[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#931317: debian-installer: A feature to "secure erase" SSDs would be nice



On 2019-07-02 00:33, Ben Hutchings wrote:
On Mon, 2019-07-01 at 22:09 +0200, Philip Hands wrote:
I think it's probably rather hard to do safely, as IIRC one often needs
to try hdparm, then in order to cause the drive not to be locked do
something like suspend and resume the system, then set an admin
password, and only then do the secure erase ... which then takes
quite a while.
I believe that modern drives (both HD and SSD) often have their own
encryption layer, and secure erase is implemented by erasing the
encryption key and (on an SSD) marking all blocks free in the flash
translation layer.

Unfortunately the locking bit is still true for many machines, so even if it is quick, it can be hard to get the drive into the state where the BIOS did not have an opportunity to block the user from triggering the erase operation.

Kind regards
Philipp Kern


Reply to: