Noisebridge - User contributions [en]

Attacking FDE hardware solutions

2009-01-19T04:50:50Z

Quine: /* Drive manufacturers and specific drive models */

Many companies tout hard drives with built in encryption as the solution to the [http://citp.princeton.edu/memory/ Cold Boot Attack]. Additionally, these drives are sold as a major step forward in overall data security. In theory, this sounds like a good idea; in practice this could go horribly wrong.

This project is currently in a research state to find different drives that claim to offer specific security properties. It is expected that many products will fail even the most cursory look.

Please add links to products, vendors, standards, prices and places to purchase hardware. At some point, we'll start acquiring hardware to do specific implementation analysis.

== Drive manufacturers and specific drive models ==

* Seagate
** [http://www.seagate.com/www/en-us/products/servers/cheetah/cheetah_15k.6/ Cheetah® 15K.6 and Cheetah FDE Hard Drives] ''"The Cheetah 15K.6 FDE drive is available only to major OEM suppliers."''
* Hitachi ''"Hitachi offers the BDE option on all new 2.5-inch SATA hard disk drive products beginning with those launched in 2007, including both the 7200 RPM and 5400 RPM product lines. Hitachi also offers the BDE option on Deskstar products introduced in 2008 and beyond."''
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/FFA370A7BF845F87862574FE0003054C/$file/TS5K500.B_DS_final.pdf Travelstar 5K500.B]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/03E516A3C41738C78625743B005AD957/$file/TS7K320_DS.pdf Travelstar 7K320]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/C51A283F52498251862573FA005A3C98/$file/Travelstar_5K320_DS.pdf Travelstar 5K320]
* IBM
** [http://www-03.ibm.com/systems/storage/product/systemx/scsi_raid.html IBM RAID products for System x (including support for disk encryption)]
* Lenovo
** [http://www-307.ibm.com/pc/support/site.wss/MIGR-68776.html ThinkPad 160GB and 200GB FDE 7200rpm Serial ATA Hard drives]

== Previously published research ==

* Heise successfully attacked the [http://www.heise-online.co.uk/security/Enclosed-but-not-encrypted--/features/110136 Easy Nova Data Box PRO-25UE RFID]

== Standards and Whitepapers relating to FDE at the hardware level ==
* IEEE
** http://en.wikipedia.org/wiki/IEEE_P1619
** [http://grouper.ieee.org/groups/1619/email/msg01842.html Letter of Assurance from IBM re P1619.1/D17]

* Seagate
** http://www.seagate.com/staticfiles/SeagateCryptofaceoff.pdf
** http://www.seagate.com/staticfiles/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/staticfiles/docs/pdf/security/Tech_Paper_Enables_Robust_Security.pdf
** http://www.seagate.com/docs/pdf/whitepaper/HDpasswrd_TP580-1-0710US.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Seagate-crypto-bakeoff.pdf
** http://www.seagate.com/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Server&Drive%20Security%20Threats%20rev%204%203.pdf
** http://www.seagate.com/docs/pdf/whitepaper/DataCtrSec_TP583-1-0711USr4.pdf Also mentions participation in IEEE 1619

* Hitachi
** http://www.hitachigst.com/tech/techlib.nsf/techdocs/74D8260832F2F75E862572D7004AE077/$file/bulk_encryption_white_paper.pdf The above whitepaper refers to FIPS 197 certification and the NIST AES Validation List, which informs us that Hitachi uses AES 128 or 256 in ECB mode: [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#751 Part # 1 entry, 128-bit] [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#749 Part # 4 entry, either 128-bit or 256-bit] (NB: large slow HTML table)
** [http://www.hitachigst.com/hdd/support/bulk_faqs.htm Bulk Data Encryption FAQ]

== Other related documents ==
*[http://www.full-disk-encryption.net/Full_Disc_Encryption.html List of FDE (SW & HW) providers]
*[http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-69621 IBM FAQ on FDE]

