SandForce 256-bit AES Encryption Limited to 128-bit, Fix En Route

btarunr · Jun 12, 2012, 06:32 AM

Post acquisition, an audit by LSI reportedly discovered that the 256-bit AES native data encryption by SandForce SSD processors never was, and that the feature really just encrypted data with 128-bit AES. The problem has been resolved and a fix is in the works. LSI will share the fix with all SSD manufacturers with SandForce-based products, who could then release firmware updates to end-users.

Source: TheSSDReview

Mussels · Jun 12, 2012, 11:46 AM

does this open them up to lawsuits?

L'Eliminateur · Jun 12, 2012, 12:10 PM

smells like a destructive firmware update will be coming down the pipe for whoever wants this feature, i don't see how they can change the cypher length without maintaining the data...

deleted · Jun 12, 2012, 03:54 PM

AES-256 as an encryption standard is broken. It's actually slightly less secure than AES-128 (though still secure enough that it's basically impossible to brute force). The fact that it took nearly two years for anyone to realize that this feature has never worked is a testament to how irrelevant it is.

Steevo · Jun 12, 2012, 04:16 PM

Who cares except if you are using the security. So that means that 99% of users don't need it.

With that being said, watch out, here come the lawsuits from idiots who don't even know the difference.

FordGT90Concept · Jun 12, 2012, 04:49 PM

Quote:

Originally Posted by Mussels

does this open them up to lawsuits?

Yes, but they're being proactive about fixing it and, unless there's some documents out there that SandForce knew about it and didn't do anything, the case would be weak against them.

Quote:

Originally Posted by L'Eliminateur

smells like a destructive firmware update will be coming down the pipe for whoever wants this feature, i don't see how they can change the cypher length without maintaining the data...

Flag the drive as 128-bit encrypted and require format to change to 256-bit encrypted.

Kreij · Jun 12, 2012, 04:59 PM

Quote:

Originally Posted by FordGT90Concept

Flag the drive as 128-bit encrypted and require format to change to 256-bit encrypted.

They really don't even need to do that. They could just release a utility that decrypts the data and re-encrypts it with a 256 bit cypher and writes it back to the drive.

L'Eliminateur · Jun 12, 2012, 05:15 PM

Quote:

Originally Posted by Kreij

They really don't even need to do that. They could just release a utility that decrypts the data and re-encrypts it with a 256 bit cypher and writes it back to the drive.

that would waste a ton of erase cycles on your flash, there's no chance in hell.

it will be a flash upgrade->secure erase firmware, but as some of you said, completely irrelevant

Jun 12, 2012, 06:32 AM	#1
btarunr Editor & Senior Moderator Join Date: Oct 2007 Location: Hyderabad, India Posts: 14,981 (7.31/day) Thanks: 788 Thanked 12,896 Times in 5,648 Posts System Specs	SandForce 256-bit AES Encryption Limited to 128-bit, Fix En Route Post acquisition, an audit by LSI reportedly discovered that the 256-bit AES native data encryption by SandForce SSD processors never was, and that the feature really just encrypted data with 128-bit AES. The problem has been resolved and a fix is in the works. LSI will share the fix with all SSD manufacturers with SandForce-based products, who could then release firmware updates to end-users. Source: TheSSDReview

System Name:	Blackbox
Processor:	Intel Core i7-950
Motherboard:	Intel Extreme Series DX58OG
Cooling:	Xigmatek Aegir SD128264 with IC Diamond 24 Thermal Compound
Memory:	12GB ADATA Premier (3x 4GB) DDR3-1333 MHz
Video Card:	Palit GeForce GTX 680 JetStream 2GB outfitted with IC Diamond 24 TIM
Hard Disk:	Samsung 840 Series 250GB, Random 8 TB storage
Optical Drive:	HT-LG DVD-RW
CRT/LCD Model:	ViewSonic VX2450wm-LED
Case:	Cooler Master CM690 Window
Sound Card:	Creative SB Recon3D
PSU:	Corsair HX850W
Software:	Windows 8 Pro 64-bit

Jun 12, 2012, 11:46 AM	#2
Mussels Doctor Moderator Join Date: Oct 2004 Location: Bendigo, Australia (NOT THE USA) Posts: 34,548 (10.97/day) Thanks: 3,699 Thanked 8,688 Times in 6,389 Posts System Specs	does this open them up to lawsuits? __________________ Edumacational thread about PC Audio My external HDD's.5x samsung 1TB + 2x Seagate 1.5TB = 8 TB external storage 32 Bit OS vs 64 bit OS information How to get hardware accelerated H264 playback (DXVA) Netbook Owners United!

