff is complex and a few years ago that was my solution
for a firm.

Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Remove StopSpam from the email to reply

----- Original Message -----
From: “Rohit Gauba, Noida”
To: “Windows System Software Devs Interest List”
Sent: Monday, July 11, 2005 7:45 AM
Subject: [ntdev] encrypt hibernation file

Hi

Hibernation file is not written to disk in usual way.

does anyone of you know how the hibernation file is written to disk.

IRP_MN_DEVICE_USAGE_NOTIFICATION) . what is the use of this IRP. Is
this IRP linked in some way with the procedure used for writing
hibernation file to disk.

Thanks
Rohit

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

3

Search the list for the various discussions of the ‘dump device’. There
is an entirely separate storage stack dedicated to the task of writing
dump and hibernation files. It is undocumented. It changes its
architecture without notice. Any construct you invent to manipulate the
dump device is going to be a major maintenance headache.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Rohit Gauba,
Noida
Sent: Monday, July 11, 2005 7:45 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] encrypt hibernation file

Hi

Hibernation file is not written to disk in usual way.

does anyone of you know how the hibernation file is written to disk.

IRP_MN_DEVICE_USAGE_NOTIFICATION) . what is the use of this IRP. Is
this IRP linked in some way with the procedure used for writing
hibernation file to disk.

Thanks
Rohit

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

4

Or you could use a disc with FDE (full disc encryption) and know that
everything on the disc is encrypted, whether or not it uses the dump stack
or storage stack, since the firmware on the disc is doing the encrypting and
decrypting.

–
The personal opinion of
Gary G. Little

“Roddy, Mark” wrote in message news:xxxxx@ntdev…
Search the list for the various discussions of the ‘dump device’. There
is an entirely separate storage stack dedicated to the task of writing
dump and hibernation files. It is undocumented. It changes its
architecture without notice. Any construct you invent to manipulate the
dump device is going to be a major maintenance headache.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Rohit Gauba,
Noida
Sent: Monday, July 11, 2005 7:45 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] encrypt hibernation file

Hi

Hibernation file is not written to disk in usual way.

does anyone of you know how the hibernation file is written to disk.

IRP_MN_DEVICE_USAGE_NOTIFICATION) . what is the use of this IRP. Is
this IRP linked in some way with the procedure used for writing
hibernation file to disk.

Thanks
Rohit

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

5

Or a host controller that does the same thing with any drive.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Gary G. Little
Sent: Monday, July 11, 2005 7:19 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] encrypt hibernation file

Or you could use a disc with FDE (full disc encryption) and know that
everything on the disc is encrypted, whether or not it uses the dump
stack
or storage stack, since the firmware on the disc is doing the encrypting
and
decrypting.

–
The personal opinion of
Gary G. Little

“Roddy, Mark” wrote in message
news:xxxxx@ntdev…
Search the list for the various discussions of the ‘dump device’. There
is an entirely separate storage stack dedicated to the task of writing
dump and hibernation files. It is undocumented. It changes its
architecture without notice. Any construct you invent to manipulate the
dump device is going to be a major maintenance headache.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Rohit Gauba,
Noida
Sent: Monday, July 11, 2005 7:45 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] encrypt hibernation file

Hi

Hibernation file is not written to disk in usual way.

does anyone of you know how the hibernation file is written to disk.

IRP_MN_DEVICE_USAGE_NOTIFICATION) . what is the use of this IRP. Is
this IRP linked in some way with the procedure used for writing
hibernation file to disk.

Thanks
Rohit

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: xxxxx@nvidia.com
To unsubscribe send a blank email to xxxxx@lists.osr.com