== Terminology ==
* FDE - Full Disk Encryption
* BDE - Bulk Data Encryption
* OTFE - [http://en.wikipedia.org/wiki/OTFE On-the-fly encryption]

Attacking FDE hardware solutions

2009-01-19T04:49:33Z

Quine: /* Drive manufacturers and specific drive models */

Many companies tout hard drives with built in encryption as the solution to the [http://citp.princeton.edu/memory/ Cold Boot Attack]. Additionally, these drives are sold as a major step forward in overall data security. In theory, this sounds like a good idea; in practice this could go horribly wrong.

This project is currently in a research state to find different drives that claim to offer specific security properties. It is expected that many products will fail even the most cursory look.

Please add links to products, vendors, standards, prices and places to purchase hardware. At some point, we'll start acquiring hardware to do specific implementation analysis.

== Drive manufacturers and specific drive models ==

* Seagate
** [http://www.seagate.com/www/en-us/products/servers/cheetah/cheetah_15k.6/ Cheetah® 15K.6 and Cheetah FDE Hard Drives] ''"The Cheetah 15K.6 FDE drive is available only to major OEM suppliers."''
* Hitachi ''"Hitachi offers the BDE option on all new 2.5-inch SATA hard disk drive products beginning with those launched in 2007, including both the 7200 RPM and 5400 RPM product lines. Hitachi also offers the BDE option on Deskstar products introduced in 2008 and beyond."''
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/FFA370A7BF845F87862574FE0003054C/$file/TS5K500.B_DS_final.pdf Travelstar 5K500.B]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/03E516A3C41738C78625743B005AD957/$file/TS7K320_DS.pdf Travelstar 7K320]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/C51A283F52498251862573FA005A3C98/$file/Travelstar_5K320_DS.pdf Travelstar 5K320]
* Lenovo
** [http://www-307.ibm.com/pc/support/site.wss/MIGR-68776.html ThinkPad 160GB and 200GB FDE 7200rpm Serial ATA Hard drives]

== Previously published research ==

* Heise successfully attacked the [http://www.heise-online.co.uk/security/Enclosed-but-not-encrypted--/features/110136 Easy Nova Data Box PRO-25UE RFID]

== Standards and Whitepapers relating to FDE at the hardware level ==
* IEEE
** http://en.wikipedia.org/wiki/IEEE_P1619
** [http://grouper.ieee.org/groups/1619/email/msg01842.html Letter of Assurance from IBM re P1619.1/D17]

* Seagate
** http://www.seagate.com/staticfiles/SeagateCryptofaceoff.pdf
** http://www.seagate.com/staticfiles/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/staticfiles/docs/pdf/security/Tech_Paper_Enables_Robust_Security.pdf
** http://www.seagate.com/docs/pdf/whitepaper/HDpasswrd_TP580-1-0710US.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Seagate-crypto-bakeoff.pdf
** http://www.seagate.com/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Server&Drive%20Security%20Threats%20rev%204%203.pdf
** http://www.seagate.com/docs/pdf/whitepaper/DataCtrSec_TP583-1-0711USr4.pdf Also mentions participation in IEEE 1619

* Hitachi
** http://www.hitachigst.com/tech/techlib.nsf/techdocs/74D8260832F2F75E862572D7004AE077/$file/bulk_encryption_white_paper.pdf The above whitepaper refers to FIPS 197 certification and the NIST AES Validation List, which informs us that Hitachi uses AES 128 or 256 in ECB mode: [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#751 Part # 1 entry, 128-bit] [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#749 Part # 4 entry, either 128-bit or 256-bit] (NB: large slow HTML table)
** [http://www.hitachigst.com/hdd/support/bulk_faqs.htm Bulk Data Encryption FAQ]

== Other related documents ==
*[http://www.full-disk-encryption.net/Full_Disc_Encryption.html List of FDE (SW & HW) providers]
*[http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-69621 IBM FAQ on FDE]

