5 facts filed under Security and sanitization: all 5 were read in the original source. Each was checked against the source’s own words, so its figures appear there, and each names where it comes from. The idea is taught in Part 5, The Controller.
Primary sources
NVMe Crypto Erase changes media encryption keys for all locations that may hold user data; support is a controller capability bit, not an SED test.
NIST’s Guidelines for Media Sanitization (Rev. 1): if strong cryptography is used, sanitization of the target data is reduced to sanitization of the encryption key(s).
NIST’s Guidelines for Media Sanitization (Rev. 1): Cryptographic Erase can typically be executed in a fraction of a second.
NIST’s Guidelines for Media Sanitization (Rev. 1): do not use Cryptographic Erase to purge media if encryption was enabled after sensitive data was stored on the device without having been sanitized first.
NIST’s Guidelines for Media Sanitization (Rev. 1) defines Cryptographic Erase as sanitizing the encryption key of encrypted target data so only unreadable ciphertext remains.
Sources
Primary is the original paper, standard or datasheet. Secondary is a review, a vendor summary or a news report. Measured is my own test data.
Show all 2 sources, 2 primary
- PrimaryNVM Express Base Specification, Revision 1.4cNVM Express
- PrimaryNIST SP 800-88 Rev. 1: Guidelines for Media SanitizationNIST