1

This question already has an answer here:

I've read some articles and they appear to suggest the idea of using the dd command to wipe an entire SSD before encrypting it. The drive in question is a Samsung 970 EVO PCIe NVMe V-NAND M.2 2280 250GB MZ-V7E250BW

Correct me if I'm wrong: SSDs maintain a layer of indirection between logical addresses and physical address, so there are risks if you do NOT wipe the entire SSD.

SSDs also don't overwrite on the same page of the modified data. Instead, they write to a new page and leave the original data untouched.

My question is, is it secure to wipe an entire SSD using dd for example: dd if=/dev/zero of=/dev/mapper/something_to_wipe status=progress?

EDIT: A comment mentioned 7 years ago answered part of my question, I'd like a more specific answer to my question.

marked as duplicate by ThoriumBR, forest, Steffen Ullrich, Josef, AndrolGenhald Sep 18 '18 at 14:27

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 1
    Perhaps it would help if you could point out what part of your question isn't answered by the proposed duplicate? – AndrolGenhald Sep 17 '18 at 15:43
0

You do not need to delete a new SSD before enabling encryption. Deleting is only relevant in case there already is sensitive data on the drive. If you enable encryption before writing any data to the SSD, there will never be any unencrypted data on the SSD that you need to delete.

If the SSD was used before, but the data on it is not sensitive, then you can just format the SSD. There is no need to delete the SSD securely, if you don't care about the unencrypted data on it.

If there is sensitive data on the SSD that you want to securely delete, then this answer explains why it is not safe. Generally, if you want to be completely secure, set up a new encrypted SSD, transfer the data and then physically destroy the old, unencrypted SSD. There is no 100% way of wiping the whole SSD, only probabilistic attempts that would wear out your SSD anyway.

  • As my first post, I have new SSD and then do I need to wipe it before do the first encryption on it or not ? If I still need to wipe it, dd on the mapper is good enough? – Tuyen Pham Sep 17 '18 at 11:36
  • @TuyenPham Okey, your question is not celar, I will edit the answer. – Peter Harmann Sep 17 '18 at 11:37
  • @TuyenPham Is it better now? – Peter Harmann Sep 17 '18 at 11:43

Not the answer you're looking for? Browse other questions tagged or ask your own question.