== Terminology ==
* FDE - Full Disk Encryption
* BDE - Bulk Data Encryption
* OTFE - [http://en.wikipedia.org/wiki/OTFE On-the-fly encryption]

Attacking FDE hardware solutions

2009-01-19T04:48:56Z

Quine: /* Drive manufacturers and specific drive models */

Many companies tout hard drives with built in encryption as the solution to the [http://citp.princeton.edu/memory/ Cold Boot Attack]. Additionally, these drives are sold as a major step forward in overall data security. In theory, this sounds like a good idea; in practice this could go horribly wrong.

This project is currently in a research state to find different drives that claim to offer specific security properties. It is expected that many products will fail even the most cursory look.

Please add links to products, vendors, standards, prices and places to purchase hardware. At some point, we'll start acquiring hardware to do specific implementation analysis.

== Drive manufacturers and specific drive models ==

* Seagate
** [http://www.seagate.com/www/en-us/products/servers/cheetah/cheetah_15k.6/ Cheetah® 15K.6 and Cheetah FDE Hard Drives] ''"The Cheetah 15K.6 FDE drive is available only to major OEM suppliers."''
* Hitachi ''"Hitachi offers the BDE option on all new 2.5-inch SATA hard disk drive products beginning with those launched in 2007, including both the 7200 RPM and 5400 RPM product lines. Hitachi also offers the BDE option on Deskstar products introduced in 2008 and beyond."''
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/FFA370A7BF845F87862574FE0003054C/$file/TS5K500.B_DS_final.pdf Travelstar 5K500.B]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/03E516A3C41738C78625743B005AD957/$file/TS7K320_DS.pdf Travelstar 7K320]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/C51A283F52498251862573FA005A3C98/$file/Travelstar_5K320_DS.pdf Travelstar 5K320]
* Lenovo
** [http://shop.lenovo.com/SEUILibrary/controller/e/web/LenovoPortal/en_US/catalog.workflow:item.detail?GroupID=38&Code=41N5738&current-category-id=30DCE24D4AD945988722793CBEEC65B3 ThinkPad 200GB Security (FDE) 7200 rpm Serial ATA Hard Drive]

== Previously published research ==

* Heise successfully attacked the [http://www.heise-online.co.uk/security/Enclosed-but-not-encrypted--/features/110136 Easy Nova Data Box PRO-25UE RFID]

== Standards and Whitepapers relating to FDE at the hardware level ==
* IEEE
** http://en.wikipedia.org/wiki/IEEE_P1619
** [http://grouper.ieee.org/groups/1619/email/msg01842.html Letter of Assurance from IBM re P1619.1/D17]

* Seagate
** http://www.seagate.com/staticfiles/SeagateCryptofaceoff.pdf
** http://www.seagate.com/staticfiles/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/staticfiles/docs/pdf/security/Tech_Paper_Enables_Robust_Security.pdf
** http://www.seagate.com/docs/pdf/whitepaper/HDpasswrd_TP580-1-0710US.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Seagate-crypto-bakeoff.pdf
** http://www.seagate.com/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Server&Drive%20Security%20Threats%20rev%204%203.pdf
** http://www.seagate.com/docs/pdf/whitepaper/DataCtrSec_TP583-1-0711USr4.pdf Also mentions participation in IEEE 1619

* Hitachi
** http://www.hitachigst.com/tech/techlib.nsf/techdocs/74D8260832F2F75E862572D7004AE077/$file/bulk_encryption_white_paper.pdf The above whitepaper refers to FIPS 197 certification and the NIST AES Validation List, which informs us that Hitachi uses AES 128 or 256 in ECB mode: [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#751 Part # 1 entry, 128-bit] [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#749 Part # 4 entry, either 128-bit or 256-bit] (NB: large slow HTML table)
** [http://www.hitachigst.com/hdd/support/bulk_faqs.htm Bulk Data Encryption FAQ]

