www.vikingtechnology.com
The SSD also has an optional Cryptographic Erase plus Physical Flash Erase
command where in addition to a Secure Erase, all encrypted, unreadable data
and all Flash blocks (excluding FW blocks) are erased. Persistent drive life data
is rewritten to the flash blocks after erase. The operation time for a Cryptographic
Erase with Physical Flash Erase, scrambled encrypted data is ~ 1 second/GByte.
2.7.1.1 Military Secure Erase / Sanitization
Many government and military organizations such as NIST/NSA define their own
standard and procedures for performing a Military Secure Erase which overwrite
different patterns to sanitize the flash media. Some of the more common military
or government purge routines are defined in the following table and the data
security features of the drive comply with Department of Defense (DoD) and US
military data security standards.
Table 2-14: Military Secure Erase / Sanitize Routines
1
NSA/CSS 9-12 Erase and overwrite all locations with a known unclassified pattern.
Verify the overwrite procedure by randomly rereading the overwritten
information to confirm that only the known pattern can be recovered.
Note 1
NSA/CSS 130-2 Erase the media and overwrite with random data 2 times, then erase
and overwrite with a character
Note 1
DoD5220.22-M NISPOM Erase the media and overwrite with single character, then erase
again
Note 1
DoD5220.22-M NISPOM
Sup 1
Erase the media and overwrite with single character, then erase
again and overwrite with single character, then erase again and
overwrite with random character then erase again
Note 1
USA Army 380-19 Erase the media and overwrite with random data, erase and
overwrite with a character, then erase and overwrite with
complement of the character
Note 1
Navy NAVSO P-5239-26 Erase the media and overwrite with random data, then erase again Note 1
Air Force AFSSI 5020 Erase the media and overwrite with pattern, repeat 3 times Note 1
IRIG 106-2007
IRIG 106-07, Ch. 10.8
Erase the media, overwrite with 0x55, erase, overwrite with 0xAA,
and then erase again. Then fill the drive with a repeating string of
Secure Erase.
N/A
Notes:
1. Enabled in firmware at the time of manufacture and prior to shipping from the factory
2. NSA/CSS 9-12 is the factory default unless otherwise requested.
