So modern solid-state drives often support OPAL standard for full-disk encryption. If I understand correctly, it uses a user password to encrypt a key which is then in turn used to encrypt content of the drive. But my question is how is this encryption key generated? Many attacks are possible if a random source for this key generation is not truly random. Looking at Linux utility sedutil I can see only commands to change a password. But when is the key generated? Or how do I force key regeneration? Can I supply my own key so that I can be sure it was properly generated?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.