3 ms·
When a new key is generated, how can you be certain that the old key is securely deleted?
by panarky 2y ago
When a new key is generated, how can you be certain that the old key is securely deleted?
- chipsa 2y agoDrives which support doing this in hardware have a block just for storing the key. Because it’s not often rewritten, it doesn’t need to go in the pool of blocks that can get remapped.
- Gigachad 2y agoYou have to trust the SSD firmware. And if you don’t, just add your own layer of encryption and manage the key yourself.
- mmooss 2y agoHow do you be certain that ShredOS or any other component does its job? You can always physically burn the drive, but make sure you actually watch it turn to slag.