4

So, I have just received an Intel 320 series SSD. They state that once I set my ATA passsword (through the BIOS), that encryption will then be active. I see no sign of this noted in the SSD Toolkit from intel, so I'm just trying to double check that it's actually active... Can anyone confirm through their experience or another source they know about?

P.S. I am not super impressed with this encryption methodology so far. For example, my ATA password can only be 8 characters - when my usual drive encryption password with my old method (True Crypt) was 25...

Thanks all.

2 Answers 2

1

Intel's 320 SSD are always encrypting the data. It is built into the hardware and cannot be turned off. Your ATA password is not used to encrypt the data. The SSD generates its own encryption keys, and the length of these keys do not depend on the length of the ATA password.

But, by default the encryption keys are stored unencrypted and can be read. When you set a ATA password, a hash of that password is used to encrypt the encryption keys. In that case the data is unrecoverable without the ATA password.

2
  • 1
    Yea, that's as I understand it currently. But even though the keys may be strong, the password is short and can be easier to brute force crack... that was what I meant is all.
    – Shackrock
    Dec 28, 2011 at 13:40
  • That may be a concern, yes. A offline brute-force could break it in a reasonable amount of time.
    – Mr Alpha
    Dec 28, 2011 at 15:37
1

Intel's 320 series SSDs use AES-128 encryption to make secure erase very fast, because if you generate a new encryption key, then the old data cannot be read. So, encryption is always used, regardless of your password setting.

Actually, these are two completely unrelated technologies. The ATA password's sole purpose is to prevent you from using the drive without it (say, in another computer), but the scheme is far from perfect, according to Sandforce. It is very likely that it can be removed and then the encryption is useless, because it's completely transparent.

(I found these informations in this thread.)

My advice is to use a software-based solution. TrueCrypt (in “system encryption” mode) and BitLocker doesn't lower the life expectancy of the drive, because they issue the TRIM command after deletion.

2
  • 1
    the thing about trueCrypt with an the 320 series SSD, is that I read it increases wear on the drive?
    – Shackrock
    Dec 28, 2011 at 17:07
  • I edited my answer the include this.
    – KovBal
    Dec 31, 2011 at 10:14

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .