Questions tagged [opal-2.0]

Security specification for storage devices defined by TCG.

Filter by
Sorted by
Tagged with
0
votes
1answer
106 views

Is Opal-based full disk encryption fully working for Linux?

I'd like to know whether I can realistically use hardware based full disk encryption with Linux, both at start-up after putting the computer to sleep. Ideally I would like it to just work, regardless ...
0
votes
1answer
73 views

How is the DEK in a SED drive encrypted?

I am using a Samsung Evo 960 NVME SSD. I have encrypted the SSD using its built in hardware encryption features, which follow the tcg opal standard. If I understood correctly, the disk encrypts all ...
2
votes
0answers
40 views

How does the Shadow MBR improve security for Opal v2 SEDs?

Opal v2 and above drives are required to support multiple locking ranges, so it's possible to block access entirely to the majority of the drive and only have the bootloader w/ PBA support section ...
4
votes
1answer
460 views

Does ATA security support or allow for 2FA?

I understand TCG OPAL is the spiritual successor of ATA Security for hard drive encryption with SEDs. They claim there is support for biometrics etc, but how is it for the predecessor, ATA Security? ...
1
vote
1answer
839 views

How secure is OPAL 2.0?

I basically cannot find any credible information online as to how secure OPAL 2.0 drives are, and so I don't really know how much, or in what cases, I can trust their encryption to keep my data safe ...
9
votes
1answer
1k views

Is the Shadow MBR used in SEDs a security vulnerability?

I've been reading up on Self Encrypting Drives and I'm having trouble understanding how the Shadow MBR is not a security problem. I found these slides which indicate that the Shadow MBR is stored in ...
2
votes
1answer
15k views

How to enable OPAL SSD encryption on Windows without BitLocker?

A lot of SSDs now implement OPAL-compliant AES hardware encryption, which seems to be the only option to get full-disk encryption on modern PCs without buying the (very expensive) Windows 10 Pro ...
0
votes
0answers
43 views

Disk Encryption - Extended Boot Record protection

I posted something like this on SuperUser some months ago, but thought I'd try the security focused site. Anyway, I am working on a Disk Encryption project using OPAL drives. The OS is Linux, and is ...