yuumei

Is there a way to change an SSD encryption key without deleting data?

https://lemmy.world/post/1347120

Is there a way to change an SSD encryption key without deleting data? - LemmyWorld

Hey! I appreciate any comments, I would like to encrypt my data using SSD native on disk encryption, change the key to a “dummy” key leaving the data hidden at rest, then later swap in the “correct” key and begin using the data again. I have taken a look at sedutil-cli and nvme-cli but I can’t see a way to change the MEK/DEK which I believe are they keys I need to swap in and out. Is this possible?

Jul 11, 2023 at 3:04pmWeb
Show threadPutangInaMoJul 11, 2023
What are you using to encrypt the drive? Gonna depend on that’s ability to rekey but that’s a pretty standard feature with PKI.
Show threadMeow.tar.gzJul 11, 2023
I know in LUKS it’s very possible.
Show threadyuumeiJul 11, 2023
It’s possible with LUKS or raw dm-crypt but the SSD controller would have records of which blocks have been written proving there is data present, if the SSD was doing the encryption then I think you wouldn’t know if there was data or not
Show thread☆ Yσɠƚԋσʂ ☆Jul 18, 2023
I don’t think anybody who’s been paying attention is, but seems to be a shock for a lot of people in the west who’ve internalized the narrative that China just steals western tech and makes cheap stuff.