my first post

NTDEV
2

D M wrote:

Hell0 Everyb0dy,

Please, learn the difference between the number zero (0) and the letter
oh (o) on your keyboard. Your post was very difficult to scan.

  1. I am trying t0 c0de an encrypti0n driver f0r the disk sect0rs, s0me
    guru t0ld me that I need t0 attach it t0 disk.sys, i did.

  2. An0ther guru t0ld me that y0u need t0 tap IRP_MJ_READ and
    IRP_MJ_WRITE, write the encrypti0n l0gic in WRITE, and the decrypti0n
    l0gic in read, I did.

  3. I have inf0rmati0n ab0ut the starting sect0r 0f a partiti0n, and
    the number 0f sect0rs in that partiti0n. I need t0 encrypt, even the
    FAT/MFT and the b00t sect0r.

You cannot encrypt the boot sector using a driver. The boot sector is
read by the BIOS, long before Windows starts executing. You need
encryption in the disk hardware to accomplish that.

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

3

Tim,

I beg to differ. You do not require it to be in hardware, you can do this
all in software but it is very difficult. You need to rewrite the MBR to
launch your own small 16 bit app which performs the initial decryption, etc.

This is not a trivial undertaking, even for someone working in this area for
many years. You can probably get it running in a few months but plan on many
more for getting things like hibernation and dump file support working
correctly.

Pete

Kernel Drivers
Windows Filesystem and Device Driver Consulting
www.KernelDrivers.com
(303)546-0300

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Tim Roberts
Sent: Friday, July 29, 2005 10:56 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] my first post

D M wrote:

Hell0 Everyb0dy,

Please, learn the difference between the number zero (0) and the letter
oh (o) on your keyboard. Your post was very difficult to scan.

  1. I am trying t0 c0de an encrypti0n driver f0r the disk sect0rs, s0me
    guru t0ld me that I need t0 attach it t0 disk.sys, i did.

  2. An0ther guru t0ld me that y0u need t0 tap IRP_MJ_READ and
    IRP_MJ_WRITE, write the encrypti0n l0gic in WRITE, and the decrypti0n
    l0gic in read, I did.

  3. I have inf0rmati0n ab0ut the starting sect0r 0f a partiti0n, and
    the number 0f sect0rs in that partiti0n. I need t0 encrypt, even the
    FAT/MFT and the b00t sect0r.

You cannot encrypt the boot sector using a driver. The boot sector is
read by the BIOS, long before Windows starts executing. You need
encryption in the disk hardware to accomplish that.

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: xxxxx@kerneldrivers.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

4

The use of 0 for o is a clich? of black-hat typing. Do we want to be
facilitating whatever this is?

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Peter Scott
Sent: Friday, July 29, 2005 3:05 PM
To: Windows System Software Devs Interest List
Subject: RE: [ntdev] my first post

Tim,

I beg to differ. You do not require it to be in hardware, you can do this
all in software but it is very difficult. You need to rewrite the MBR to
launch your own small 16 bit app which performs the initial decryption, etc.

This is not a trivial undertaking, even for someone working in this area for
many years. You can probably get it running in a few months but plan on many
more for getting things like hibernation and dump file support working
correctly.

Pete

Kernel Drivers
Windows Filesystem and Device Driver Consulting www.KernelDrivers.com
(303)546-0300

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Tim Roberts
Sent: Friday, July 29, 2005 10:56 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] my first post

D M wrote:

Hell0 Everyb0dy,

Please, learn the difference between the number zero (0) and the letter oh
(o) on your keyboard. Your post was very difficult to scan.

  1. I am trying t0 c0de an encrypti0n driver f0r the disk sect0rs, s0me
    guru t0ld me that I need t0 attach it t0 disk.sys, i did.

  2. An0ther guru t0ld me that y0u need t0 tap IRP_MJ_READ and
    IRP_MJ_WRITE, write the encrypti0n l0gic in WRITE, and the decrypti0n
    l0gic in read, I did.

  3. I have inf0rmati0n ab0ut the starting sect0r 0f a partiti0n, and
    the number 0f sect0rs in that partiti0n. I need t0 encrypt, even the
    FAT/MFT and the b00t sect0r.

You cannot encrypt the boot sector using a driver. The boot sector is read
by the BIOS, long before Windows starts executing. You need encryption in
the disk hardware to accomplish that.

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: xxxxx@kerneldrivers.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: xxxxx@dchbk.us
To unsubscribe send a blank email to xxxxx@lists.osr.com

5

That was my first impression as well. Then I thought, ‘couldn’t be that
stupid’, but who knows?

=====================
Mark Roddy DDK MVP
Windows 2003/XP/2000 Consulting
Hollis Technology Solutions 603-321-1032
www.hollistech.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Benson
Margulies
Sent: Friday, July 29, 2005 4:57 PM
To: Windows System Software Devs Interest List
Subject: RE: [ntdev] my first post

The use of 0 for o is a clich? of black-hat typing. Do we
want to be facilitating whatever this is?