== Other related documents ==
*[http://www.full-disk-encryption.net/Full_Disc_Encryption.html List of FDE (SW & HW) providers]
*[http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-69621 IBM FAQ on FDE]

== Terminology ==
* FDE - Full Disk Encryption
* BDE - Bulk Data Encryption
* OTFE - [http://en.wikipedia.org/wiki/OTFE On-the-fly encryption]

Attacking FDE hardware solutions

2009-01-19T04:47:59Z

Quine: /* Other related documents */

Many companies tout hard drives with built in encryption as the solution to the [http://citp.princeton.edu/memory/ Cold Boot Attack]. Additionally, these drives are sold as a major step forward in overall data security. In theory, this sounds like a good idea; in practice this could go horribly wrong.

This project is currently in a research state to find different drives that claim to offer specific security properties. It is expected that many products will fail even the most cursory look.

Please add links to products, vendors, standards, prices and places to purchase hardware. At some point, we'll start acquiring hardware to do specific implementation analysis.

== Drive manufacturers and specific drive models ==

* Seagate
** [http://www.seagate.com/www/en-us/products/servers/cheetah/cheetah_15k.6/ Cheetah® 15K.6 and Cheetah FDE Hard Drives] ''"The Cheetah 15K.6 FDE drive is available only to major OEM suppliers."''
* Hitachi ''"Hitachi offers the BDE option on all new 2.5-inch SATA hard disk drive products beginning with those launched in 2007, including both the 7200 RPM and 5400 RPM product lines. Hitachi also offers the BDE option on Deskstar products introduced in 2008 and beyond."''
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/FFA370A7BF845F87862574FE0003054C/$file/TS5K500.B_DS_final.pdf Travelstar 5K500.B]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/03E516A3C41738C78625743B005AD957/$file/TS7K320_DS.pdf Travelstar 7K320]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/C51A283F52498251862573FA005A3C98/$file/Travelstar_5K320_DS.pdf Travelstar 5K320]

== Previously published research ==

* Heise successfully attacked the [http://www.heise-online.co.uk/security/Enclosed-but-not-encrypted--/features/110136 Easy Nova Data Box PRO-25UE RFID]

== Standards and Whitepapers relating to FDE at the hardware level ==
* IEEE
** http://en.wikipedia.org/wiki/IEEE_P1619
** [http://grouper.ieee.org/groups/1619/email/msg01842.html Letter of Assurance from IBM re P1619.1/D17]

* Seagate
** http://www.seagate.com/staticfiles/SeagateCryptofaceoff.pdf
** http://www.seagate.com/staticfiles/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/staticfiles/docs/pdf/security/Tech_Paper_Enables_Robust_Security.pdf
** http://www.seagate.com/docs/pdf/whitepaper/HDpasswrd_TP580-1-0710US.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Seagate-crypto-bakeoff.pdf
** http://www.seagate.com/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Server&Drive%20Security%20Threats%20rev%204%203.pdf
** http://www.seagate.com/docs/pdf/whitepaper/DataCtrSec_TP583-1-0711USr4.pdf Also mentions participation in IEEE 1619

* Hitachi
** http://www.hitachigst.com/tech/techlib.nsf/techdocs/74D8260832F2F75E862572D7004AE077/$file/bulk_encryption_white_paper.pdf The above whitepaper refers to FIPS 197 certification and the NIST AES Validation List, which informs us that Hitachi uses AES 128 or 256 in ECB mode: [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#751 Part # 1 entry, 128-bit] [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#749 Part # 4 entry, either 128-bit or 256-bit] (NB: large slow HTML table)
** [http://www.hitachigst.com/hdd/support/bulk_faqs.htm Bulk Data Encryption FAQ]

