The Opal Storage Specification is a set of specifications for features of data storage devices (such as hard disk drives and solid state drives) that enhance their security. For example, it defines a way of encrypting the stored data so that an unauthorized person who gains possession of the device cannot see the data. That is, it is a specification for self-encrypting drives (SED). The specification is published by the

Trusted Computing Group The Trusted Computing Group is a group formed in 2003 as the successor to the Trusted Computing Platform Alliance which was previously formed in 1999 to implement Trusted Computing concepts across personal computers. Members include Intel, AMD, ...

Storage Workgroup.

SSC Overview

The Opal SSC (Security Subsystem Class) is an implementation profile for Storage Devices built to: * Protect the confidentiality of stored user data against unauthorized access once it leaves the owner's control (involving a power cycle and subsequent deauthentication). * Enable interoperability between multiple SD vendors.

Functions

The Opal SSC encompasses these functions: * Security provider support * Interface communication protocol * Cryptographic features * Authentication * Table management * Access control and personalization * Issuance * SSC discovery

Features

* Security Protocol 1 support * Security Protocol 2 support * Communications * Protocol stack reset commands

Security

Radboud University Radboud University (abbreviated as RU, nl, Radboud Universiteit , formerly ''Katholieke Universiteit Nijmegen'') is a public research university located in Nijmegen, the Netherlands. The university bears the name of Saint Radboud, a 9th century D ...

researchers indicated in November 2018 that some hardware encryption, including some Opal implementations, had security vulnerabilities.

Implementers of SSC

Device Companies

* Hitachi * Intel Corporation *

Kingston Technology Kingston Technology Corporation is an American multinational computer technology corporation that develops, manufactures, sells and supports flash memory products, other computer-related memory products, as well as the HyperX gaming division ...

* Lenovo * Micron Technology *

Samsung The Samsung Group (or simply Samsung) ( ko, 삼성 ) is a South Korean multinational manufacturing conglomerate headquartered in Samsung Town, Seoul, South Korea. It comprises numerous affiliated businesses, most of them united under the ...

SanDisk SanDisk is a brand for flash memory products, including memory cards and readers, USB flash drives, solid-state drives, and digital audio players, manufactured and marketed by Western Digital. The original company, SanDisk Corporation was acquir ...

* Seagate Technology *

Toshiba , commonly known as Toshiba and stylized as TOSHIBA, is a Japanese multinational conglomerate corporation headquartered in Minato, Tokyo, Japan. Its diversified products and services include power, industrial and social infrastructure systems, ...

Storage Controller Companies

* Marvell * Avago/LSI SandForce flash controllers

Software companies

Absolute Software Absolute Software Corporation is an American-Canadian company that provides products and services in the fields of endpoint security and zero trust security. The company is headquartered in Vancouver, British Columbia, Canada. Regional offices ...

Check Point Software Technologies Check Point is an American-Israeli multinational provider of software and combined hardware and software products for IT security, including network security, endpoint security, cloud security, mobile security, data security and security managem ...

* Dell Data Protection * Cryptomill *

McAfee McAfee Corp. ( ), formerly known as McAfee Associates, Inc. from 1987 to 1997 and 2004 to 2014, Network Associates Inc. from 1997 to 2004, and Intel Security Group from 2014 to 2017, is an American global computer security software company head ...

* Secude * Softex Incorporated * Sophos * Symantec (Symantec supports OPAL drives, but does not support hardware-based encryption.) *

Trend Micro is an American-Japanese multinational cyber security software company with global headquarters in Tokyo, Japan and Irving, Texas, United State.Other regional headquarters and R&D centers are located around East Asia, Southeast Asia, Europe, and ...

* WinMagic * OpalLock(OpalLock support Self-Encrypt-Drive capable SSD and HDD. Develop by Fidelity Height LLC)

Computer OEMs

* Dell * HP * Lenovo * Fujitsu *

Panasonic formerly between 1935 and 2008 and the first incarnation of between 2008 and 2022, is a major Japanese multinational conglomerate corporation, headquartered in Kadoma, Osaka. It was founded by Kōnosuke Matsushita in 1918 as a lightbulb ...

Getac Getac () is a Taiwanese multinational technology company that specializes in rugged computers, mobile video systems, mechanical components, automotive parts, and aerospace fasteners. Getac was established on 5 October 1989 as a joint venture w ...

References

{{Reflist, 30em

External links

Storage Work Group Storage Security Subsystem Class: Opal
Computer security Computer storage technologies