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Peter Scott
Sent: Friday, July 29, 2005 3:05 PM
To: Windows System Software Devs Interest List
Subject: RE: [ntdev] my first post

Tim,

I beg to differ. You do not require it to be in hardware, you
can do this all in software but it is very difficult. You
need to rewrite the MBR to launch your own small 16 bit app
which performs the initial decryption, etc.

This is not a trivial undertaking, even for someone working
in this area for many years. You can probably get it running
in a few months but plan on many more for getting things like
hibernation and dump file support working correctly.

Pete

Kernel Drivers
Windows Filesystem and Device Driver Consulting
www.KernelDrivers.com (303)546-0300

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Tim Roberts
Sent: Friday, July 29, 2005 10:56 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] my first post

D M wrote:

>
> Hell0 Everyb0dy,
>

Please, learn the difference between the number zero (0) and
the letter oh
(o) on your keyboard. Your post was very difficult to scan.

> 1. I am trying t0 c0de an encrypti0n driver f0r the disk
sect0rs, s0me
> guru t0ld me that I need t0 attach it t0 disk.sys, i did.
>
> 2. An0ther guru t0ld me that y0u need t0 tap IRP_MJ_READ and
> IRP_MJ_WRITE, write the encrypti0n l0gic in WRITE, and the
decrypti0n
> l0gic in read, I did.
>
> 3. I have inf0rmati0n ab0ut the starting sect0r 0f a partiti0n, and
> the number 0f sect0rs in that partiti0n. I need t0 encrypt,
even the
> FAT/MFT and the b00t sect0r.
>

You cannot encrypt the boot sector using a driver. The boot
sector is read by the BIOS, long before Windows starts
executing. You need encryption in the disk hardware to
accomplish that.

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as:
xxxxx@kerneldrivers.com To unsubscribe send a blank email to
xxxxx@lists.osr.com

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: xxxxx@dchbk.us To
unsubscribe send a blank email to xxxxx@lists.osr.com

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag
argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

6

The original post went to NTFSD with no 0’s. I assume OSR prevented a
duplicate post to NTDEV, so the author did a global search and replace
0-for-o to get past it. Annoying, but dont think it was the juvenile
black-hat post I first thought it was.

0r m3bb3 I cud b wr0ng =8^)

Bob Kennett

-------- Original Message --------
Subject: RE: [ntdev] my first post
From: “Benson Margulies”
> Date: Fri, July 29, 2005 4:57 pm
> To: “Windows System Software Devs Interest List”
>
> The use of 0 for o is a cliché of black-hat typing. Do we want to be
> facilitating whatever this is?
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Peter Scott
> Sent: Friday, July 29, 2005 3:05 PM
> To: Windows System Software Devs Interest List
> Subject: RE: [ntdev] my first post
>
>
> Tim,
>
> I beg to differ. You do not require it to be in hardware, you can do this
> all in software but it is very difficult. You need to rewrite the MBR to
> launch your own small 16 bit app which performs the initial decryption, etc.
>
> This is not a trivial undertaking, even for someone working in this area for
> many years. You can probably get it running in a few months but plan on many
> more for getting things like hibernation and dump file support working
> correctly.
>
> Pete
>
> Kernel Drivers
> Windows Filesystem and Device Driver Consulting www.KernelDrivers.com
> (303)546-0300
>
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Tim Roberts
> Sent: Friday, July 29, 2005 10:56 AM
> To: Windows System Software Devs Interest List
> Subject: Re: [ntdev] my first post
>
> D M wrote:
>
> >
> > Hell0 Everyb0dy,
> >
>
> Please, learn the difference between the number zero (0) and the letter oh
> (o) on your keyboard. Your post was very difficult to scan.
>
> > 1. I am trying t0 c0de an encrypti0n driver f0r the disk sect0rs, s0me
> > guru t0ld me that I need t0 attach it t0 disk.sys, i did.
> >
> > 2. An0ther guru t0ld me that y0u need t0 tap IRP_MJ_READ and
> > IRP_MJ_WRITE, write the encrypti0n l0gic in WRITE, and the decrypti0n
> > l0gic in read, I did.
> >
> > 3. I have inf0rmati0n ab0ut the starting sect0r 0f a partiti0n, and
> > the number 0f sect0rs in that partiti0n. I need t0 encrypt, even the
> > FAT/MFT and the b00t sect0r.
> >
>
> You cannot encrypt the boot sector using a driver. The boot sector is read
> by the BIOS, long before Windows starts executing. You need encryption in
> the disk hardware to accomplish that.
>
> –
> Tim Roberts, xxxxx@probo.com
> Providenza & Boekelheide, Inc.
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@kerneldrivers.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@dchbk.us
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
> —
> Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
> To unsubscribe send a blank email to xxxxx@lists.osr.com