Hardware-based full disk encryption: Difference between revisions

Revision as of 17:59, 5 May 2010

Revision as of 17:22, 21 May 2010

Line 9:

HDD FDE is available from all HDD vendors using the OPAL and Enterprise standards via the [[Trusted Computing Group]].<ref>[https://www.trustedcomputinggroup.org/ Trusted Computing Group: Home<!-- Bot generated title -->]</ref> [[Key management]] takes place within the hard disk controller and encryption keys are 128 or 256 [[Binary digit|bit]] [[Advanced Encryption Standard]] keys. [[Authentication]] on power up of the drive must still take place within the [[CPU]] via either a [[software]] [[Pre-Boot Authentication]] Environment or with a [[BIOS]] password.

[[Hitachi]], [[Seagate]], [[Samsung]], and [[Toshiba]], [[Western Digital]] are the disk drive manufacturers offering [[Trusted Computing Group|TCG]] OPAL [[Serial ATA |SATA]] drives as well as the proprietary Seagate DriveTrust, and the older, and less secure, [[Parallel ATA|PATA]] Security command standard. All drive makers have suggested the appropriate term for this new class of device and new type of functionality be "self-encrypting drives."

==Chipset FDE==