== Other related documents ==
*[http://www.full-disk-encryption.net/Full_Disc_Encryption.html List of FDE (SW & HW) providers]
*[http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-69621 IBM FAQ on FDE]

== Terminology ==
* FDE - Full Disk Encryption
* BDE - Bulk Data Encryption
* OTFE - [http://en.wikipedia.org/wiki/OTFE On-the-fly encryption]

Attacking FDE hardware solutions

2009-01-19T04:47:39Z

Quine: /* Other related documents */

Many companies tout hard drives with built in encryption as the solution to the [http://citp.princeton.edu/memory/ Cold Boot Attack]. Additionally, these drives are sold as a major step forward in overall data security. In theory, this sounds like a good idea; in practice this could go horribly wrong.

This project is currently in a research state to find different drives that claim to offer specific security properties. It is expected that many products will fail even the most cursory look.

Please add links to products, vendors, standards, prices and places to purchase hardware. At some point, we'll start acquiring hardware to do specific implementation analysis.

== Drive manufacturers and specific drive models ==

* Seagate
** [http://www.seagate.com/www/en-us/products/servers/cheetah/cheetah_15k.6/ Cheetah® 15K.6 and Cheetah FDE Hard Drives] ''"The Cheetah 15K.6 FDE drive is available only to major OEM suppliers."''
* Hitachi ''"Hitachi offers the BDE option on all new 2.5-inch SATA hard disk drive products beginning with those launched in 2007, including both the 7200 RPM and 5400 RPM product lines. Hitachi also offers the BDE option on Deskstar products introduced in 2008 and beyond."''
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/FFA370A7BF845F87862574FE0003054C/$file/TS5K500.B_DS_final.pdf Travelstar 5K500.B]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/03E516A3C41738C78625743B005AD957/$file/TS7K320_DS.pdf Travelstar 7K320]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/C51A283F52498251862573FA005A3C98/$file/Travelstar_5K320_DS.pdf Travelstar 5K320]

== Previously published research ==

* Heise successfully attacked the [http://www.heise-online.co.uk/security/Enclosed-but-not-encrypted--/features/110136 Easy Nova Data Box PRO-25UE RFID]

== Standards and Whitepapers relating to FDE at the hardware level ==
* IEEE
** http://en.wikipedia.org/wiki/IEEE_P1619
** [http://grouper.ieee.org/groups/1619/email/msg01842.html Letter of Assurance from IBM re P1619.1/D17]

* Seagate
** http://www.seagate.com/staticfiles/SeagateCryptofaceoff.pdf
** http://www.seagate.com/staticfiles/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/staticfiles/docs/pdf/security/Tech_Paper_Enables_Robust_Security.pdf
** http://www.seagate.com/docs/pdf/whitepaper/HDpasswrd_TP580-1-0710US.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Seagate-crypto-bakeoff.pdf
** http://www.seagate.com/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Server&Drive%20Security%20Threats%20rev%204%203.pdf
** http://www.seagate.com/docs/pdf/whitepaper/DataCtrSec_TP583-1-0711USr4.pdf Also mentions participation in IEEE 1619

* Hitachi
** http://www.hitachigst.com/tech/techlib.nsf/techdocs/74D8260832F2F75E862572D7004AE077/$file/bulk_encryption_white_paper.pdf The above whitepaper refers to FIPS 197 certification and the NIST AES Validation List, which informs us that Hitachi uses AES 128 or 256 in ECB mode: [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#751 Part # 1 entry, 128-bit] [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#749 Part # 4 entry, either 128-bit or 256-bit] (NB: large slow HTML table)
** [http://www.hitachigst.com/hdd/support/bulk_faqs.htm Bulk Data Encryption FAQ]

== Other related documents ==
[http://www.full-disk-encryption.net/Full_Disc_Encryption.html List of FDE (SW & HW) providers]

[http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-69621 IBM FAQ on FDE]

== Terminology ==
* FDE - Full Disk Encryption
* BDE - Bulk Data Encryption
* OTFE - [http://en.wikipedia.org/wiki/OTFE On-the-fly encryption]

Attacking FDE hardware solutions

2009-01-19T04:47:20Z

Quine: /* Other related documents */

Many companies tout hard drives with built in encryption as the solution to the [http://citp.princeton.edu/memory/ Cold Boot Attack]. Additionally, these drives are sold as a major step forward in overall data security. In theory, this sounds like a good idea; in practice this could go horribly wrong.

