Blog | G5 Cyber Security

Flaws in Popular Self-Encrypting SSDs Let Attackers Decrypt Data

For multiple models, it is possible to bypass the encryption entirely, allowing for a complete recovery of the data without any knowledge of passwords or keys. “The analysis uncovers a pattern of critical issues across vendors,” researchers say. An attacker can unlock drives with any password by modifying the password validation routine in RAM through JTAG. Researchers tested their attack against three Crucial models of SSDs, Crucial MX100, MX200, Samsung 850 EVO, T3 Portable, and T5 Portable drives.

Source: https://thehackernews.com/2018/11/self-encrypting-ssd-hacking.html

Exit mobile version