Editing Data remanence (section)

===Encryption===

[[Encryption|Encrypting]] data before it is stored on the media may mitigate concerns about data remanence. If the [[Key (cryptography)|decryption key]] is strong and carefully controlled, it may effectively make any data on the media unrecoverable. Even if the key is stored on the media, it may prove easier or quicker to [[#Overwriting|overwrite]] just the key, versus the entire disk. This process is called [[crypto-shredding]].

Encryption may be done on a [[Filesystem-level encryption|file-by-file]] basis, or on the [[Disk encryption|whole disk]]. [[Cold boot attack]]s are one of the few possible methods for subverting a [[Disk encryption|full-disk encryption]] method, as there is no possibility of storing the plain text key in an unencrypted section of the medium. See the section [[#Complications|Complications: Data in RAM]] for further discussion.

Other [[side-channel attack]]s (such as [[keyloggers]], acquisition of a written note containing the decryption key, or [[rubber-hose cryptanalysis]]) may offer a greater chance of success, but do not rely on weaknesses in the cryptographic method employed. As such, their relevance for this article is minor.