This project is currently in a research state to find different drives that claim to offer specific security properties. It is expected that many products will fail even the most cursory look.

Please add links to products, vendors, standards, prices and places to purchase hardware. At some point, we'll start acquiring hardware to do specific implementation analysis.

== Drive manufacturers and specific drive models ==

* Seagate
** [http://www.seagate.com/www/en-us/products/servers/cheetah/cheetah_15k.6/ Cheetah® 15K.6 and Cheetah FDE Hard Drives] ''"The Cheetah 15K.6 FDE drive is available only to major OEM suppliers."''
* Hitachi ''"Hitachi offers the BDE option on all new 2.5-inch SATA hard disk drive products beginning with those launched in 2007, including both the 7200 RPM and 5400 RPM product lines. Hitachi also offers the BDE option on Deskstar products introduced in 2008 and beyond."''
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/FFA370A7BF845F87862574FE0003054C/$file/TS5K500.B_DS_final.pdf Travelstar 5K500.B]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/03E516A3C41738C78625743B005AD957/$file/TS7K320_DS.pdf Travelstar 7K320]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/C51A283F52498251862573FA005A3C98/$file/Travelstar_5K320_DS.pdf Travelstar 5K320]

== Previously published research ==

* Heise successfully attacked the [http://www.heise-online.co.uk/security/Enclosed-but-not-encrypted--/features/110136 Easy Nova Data Box PRO-25UE RFID]

== Standards and Whitepapers relating to FDE at the hardware level ==
* IEEE
** http://en.wikipedia.org/wiki/IEEE_P1619
** [http://grouper.ieee.org/groups/1619/email/msg01842.html Letter of Assurance from IBM re P1619.1/D17]

* Seagate
** http://www.seagate.com/staticfiles/SeagateCryptofaceoff.pdf
** http://www.seagate.com/staticfiles/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/staticfiles/docs/pdf/security/Tech_Paper_Enables_Robust_Security.pdf
** http://www.seagate.com/docs/pdf/whitepaper/HDpasswrd_TP580-1-0710US.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Seagate-crypto-bakeoff.pdf
** http://www.seagate.com/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Server&Drive%20Security%20Threats%20rev%204%203.pdf
** http://www.seagate.com/docs/pdf/whitepaper/DataCtrSec_TP583-1-0711USr4.pdf Also mentions participation in IEEE 1619

* Hitachi
** http://www.hitachigst.com/tech/techlib.nsf/techdocs/74D8260832F2F75E862572D7004AE077/$file/bulk_encryption_white_paper.pdf The above whitepaper refers to FIPS 197 certification and the NIST AES Validation List, which informs us that Hitachi uses AES 128 or 256 in ECB mode: [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#751 Part # 1 entry, 128-bit] [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#749 Part # 4 entry, either 128-bit or 256-bit] (NB: large slow HTML table)
** [http://www.hitachigst.com/hdd/support/bulk_faqs.htm Bulk Data Encryption FAQ]

== Other related documents ==
[http://www.full-disk-encryption.net/Full_Disc_Encryption.html List of FDE (SW & HW) providers]
[http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-69621 IBM FAQ on FDE]

== Terminology ==
* FDE - Full Disk Encryption
* BDE - Bulk Data Encryption
* OTFE - [http://en.wikipedia.org/wiki/OTFE On-the-fly encryption]

Attacking FDE hardware solutions

2009-01-19T04:37:00Z

Quine: /* Standards and Whitepapers relating to FDE at the hardware level */

Many companies tout hard drives with built in encryption as the solution to the [http://citp.princeton.edu/memory/ Cold Boot Attack]. Additionally, these drives are sold as a major step forward in overall data security. In theory, this sounds like a good idea; in practice this could go horribly wrong.