System Name:	Real Men use Real Cores!
Processor:	Phenom II x6 1090T: 3600Mhz undervolted (NB+HT at 2.6)
Motherboard:	Gigabyte 890FXA-UD5
Cooling:	Thermalright Ultra 120 Extreme (Lapped + ducted)
Memory:	8GB Corsair Dominator DDR3 - 1600Mhz 7-7-7-20 1.65V
Video Card:	AMD Radeon 5870 1GB Crossfire
Hard Disk:	Intel 520 SSD (120GB), 500GB OS + 18TB of storage (mostly external)
Optical Drive:	Samsung Blu Ray drive (SH-B083A)
CRT/LCD Model:	23.6" Samsung 1080P / Samsung 40" HDTV - 1360x768P
Case:	Coolermaster CM 690 II Advanced (non window)
Sound Card:	Auzentech X-Mystique (Logitech Z5500D + sennheiser HD555 + RE2's)
PSU:	Corsair HX 1000W
Software:	Windows 7 Ultimate x64 - kaspersky internet security 2011
Benchmarks:	Laptop: AMD A6 APU 1.4GHz @2.2GHz quad core + APU crossfire. 8GB DDR3, 750GB HDD

System Name:	"The scratcher"
Processor:	i5-3570K
Motherboard:	MSI Z77MA-G45
Cooling:	watercooled
Memory:	kingston hyperx blue 8GB
Video Card:	MSI R5870 Lightning
Hard Disk:	several
Optical Drive:	random sata burner
CRT/LCD Model:	Dell 2408WFP A02
Case:	CM Cosmos RC1000
PSU:	CM UCP 750W
Software:	Win 7 Pro 64b

Jun 12, 2012, 12:10 PM	#3
L'Eliminateur Join Date: May 2010 Posts: 74 (0.07/day) Thanks: 7 Thanked 6 Times in 5 Posts System Specs	smells like a destructive firmware update will be coming down the pipe for whoever wants this feature, i don't see how they can change the cypher length without maintaining the data...

Jun 12, 2012, 03:54 PM	#4
deleted Join Date: Jan 2011 Posts: 78 (0.09/day) Thanks: 1 Thanked 14 Times in 11 Posts System Specs	AES-256 as an encryption standard is broken. It's actually slightly less secure than AES-128 (though still secure enough that it's basically impossible to brute force). The fact that it took nearly two years for anyone to realize that this feature has never worked is a testament to how irrelevant it is.

System Name:	Monolith
Processor:	i5 2500K, 4.6 GHz at 1.30v
Motherboard:	P8Z68-V Pro
Cooling:	CM Hyper 212+
Memory:	2x4 GB G.Skill Ripjaws 1333 MHz CL9
Video Card:	EVGA GTX 570, 920/1840/2050 at 1.100v
Hard Disk:	OCZ Vertex 2 60 GB, WD Caviar Black 1 TB
CRT/LCD Model:	LG 2363D
Case:	Silverstone FT02B
Sound Card:	Creative Audigy 2
PSU:	Kingwin LZG-850

Jun 12, 2012, 04:16 PM	#5
Steevo Eligible for custom title Join Date: Nov 2005 Posts: 5,567 (2.02/day) Thanks: 238 Thanked 979 Times in 729 Posts System Specs	Who cares except if you are using the security. So that means that 99% of users don't need it. With that being said, watch out, here come the lawsuits from idiots who don't even know the difference. __________________ “it would have been perfect....its got trains and the line"tech your kids not to do what iv done"(or similar) because i had obviously done something to warrent 2 e-thugs to come 4000miles out of their way and kill me.” -Solaris17 “yeah i failed. i noticed the "coming soon" part after i posted.” -Mussels “people are just stupid.” -W1zzard Yes I am evil, yes you can have some.

