Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

So, I have just received an Intel 320 series SSD. They state that once I set my ATA passsword (through the BIOS), that encryption will then be active. I see no sign of this noted in the SSD Toolkit from intel, so I'm just trying to double check that it's actually active... Can anyone confirm through their experience or another source they know about?

P.S. I am not super impressed with this encryption methodology so far. For example, my ATA password can only be 8 characters - when my usual drive encryption password with my old method (True Crypt) was 25...

Thanks all.

share|improve this question

2 Answers 2

Intel's 320 SSD are always encrypting the data. It is built into the hardware and cannot be turned off. Your ATA password is not used to encrypt the data. The SSD generates its own encryption keys, and the length of these keys do not depend on the length of the ATA password.

But, by default the encryption keys are stored unencrypted and can be read. When you set a ATA password, a hash of that password is used to encrypt the encryption keys. In that case the data is unrecoverable without the ATA password.

share|improve this answer
1  
Yea, that's as I understand it currently. But even though the keys may be strong, the password is short and can be easier to brute force crack... that was what I meant is all. –  Shackrock Dec 28 '11 at 13:40
    
That may be a concern, yes. A offline brute-force could break it in a reasonable amount of time. –  Mr Alpha Dec 28 '11 at 15:37

Intel's 320 series SSDs use AES-128 encryption to make secure erase very fast, because if you generate a new encryption key, then the old data cannot be read. So, encryption is always used, regardless of your password setting.

Actually, these are two completely unrelated technologies. The ATA password's sole purpose is to prevent you from using the drive without it (say, in another computer), but the scheme is far from perfect, according to Sandforce. It is very likely that it can be removed and then the encryption is useless, because it's completely transparent.

(I found these informations in this thread.)

My advice is to use a software-based solution. TrueCrypt (in “system encryption” mode) and BitLocker doesn't lower the life expectancy of the drive, because they issue the TRIM command after deletion.

share|improve this answer
1  
the thing about trueCrypt with an the 320 series SSD, is that I read it increases wear on the drive? –  Shackrock Dec 28 '11 at 17:07
    
I edited my answer the include this. –  KovBal Dec 31 '11 at 10:14

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.