Self-encrypting flash drive

摘要

A method comprises receiving a plaintext message (m), encrypting the plaintext message and generating a cipher text (c) and authentication data (t), storing the cipher text in a user data portion of a data storage device, and storing the authentication data in a meta data portion of the data storage device.

主权项

1. A method for storing user data in a flash storage device to enable detection of subsequent tampering, comprising:
receiving a plaintext comprising at least a portion of the user data; receiving a user key; reading stored first metadata associated with a sector of the flash storage device, wherein the first metadata comprises at least one attribute associated with a physical location; generating an initialization vector based on the at least one attribute; encrypting the plaintext based on the user key and the initialization vector to generate a cipher text and first authentication data; storing the cipher text in the sector of the flash storage device; and storing the first authentication data as second metadata associated with the sector of the flash storage device.