I would like to check whether the algorithm that is used to encrypt my SSD drive is actually AES-128.

I wanted to read the raw disk data, encrypt them myself and then diff the data against the encrypted disk data to check if there is a difference or not. I have found the article that states:

The Encryption Key never leaves the device and is known only by the drive itself. Not even the drive manufacturer knows the value of the Encryption Key.


Since I cannot access the Encryption Key, the verification process described above cannot be performed.

How can I make sure the manufacturer of the SSD that advertises AES-128 encryption does not in fact use some other algorithm?

  • 2
    Since the algorithm is implemented in a closed-source, proprietary way, there usually isnt any practical way to know for sure. And even if it's AES, who sais they don't use weak keys / S-boxes / other parts. That how i would backdoor crypto, and that's probably how you would be vulnerable, intentionally or through incompetence. To avoid all this, use open source crypto on top of anything you use. – J.A.K. Feb 12 '17 at 3:20
  • @J.A.K. What is a "weak S-box" in the context of AES? – forest Jun 5 '18 at 1:44
  • @forest I guess it wouldn't be AES anymore if you modified it. I mean the possibility of a perverted AES-like scheme, but with with substitution boxes that introduce weakness (p 28) – J.A.K. Jun 6 '18 at 11:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.