2 ms·
The common standard for SED is TCG OPAL. This has a pre-boot image allowing you to enter your password. Once the drive is decrypted it is completly transparent
by ZiiS 5y ago
The common standard for SED is TCG OPAL. This has a pre-boot image allowing you to enter your password. Once the drive is decrypted it is completly transparent with your unmodified bootloader and kernel loaded with normal commands.
I don't think the RasPi can trigger this unlocking nor could be modified to.
- ZiiS 5y ago* on boot. You can trigger the decryption of additional drives after boot.
- theandrewbailey 5y agoI noticed that OPAL features are becoming less used in encryption software, because the keys to some drives can be dumped through their JTAG ports.