[SOLVED] SSDs with hardware encryption busted.

linustalman · 11-10-2018, 07:56 AM

Hi.

Regarding this tweet: https://twitter.com/matthew_d_green/...35094421712896

"Several SSDs with hardware encryption appear to be busted. But the really terrible thing is that Bitlocker apparently relies totally on the SSD encryption if you have it. https://www.ru.nl/publish/pages/9092...ft-paper_1.pdf … via @ProfWoodward"

Is HDD with full-disk LUKS in GNU/Linux far more secure so than most SSDs with full-disk LUKS encryption?

jmccue · 11-10-2018, 12:04 PM

I have not heard of any issues with LUKS, so I guess the naswer is yes. So going forward, if you format the SDD and put LUKS on top of that, I would say you are OK.

I would avoid hardware encryption devices unless the hardware is fully 'open', you really never know what is going on due to the proprietary bits.

cantab · 11-10-2018, 12:53 PM

Dang.

I've got an MX100 with a LUKS-encrypted volume on it. As mentioned I think, or maybe just hope, that the dm-crypt folks had the sense to not automatically trust hardware 'encryption'.

zeebra · 11-13-2018, 12:55 PM

Quote:

Originally Posted by linustalman

Hi.

Regarding this tweet: https://twitter.com/matthew_d_green/...35094421712896

"Several SSDs with hardware encryption appear to be busted. But the really terrible thing is that Bitlocker apparently relies totally on the SSD encryption if you have it. https://www.ru.nl/publish/pages/9092...ft-paper_1.pdf … via @ProfWoodward"

Is HDD with full-disk LUKS in GNU/Linux far more secure so than most SSDs with full-disk LUKS encryption?

Why would you trust a manufacturer and their claims about some disk encryption stuff inbuilt and it working as intended? You should encrypt the disk yourself, using LUKS.

syg00 · 11-13-2018, 04:50 PM

Locksmiths can open (door) locks. Does that mean you can't trust lock manufacturers and should give up using locks on your house ?.
Or maybe you should add anti-tank barriers ...

What are you trying to protect that anyone would care enough to go to all the trouble ?.

zeebra · 11-13-2018, 08:02 PM

Quote:

Originally Posted by syg00

Locksmiths can open (door) locks. Does that mean you can't trust lock manufacturers and should give up using locks on your house ?.
Or maybe you should add anti-tank barriers ...

What are you trying to protect that anyone would care enough to go to all the trouble ?.

With that attitude you might as well use Windows.

jefro · 11-13-2018, 09:08 PM

I's say LUKS is LUKS isn't it? Why would one implementation be greatly different??

Maybe some better source of this issue besides twitter would be helpful too??

I've seen security issues for decades. Saying this or that is secure tends to be proven wrong.

linustalman · 11-17-2018, 10:22 AM

So whether I use LUKS on an SSD or HDD - I'm good?

zeebra · 11-17-2018, 07:19 PM

Quote:

Originally Posted by wikipedia

The fact that disk encryption (volume encryption) software like dm-crypt only deals with transparent encryption of abstract block devices gives it a lot of flexibility. This means that it can be used for encrypting any disk-backed file systems supported by the operating system, as well as swap space; write barriers implemented by file systems are preserved

https://smallbusiness.chron.com/sams...ork-39204.html

pan64 · 11-18-2018, 04:06 AM

I read somewhere: software encryption (LUKS) is ok, regardless of the device you have. Actually I can't find that page, but if you are really interested you will definitely find it.