Jump to content
Corsair Community

Request for details on Corsair Force 3 Encryption Key Storage Implementation


supervision

Recommended Posts

Corsair Tech,

 

I recently purchased a Corsair Force 3 90GB SSD drive from Newegg. Corsair announced these products as having AES encryption. I've seen them do that before where they announce that AES encryption with user-selectable password. My question is just how does Corsair implement this and why can I not find any details of this?

In my research I have determined that OCZ's implementation is insecure. Intel's with their 320's may or may not be secure. They store the ATA password as a hash on the drive but they don't say how or why. The ATA password is somehow used to muddle the encryption key from what I can understand.

 

So how does Corsair implement key storage for the AES encryption on the Sandforce SF-2200? Can an ATA password encrypt the AES key? Or is the ATA pass just used for verification and stored somewhere in the SSD's memory, making it pretty much irrelevant for anyone determined?

 

Also one thing about this forum I've gotta say is you're really doing a disservice by making one of the forum rules that you can't talk about competitors. Clearly, I've broken that rule in this post. I don't see how you can not break that rule with some posts. It's a cheap rule and it should be wiped.

 

Thanks

Link to comment
Share on other sites

AFAIK the SandForce controller is capable of it, but I don't believe it's enabled. I do know that it wasn't enabled on the Force SATA II drives: http://forum.corsair.com/forums/showthread.php?t=90226

 

I couldn't find any info on their website or press releases regarding encryption. I certainly could have missed something, but if they had added a feature like that, I'd imagine they would have put it on a press release and the specs page.

 

And no, you haven't broken the rules. It's explained in the rules, and has been discussed ad infinitum in the rules comments thread (linked to in the rules thread itself). If you wish to discuss it further, please read those threads first, and then if you still wish to discuss it, please post any further comments / constructive criticism in the comments thread.

Link to comment
Share on other sites

That's a shame I think Corsair should really consider it, and do it properly so that a 32 random character ATA password will encrypt/decrypt the AES key on the drive or something secure. If they ever do please update this thread. I'm going to subscribe to it so that I'm notified of changes. And thank you for your help, I appreciate it. Happy Holidays
Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...