The classic Linux shred command will work just fine, same as on any type of disk. But what you should actually do use use the drive’s built–in instance secure

The classic Linux shred command will work just fine, same as on any type of disk. But what you should actually do use use the drive’s built–in instance secure erase feature. This changes the encryption key to a new one, so all existing data is rendered permanently unavailable. Not all drives have disk encryption, but when they do it works the same way whether it’s an SSD or spinning rust. Use hdparm’s --sanitize-crypto-scramble command–line option to do this. Some drives only have an older feature that does a secure erase that overwrites every block in the device. This is much slower, so use it only if your drive doesn’t support anything better. Use hdparm’s --sanitize-block-erase command–line option. These options exist for all ATA, SATA, SAS, SCSI, and NVMe drives (though I don’t believe that hdparm knows anything about NVMe, so you probably have to use the nvme command instead).