"WD has been in a dialogue with independent security researchers relating to their security observations in certain models of our My Passport hard drives," spokeswoman Heather Skinner told The Register in a statement. Meanwhile, Western Digital says it is on the case. This paper on WD self-encrypting drives has to be read to be believed. It must be stressed that the flaws are in WD's software running on these microcontrollers, rather than the chips themselves. Drive models using a JMicron JMS569 controller – which is present in newer My Passport products – can be forcibly unlocked using commercial forensic tools that access the unencrypted system area of the drive, we're told.ĭrives using a Symwave 6316 controller store their encryption keys on the disk, encrypted with a known hardcoded AES-256 key stored in the firmware, so recovery of the data is trivial.
0 Comments
Leave a Reply. |