News for hackers. Stuff that matters.
Re:Everything I Know About SSDs by blattimwind on Wednesday January 15, 2020 @11:06AM (#22055391)
In practice all SSDs are always encrypted because they use the encryption to whiten the data written to them. That's why "Secure Erase" takes less than a second on SSDs, it doesn't erase anything but the key.
Re:Everything I Know About SSDs by Marsymars on Wednesday January 15, 2020 @12:56PM (#22056505)
Yes, but in practice, this encryption isn't competently implemented. Hence why MS stopped supporting hardware-accelerated BitLocker.

https://twitter.com/SwiftOnSecurity/status/11774296582599270...

Re:Everything I Know About SSDs by red_phone on Wednesday January 15, 2020 @10:36PM (#22061471)
They still support it, it’s just not the default any longer for drives that report the capability.
Re:Everything I Know About SSDs by Marsymars on Wednesday January 15, 2020 @11:13PM (#22061632)
Thanks for the correction - I expect that support is just a temporary state of affairs though. I used hardware accelerated BitLocker for a few years, and had my systems break multiple times due to BitLocker-related regressions when MS pushed updates. I can't imagine it's going to get more attention now that's it's never enabled by default.
Re:Everything I Know About SSDs by amarshall on Wednesday January 15, 2020 @11:38AM (#22055689)
With the caveat that this occurs in proprietary firmware which is non-trivial to audit. There have also been vulnerabilities discovered in the encryption features of disk firmware.
Re:Everything I Know About SSDs by e12e on Wednesday January 15, 2020 @11:10AM (#22055432)
But AFAIK this isn't true for all solid state storage, like cheap USB memory keys. These would generally also benefit from log structured filesystems - but really should be encrypted too.

(which is one great promise of zfs on linux/openzfs - cross-platform encrypted removable storage).

Re:Everything I Know About SSDs by nemo1618 on Wednesday January 15, 2020 @11:16AM (#22055492)
Interesting! Do you happen to know which encryption algorithm is used? I would think that, if the only goal is whitening (as opposed to robust security), a fairly weak algorithm would be used, or perhaps a strong algorithm with a reduced number of rounds.
Re:Everything I Know About SSDs by sigstoat on Wednesday January 15, 2020 @11:42AM (#22055735)
the hardware is going to use AES because their ASIC vendor will have well tested AES IP that they can just throw down on the chip. any other algorithm would require massive development effort for zero benefit.

and by using AES they can probably claim to satisfy some security standards that will make their marketing people happier.

Re:Everything I Know About SSDs by dspillett on Thursday January 16, 2020 @05:57AM (#22063404)
It would need to be a fairly good algorithm to provide good "whitening", but they could be using a small or easy to guess/derive keys especially if the primary purpose is just whitening rather than security.
Re:Everything I Know About SSDs by theandrewbailey on Wednesday January 15, 2020 @11:41AM (#22055725)
The algorithm probably depends on the drive, but AES-256 is common due to hardware acceleration. Read a SSD spec sheet sometime, it will likely mention it, along with supporting TCG Opal (the self encrypting drive standard).