System Name:	MoFo
Processor:	AMD PhenomII 1100T @ 3.7Ghz/4.1Ghz Turbo
Motherboard:	Asus M3A32-MVP Deluxe 2202 BIOS
Cooling:	Swiftec 655 pump, Apogee GT, MCW60-R GPU, MCR360mm Rad, 1/2 loop.
Memory:	G-Skill 1200Mhz 5.5.5.15 2T
Video Card:	HD5870 1Gb HIS custom BIOS watercooled & VRM-R4
Hard Disk:	2 Agility 3 SSD RAID 0 on highpoint 640, 2 3TB RAID 0, 1 2TB and one failing 750Gb
Optical Drive:	Lite-On DL DVD
CRT/LCD Model:	Asus 1920X1200 60Hz 25.5" LCD, 46" 1080P Toshiba LCD
Case:	Rosewill R6A34-BK modded (thanks to MKmods)
Sound Card:	On Board
PSU:	750W PC Power & Cooling modded (thanks to MKmods)
Software:	Vista X64 Ultimate/Win 7 Ultimate
Benchmarks:	780 MBps read on HDD's 1052 core on 5870.

System Name:	BY-2009
Processor:	Intel Core i7 920 (4 x 2.66 GHz) w/ HT and Turbo on
Motherboard:	DFI LP DK X58
Cooling:	Sythe MUGEN-2 w/ Stock Fan
Memory:	3 x 2 GiB OCZ Gold DDR3-1600 @ DDR-1066
Video Card:	Sapphire Vapor-X HD 5870 1 GiB
Hard Disk:	2 x Seagate Barracuda 250GB 7200.7 RAID0
Optical Drive:	Samsung 16x DVD-ROM, Pioneer 16x DVD+/-RW
CRT/LCD Model:	Samsung Syncmaster T240 24" LCD (1920x1200)
Case:	Coolermaster HAF 932
Sound Card:	Realtek Onboard, HT OMEGA Striker 7.1
PSU:	Enermax Liberty 620w
Software:	Microsoft Windows 7 Ultimate x64
Benchmarks:	Faster than the tortoise; slower than the hare.

Processor:	Intel Core 2 Quad QX9650 Extreme @ 3.0 GHz
Motherboard:	Asus Rampage Formula
Cooling:	ZeroTherm Nirvana NV120 Premium
Memory:	8GB (4 x 2GB) Corsair Dominator PC2-8500
Video Card:	2 x Sapphire Radeon HD6970
Hard Disk:	2 x Seagate Barracuda 320GB in RAID 0
Optical Drive:	Sony DRU-120C DVD-RW
CRT/LCD Model:	Dell 3007WFP 30" LCD (2560 x 1600)
Case:	Thermaltake Armor w/ 250mm Side Fan
Sound Card:	SupremeFX 8ch Audio
PSU:	Thermaltake Toughpower 750W Modular
Software:	Win8 Pro x64 / Cat 12.10

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Microsoft Intros New Wireless Desktop with 128-bit AES Encryption	btarunr	News	3	Jun 6, 2011 06:30 PM
Transcend Launches JetFlash 620 USB Flash Drive, Offer 256-bit AES Encryption	btarunr	News	2	Feb 16, 2010 10:30 PM
Fujitsu Launches New 320 GB 2.5-inch Hard Drive with AES 256-bit Encryption	malware	News	2	Apr 22, 2008 02:00 PM
Theoretically speaking 128-bit to 256-bit	bikr692002	General Hardware	2	Dec 31, 2005 03:33 AM
1)128 bit? 256 bit? 2) ATI Radeon 9600 PRO Best memory timings	Murdoc	Graphics Cards	1	Apr 7, 2005 06:53 PM