3 ms·
Software erasure is no good on modern hardware, it pulls too many tricks internally and the data could easily stick around in a region of NAND not accessible. T
by cedws 2y ago
Software erasure is no good on modern hardware, it pulls too many tricks internally and the data could easily stick around in a region of NAND not accessible. There’s an easier way - use full disk encryption with a TPM. Data effectively erased upon destruction of TPM key.
- jeroenhd 2y agoThis is often how secure erase is implemented on SSD (though they often don't use TPMs). Encrypting data transparently on the controller, then regenerating the key on erasure request, turning the data on disk into useless bits. Of course this comes with the risk that someone exploits the firmware and extracts the key, rendering secure erase useless, but in most cases that's good enough.
- panarky 2y agoWhen a new key is generated, how can you be certain that the old key is securely deleted?
- chipsa 2y agoDrives which support doing this in hardware have a block just for storing the key. Because it’s not often rewritten, it doesn’t need to go in the pool of blocks that can get remapped.
- Gigachad 2y agoYou have to trust the SSD firmware. And if you don’t, just add your own layer of encryption and manage the key yourself.
- mmooss 2y agoHow do you be certain that ShredOS or any other component does its job? You can always physically burn the drive, but make sure you actually watch it turn to slag.
- blackeyeblitzar 2y agoWhat happens when the encryption is broken in the future? I feel like relying solely on the key isn’t good enough.
- p_ing 2y ago> What happens when the encryption is broken in the future? Your great, great grandchildren will be embarrassed of the websites you visited.
- nyclounge 2y agoOr whoever that has quantum computer in the near future. Encryption is just a cat and mouse game it is before long someone will figure out to decrypt it.
- foobarchu 2y agoThere is currently no reason to believe quantum computers will make breaking symmetric encryption like AES-256 any more practical than it is today. At best, grovers algorithm can modestly reduce the search time for brute forcing, but it's still brute force. Asymmetric algorithms like RSA are the ones you should be worrying about, and I can't imagine any reason someone would do disk encryption with an asymmetric algorithm.
- 445tg45g45 2y agoI don't understand why this question is asked in any context. What if an asteroid is on a collision course with Earth? What if Jesus comes back? What if the yeti is real?
- 01HNNWZ0MV43FF 2y agoIf that's in your threat model, fill the disk with random bytes. This works on the economic argument that if you could easily recover data from a disk that's been rewritten, drive manufacturers would exploit that already to increase storage. If your threat model includes attackers who bypass the firmware to read overwritten data, you are probably boned several other ways.
- jamesponddotco 2y agoI usually encrypt with LUKS and then delete the headers (and then physically destroy the disk). Don’t remember where I read about it, but been doing that for a while.
- throw0101b 2y ago> There’s an easier way - use full disk encryption with a TPM. Data effectively erased upon destruction of TPM key. Assuming you can trust the drives to actually encrypt: * https://news.ycombinator.com/item?id=18382975 https://news.ycombinator.com/item?id=18382975