This project is currently in a research state to find different drives that claim to offer specific security properties. It is expected that many products will fail even the most cursory look.

Please add links to products, vendors, standards, prices and places to purchase hardware. At some point, we'll start acquiring hardware to do specific implementation analysis.

== Drive manufacturers and specific drive models ==

* Seagate
** [http://www.seagate.com/www/en-us/products/servers/cheetah/cheetah_15k.6/ Cheetah® 15K.6 and Cheetah FDE Hard Drives] ''"The Cheetah 15K.6 FDE drive is available only to major OEM suppliers."''
* Hitachi ''"Hitachi offers the BDE option on all new 2.5-inch SATA hard disk drive products beginning with those launched in 2007, including both the 7200 RPM and 5400 RPM product lines. Hitachi also offers the BDE option on Deskstar products introduced in 2008 and beyond."''
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/FFA370A7BF845F87862574FE0003054C/$file/TS5K500.B_DS_final.pdf Travelstar 5K500.B]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/03E516A3C41738C78625743B005AD957/$file/TS7K320_DS.pdf Travelstar 7K320]
** [http://www.hitachigst.com/tech/techlib.nsf/techdocs/C51A283F52498251862573FA005A3C98/$file/Travelstar_5K320_DS.pdf Travelstar 5K320]

== Previously published research ==

* Heise successfully attacked the [http://www.heise-online.co.uk/security/Enclosed-but-not-encrypted--/features/110136 Easy Nova Data Box PRO-25UE RFID]

== Standards and Whitepapers relating to FDE at the hardware level ==
* IEEE
** http://en.wikipedia.org/wiki/IEEE_P1619
** [http://grouper.ieee.org/groups/1619/email/msg01842.html Letter of Assurance from IBM re P1619.1/D17]

* Seagate
** http://www.seagate.com/staticfiles/SeagateCryptofaceoff.pdf
** http://www.seagate.com/staticfiles/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/staticfiles/docs/pdf/security/Tech_Paper_Enables_Robust_Security.pdf
** http://www.seagate.com/docs/pdf/whitepaper/HDpasswrd_TP580-1-0710US.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Seagate-crypto-bakeoff.pdf
** http://www.seagate.com/docs/pdf/whitepaper/tp596_128-bit_versus_256_bit.pdf
** http://www.seagate.com/docs/pdf/whitepaper/Server&Drive%20Security%20Threats%20rev%204%203.pdf
** http://www.seagate.com/docs/pdf/whitepaper/DataCtrSec_TP583-1-0711USr4.pdf Also mentions participation in IEEE 1619

* Hitachi
** http://www.hitachigst.com/tech/techlib.nsf/techdocs/74D8260832F2F75E862572D7004AE077/$file/bulk_encryption_white_paper.pdf The above whitepaper refers to FIPS 197 certification and the NIST AES Validation List, which informs us that Hitachi uses AES 128 or 256 in ECB mode: [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#751 Part # 1 entry, 128-bit] [http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#749 Part # 4 entry, either 128-bit or 256-bit] (NB: large slow HTML table)
** [http://www.hitachigst.com/hdd/support/bulk_faqs.htm Bulk Data Encryption FAQ]

== Other related documents ==
[http://www.full-disk-encryption.net/Full_Disc_Encryption.html List of FDE (SW & HW) providers]

== Terminology ==
* FDE - Full Disk Encryption
* BDE - Bulk Data Encryption
* OTFE - [http://en.wikipedia.org/wiki/OTFE On-the-fly encryption]