Re:Rowhammer-like attack on SSDs can provide root privileges...
by Piskvorrr on Wednesday August 16, 2017 @04:15PM
(#15030943)
Nope. The drive's firmware generates the key pseudorandomly when it receives the "securely wipe drive" command, this happens at least once before the drive is shipped from a factory. Thence, the key remains unchanged, unless another "securely wipe drive" command is received. This happens transparently to the user.
Re:Rowhammer-like attack on SSDs can provide root privileges...
by leereeves on Wednesday August 16, 2017 @05:19PM
(#15031462)
Every SSD works that way? Is that a standard?
Re:Rowhammer-like attack on SSDs can provide root privileges...
by Piskvorrr on Wednesday August 16, 2017 @06:08PM
(#15031787)
Bog-standard. As mentioned in sibling thread, you could find really old SSDs without this feature, but they're getting rare.
Re:Rowhammer-like attack on SSDs can provide root privileges...
by ericseppanen on Wednesday August 16, 2017 @09:10PM
(#15032846)
Drives that lack cryptographic scrambling are not rare. Search a few vendors' sites and you'll find some that don't support "self-encrypting" capabilities.
Re:Rowhammer-like attack on SSDs can provide root privileges...
by wtallis on Wednesday August 16, 2017 @09:37PM
(#15032995)
It's pretty common for drives to have hardware AES support even if they don't implement the full TCG Opal feature set for use as a "self encrypting drive". I think Phison is the only SSD controller vendor that doesn't advertise encryption capability on all of their mainstream SSD controllers.
00000000
If it's anything else the user would have to enter the key. So in practice, it's not /really/ encrypted.