-----BEGIN PGP SIGNED MESSAGE----- You could put the key in the unused sectors of the drive. Chkdsk will probably not like that at all, and I imagine some virus scanners. Virus scanners, there is another problem. Some of them would be useless wouldn't they, because I think they go around int 13h (since viruses can stealth around int 13h, right?) so you would need to tell people about that type of problem. But putting the key in the unused sectors still doesn't provide enough protection. What is the problem with just having a regular key file, and when the user boots up the computer it asks them a pass phrase to decrypt the key file? If they fail wipe the key and force the user to restore the key from a backup somewhere. d. saint -----BEGIN PGP SIGNATURE----- Version: 2.2 iQBVAgUBLBYeX1gV4u6tNx5/AQE66AIA1NVezgP2BkfZUpot6LMVEzciBDCfl1Kq d1QbgNpgK3OINAq/IhYimUMotE+oXng59fHJYeWf+/QINxBwPYfx0Q== =i8F7 -----END PGP SIGNATURE-----