9

When I use Parted Magic to secure erase an SSD I get two options.

  1. Secure Erase ATA Device
  2. Sanitize

While I have searched the net, I still do not understand the exact technical different between the two as a layman.

This is extract from say Sandisk KB.

Secure Erase is different from Sanitize because it only deletes the mapping table but will not erase all blocks that have been written to. Sanitize will delete the mapping table and will erase all blocks that have been written to. Therefore, Secure Erase is faster to complete than Sanitize. After you erase the drive using Secure Erase or Sanitize, all user data will be permanently destroyed on the selected drive. This data cannot be recovered.

I don't have clarity what a mapping table is, and hence it's not clear.

Questions that I have are

  1. Different between the two in simple terms
  2. Is one better than other and if so in what way, which one is preferred if any?
  3. In what way deleting only mapping table and table + blocks affect the performance if any, does it improve the I/O?
  4. If all I need is make data recoverable, is any one of the treatment enough?

I hope this question is on topic and all my sub-queries are related to each other.

ﾤ ﾡ
  • 4,187
rajeev
  • 1,984

4 Answers4

9

Generally speaking, there are a few common ways to erase a storage device:

  1. By overwriting storage blocks containing data with a bit pattern. This is the most common method for standard spinning hard drives.
  2. On NAND flash devices, by performing a block erase operation that physically destroys data from memory cells.
  3. On storage devices that keep track of used/free storage blocks (e.g. SSDs) by deleting the mapping between logical block address and the corresponding physical block, leaving the data on said block intact (and therefore recoverable).
  4. On self-encrypting drives, by destroying the encryption key stored on the drive, rendering the data unreadable. This is often combined with destroying all block mappings on the drive.

Each storage protocol (ATA, SCSI, NVMe) has its own set of commands for sanitizing a storage disk.

  • The ATA protocol specifies the SECURITY ERASE UNIT command with two modes, normal mode and enhanced erase mode: normal mode specifies overwrite with zeroes; enhanced erase specifies a "predetermined data pattern" and additionally targets "sectors that are no longer in use due to reallocation". New ATA drives might also support the new SANITIZE command with three modes: crypto scramble, block erase and overwrite.
  • The SCSI protocol defines a SANITIZE command with three modes: overwrite, block erase and cryptographic erase (where the encryption key is deleted from the drive).
  • The NVMe specification defines two commands: Format (for a NVMe namespace) and Sanitize (for the whole device). The Format command itself has three modes: no secure erase, user data erase and cryptographic erase. The Sanitize command also has three modes: block erase, crypto erase and overwrite.

Since the implementation of ATA SECURITY ERASE UNIT is manufacturer-dependent, I can only guess that calling this command on Sandisk drives will not completely erase your data; another drive manufacturer might use a different and more secure method altogether. Regardless, it is almost always preferable to use the SANITIZE command when available, or even combine multiple SANITIZE commands; Micron actually recommends a SANITIZE CRYPTO SCRAMBLE followed by a SANITIZE BLOCK ERASE on their SATA SSDs.

Tu Dinh
  • 405
1

Santize seems to be the more secure if you are paranoid of someone recovering data from that drive. However I IMAGIME sanitize may shorten the life of the drive a little more since it writes over used blocks. This is because of flash/SSD memory having a limited number of read/writes before they die, but I hear that is less of a concern. If you're just starting fresh with the drive let the OS format or do the secure erase, assuming you're using the drive yourself again & not paranoid about data recovery by bad actors

gregg
  • 6,307
-1

Secure: erases the mapping table (MFT in Windows) which is how the OS finds the location of the file on the disk, but files are still there and can be recovered by a skilled person.

Note: The command is old, and manufacturers don't always implement it properly, some don't even erase any data after a successful "secure erase"

See this paper on the issue

Sanitized: erases All data on the disk and files are unrecoverable by any means.

Sanitized is preferred for obvious reasons. Does not affect performance

(MFT= Master File Table)

Moab
  • 58,769
-1

Santize - data will be really erased, un-recoverable. Secure Erase - only delete the mapping table (like a link), somebody may recover out the data if knows the internal format of the data.

user1662190
  • 1