drcas.blogg.se - Dod hard drive wipe software

This can be achieved by using full-disk encryption (FDE) or self-encrypting drives (SED).

The only truly better method than using ESE is NOT having data on the drive in the first place.

The lesser ATA 'Secure Erase' command is faster but only overwrites with 'zeros', rather than a random pattern. WipeDrive has been certified by the NSA as wiping software that makes data forensically unrecoverable.

Some PC BIOS (or OS) block the ATA command(s) from being run, and some (much older) brand/models (of drive) are problematic, due to poor implementation of ESE.

This advice ignores older magnetic-media (from pre-2001 and/or less then 15GB in capacity).If this command can NOT be used, the media needs to be 'destructed' (converted to <2mm size fragments, or melted in a furnace). The ONLY plausible method (for HDD, SSHD and SSD) is to use the ATA 'Enhanced Secure Erase' (ESE) command to 'remove' all stored and residual data.

Any spare blocks (especially reserved cells on SSDs) will not be erased. The problem with using OS level commands such sa DD is that they will only erase blocks seen by the OS. Another option for reference is to use the ATA Secure Erase method using hdparm. The software uses DOD 5220.22-M (3 passes), DoD 5200.22-M (ECE) (7 passes), and DoD 5200.28-STD (7 passes) to permanently wipe hard drives & SSDs across PC, Mac & Server beyond any scope of revovery.