@nazokiyoubinbou @nixCraft Maybe I’m missing something, but with SSDs it’s just better to encrypt the content of the drive. Destroying the key then effectively erases the data.
Top-level
@nazokiyoubinbou @nixCraft Maybe I’m missing something, but with SSDs it’s just better to encrypt the content of the drive. Destroying the key then effectively erases the data. 5 comments
@nazokiyoubinbou @nixCraft Isn’t drive encryption / decryption done in hardware these days anyways? @nazokiyoubinbou @nixCraft I did? I was only talking about the performance loss due to the encryption. All your points are valid, though. @melgu @nazokiyoubinbou @nixCraft I don't see that flushing the key is particularly future proof. The data remains only whilst the encryption remains strong. |
@melgu @nixCraft I mean someone going extreme enough to drill through them is presumably assuming that an attacker might be able to extract data, so I would assume they would not trust encryption to be absolute either. (There are also other side effects like performance loss if it uses a complex enough encryption to be worthwhile.)
Either way though, a full cell erase should be sufficient. No need to be super wasteful and destructive.