Rowhammer-like attack on SSDs can provide root privileges to attacker

Re:Rowhammer-like attack on SSDs can provide root privileges... by Piskvorrr on Wednesday August 16, 2017 @04:15PM (#15030943)

Nope. The drive's firmware generates the key pseudorandomly when it receives the "securely wipe drive" command, this happens at least once before the drive is shipped from a factory. Thence, the key remains unchanged, unless another "securely wipe drive" command is received. This happens transparently to the user.

[ Parent | on HN ]

Re:Rowhammer-like attack on SSDs can provide root privileges... by leereeves on Wednesday August 16, 2017 @05:19PM (#15031462)

Every SSD works that way? Is that a standard?

[ Parent | on HN ]

Re:Rowhammer-like attack on SSDs can provide root privileges... by Piskvorrr on Wednesday August 16, 2017 @06:08PM (#15031787)

Bog-standard. As mentioned in sibling thread, you could find really old SSDs without this feature, but they're getting rare.

[ Parent | on HN ]

Re:Rowhammer-like attack on SSDs can provide root privileges... by ericseppanen on Wednesday August 16, 2017 @09:10PM (#15032846)

Drives that lack cryptographic scrambling are not rare. Search a few vendors' sites and you'll find some that don't support "self-encrypting" capabilities.

[ Parent | on HN ]

Re:Rowhammer-like attack on SSDs can provide root privileges... by wtallis on Wednesday August 16, 2017 @09:37PM (#15032995)

It's pretty common for drives to have hardware AES support even if they don't implement the full TCG Opal feature set for use as a "self encrypting drive". I think Phison is the only SSD controller vendor that doesn't advertise encryption capability on all of their mainstream SSD controllers.

[ Parent | on HN ]

Re:Rowhammer-like attack on SSDs can provide root privileges... by dijit on Thursday August 17, 2017 @07:10AM (#15035615)

I'm referencing work by the Drive Trust Alliance

https://github.com/Drive-Trust-Alliance/sedutil/wiki

[ Parent | on HN ]