All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 5 posts ] 
Author Message
 Post subject: SSD SED (Self Encrypting Drive), ATA Security Mode = Maximum
PostPosted: July 16th, 2015, 19:03 
Offline

Joined: July 16th, 2015, 18:40
Posts: 1
Location: Germany
Almost all SSD are SED (Self Encrypting Drive). Intel, Samsung, Crucial, ...

As the tool "TrueCrypt" to encrypt data is not recomended for SSD, the question is - if a SED SSD with ATA Security Mode set to MAXIMUM is as good as TrueCrypt crypted drive???

Security Mode = High: somebody can decrypt/unlock SSD with user or master password
Security Mode = Max: only user password can decrypt/unlock SSD. Master password can only be used for secure erase command (delete all data, and then unlock drive), no access to data with master password, even if a default master password exists or was set by factory???

btw: if you have a ASROCK desktop mainboard and want to use HDD password, you should write an email to ASROCK, they will send you an BIOS/UEFI with ATA Security functions in 1-2 days :) . ASUS will not do so, they will say ATA Security is only usefull in notebooks, so they dont support it in desktop mainboards :( .


Top
 Profile  
 
 Post subject: Re: SSD SED (Self Encrypting Drive), ATA Security Mode = Max
PostPosted: July 20th, 2015, 5:04 
Offline
User avatar

Joined: February 4th, 2013, 15:36
Posts: 57
Location: Russia
All depends on how the security subsystem implemented into the firmware. As far as there are no public access to the source codes, there could be backdoors and exploits. So, IMHO, no it is not so good as TrueCrypt.


Top
 Profile  
 
 Post subject: Re: SSD SED (Self Encrypting Drive), ATA Security Mode = Max
PostPosted: July 20th, 2015, 21:37 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3779
Location: Adelaide, Australia
Given the recent proof from the Snowden revelations, and more recently, the Hacking Team Files with a BIOS/UEFI persistent rootkit in development.. AND coupled with no Government, large corporation or civilian user seems safe from these shenanigans... how are you going to certify a "known good state" ?

BTW Truecrypt is not available to use anymore, so that's out. Yes there are forks, but how mature are they?

I guess it depends on who or what you need to defend against.


Top
 Profile  
 
 Post subject: Re: SSD SED (Self Encrypting Drive), ATA Security Mode = Max
PostPosted: July 22nd, 2015, 0:20 
Offline

Joined: February 15th, 2006, 3:38
Posts: 1093
Location: canada
Russian company already cracked most of the encrypted stuff except PGP encryption
nothing is secure no such thing as encrypted password

as its all kept in the pc ram.

if the machine stays on then it can be recovery
once it turns off them its gone for good.

truecrypt was good until it was known it was not secure anymore

all hard drives have backdoor systems


Top
 Profile  
 
 Post subject: Re: SSD SED (Self Encrypting Drive), ATA Security Mode = Max
PostPosted: July 22nd, 2015, 1:19 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3779
Location: Adelaide, Australia
hardly any of that is fact


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 9 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group