FOGProject / fos

FOG Operating System
31 stars 33 forks source link

Secure erase for SSDs #40

Closed abulhol closed 4 years ago

abulhol commented 4 years ago

The current wipe modes make sense for spinning disks, but for SSDs it is enough to perform a secure erase which only takes seconds, e.g. as described here: https://www.thomas-krenn.com/en/wiki/Perform_a_SSD_Secure_Erase Is this already in planning or development? Otherwise I could write something and create a pull request.

abulhol commented 4 years ago

Unfortunately, the approach won't work on most modern hardware. I have tested it with an Intel NUC. The SSD does support enhanced erase, but the disk is in frozen state. This "Freeze status" problem has been widely discussed already:

https://wiki.ubuntuusers.de/SSD/Secure-Erase/#Exkurs-Freeze-Status-der-SSD-aufheben https://community.intel.com/t5/Intel-NUCs/Intel-NUC-SSD-secure-erase-and-drive-frozen-in-BIOS/td-p/522066?profile.language=de https://forum.kuketz-blog.de/viewtopic.php?t=4429

So it looks like it is not worth further following up on this and just stick with the good old shred.