Re:FreeBSD Full Disk Encryption, with an External Boot Drive...
by cuckcuckspruce on Tuesday March 15, 2016 @06:58PM
(#11293704)
Zeroing should be sufficient on any recent drive[0]. The remanence of modern magnetic drives is so low that zero should be sufficient to wipe out whatever is there.
[0] http://security.stackexchange.com/questions/10464/why-is-wri...
I was under the impression zeroing, well, didn't fully zero—specialized tools can recover the former bits. If you write a truly random stream to the drive, it's much harder to recover the former bit versus the new, random one. To my understanding it's the same reason why XORing one-time-pads are utterly effective as a form of encryption (and you can throw away the pad).