News for hackers. Stuff that matters.

A comment on Amazon Echo Dot does not wipe personal content after factory reset. Parent comment

Re:Amazon Echo Dot does not wipe personal content after fact... by glitchc on Saturday July 24, 2021 @09:48PM (#27945956)
How can one trust it though? Presumably the key has to make its way into the drive to actually decrypt the data. How can one be sure the key was actually deleted and not archived somewhere in the controller’s storage?
[ Parent | on HN ]
Re:Amazon Echo Dot does not wipe personal content after fact... by infogulch on Saturday July 24, 2021 @10:27PM (#27946165)
Ideally, data is encrypted at the CPU (or coprocessor or TPU chip) and sent to the drive encrypted. The drive never gets the key, its only job is to store encrypted blocks correctly. In the TPU case, the TPU chip controls decryption and the key never leaves the specialized, tamper-resistant chip; wiping means sending a command to the TPU to rotate keys, thus instantly destroying any access to the data.
[ Parent | on HN ]