RE: Security and SSD

Matt, the article had something to say about that as well...

<snip>
The bright spot was encrypted SSDs, effectively deleting the encryption key makes the stored data useless. The one concern forwarded by the researchers is that there is no way to verify that the memory locations storing the encryption key data were sufficiently sanitized.
</snip)

All things considered, it might be best to keep Paul Nelson and his Tannerite solution in mind when disposing of old SSDs.
http://archive.midrange.com/midrange-l/201302/msg01022.html

-Eric DeLong

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Matt Olson
Sent: Friday, February 14, 2014 10:01 AM
To: Midrange Systems Technical Discussion
Subject: RE: Security and SSD

Erasing drives like you have done in the past is old school.

Do yourself a favor, make all future hard drives you purchase SED drives (self encrypting drives) and you can just wipe the drive clean in milliseconds by destroying the crypto key on the drive. Software based encryption on the host is a dead technology in my opinion.

Go presentation on the topic here: http://snia.org/sites/default/files/Solid%20Security%20012412.pdf

For more info on the "crypto erase" they mention on the presentation read the section under "disk sanitization" here: http://en.wikipedia.org/wiki/Hardware-based_full_disk_encryption

-----Original Message-----
From: John McKee [mailto:jmmckee@xxxxxxxxxxxxxx]
Sent: Friday, February 14, 2014 9:26 AM
To: Midrange Systems Technical Discussion
Subject: Security and SSD

Has anybody seen this article, or anything more specific?

http://www.techrepublic.com/article/erasing-ssds-security-is-an-issue/#ftag=RSS56d97e7

John McKee
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.