Page 1 of 1

SSD SED (Self Encrypting Drive), ATA Security Mode = Maximum

Posted: July 16th, 2015, 19:03
by lohdcudg
Almost all SSD are SED (Self Encrypting Drive). Intel, Samsung, Crucial, ...

As the tool "TrueCrypt" to encrypt data is not recomended for SSD, the question is - if a SED SSD with ATA Security Mode set to MAXIMUM is as good as TrueCrypt crypted drive???

Security Mode = High: somebody can decrypt/unlock SSD with user or master password
Security Mode = Max: only user password can decrypt/unlock SSD. Master password can only be used for secure erase command (delete all data, and then unlock drive), no access to data with master password, even if a default master password exists or was set by factory???

btw: if you have a ASROCK desktop mainboard and want to use HDD password, you should write an email to ASROCK, they will send you an BIOS/UEFI with ATA Security functions in 1-2 days :) . ASUS will not do so, they will say ATA Security is only usefull in notebooks, so they dont support it in desktop mainboards :( .

Re: SSD SED (Self Encrypting Drive), ATA Security Mode = Max

Posted: July 20th, 2015, 5:04
by bubaleh
All depends on how the security subsystem implemented into the firmware. As far as there are no public access to the source codes, there could be backdoors and exploits. So, IMHO, no it is not so good as TrueCrypt.

Re: SSD SED (Self Encrypting Drive), ATA Security Mode = Max

Posted: July 20th, 2015, 21:37
by HaQue
Given the recent proof from the Snowden revelations, and more recently, the Hacking Team Files with a BIOS/UEFI persistent rootkit in development.. AND coupled with no Government, large corporation or civilian user seems safe from these shenanigans... how are you going to certify a "known good state" ?

BTW Truecrypt is not available to use anymore, so that's out. Yes there are forks, but how mature are they?

I guess it depends on who or what you need to defend against.

Re: SSD SED (Self Encrypting Drive), ATA Security Mode = Max

Posted: July 22nd, 2015, 0:20
by craig6928
Russian company already cracked most of the encrypted stuff except PGP encryption
nothing is secure no such thing as encrypted password

as its all kept in the pc ram.

if the machine stays on then it can be recovery
once it turns off them its gone for good.

truecrypt was good until it was known it was not secure anymore

all hard drives have backdoor systems

Re: SSD SED (Self Encrypting Drive), ATA Security Mode = Max

Posted: July 22nd, 2015, 1:19
by HaQue
hardly any of that is fact