Is password hashed before saving to CMOS?
Which hash algorithm is used?
How much storage is dedicated for passwords?
What is about passwords of SSD with AES?
Does BIOS save it inside drive (just pass it to device for further processing)?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this communityIs password hashed before saving to CMOS?
Which hash algorithm is used?
How much storage is dedicated for passwords?
What is about passwords of SSD with AES?
Does BIOS save it inside drive (just pass it to device for further processing)?
Is password hashed before saving to CMOS?
Depends on the BIOS.
Which hash algorithm is used?
Depends on the BIOS.
How much storage is dedicated for passwords?
Depends on the BIOS.
What
isabout passwords of SSD with AES? Does BIOS save it inside drive (just pass it to device for further processing)?
There are a lot of different technologies for SSD encryption with AES, some of which may involve the BIOS. If it is using Real Encryption (TM), as use of the term "AES" implies, then the password should not be "saved inside the drive". Sometimes it's just a lock rather than real encryption, though, in which case the password, or a hash of it, is saved somewhere. It depends on the BIOS and SSD.
SECURITY_SET_PASS
, then it's just 32 bytes of ASCII stored as plaintext on the drive and accessible to drive firmware. Hopefully any Opal-compliant drive will be doing encryption properly and not storing the key, just using it to decrypt the master key.