Protection of security parameters in storage devices

摘要

Security parameters used to encrypt data stored on a storage device may be protected using embodiments of systems and methods described herein. During a resize operation, data stored on a memory unit in the storage device may be altered prior to communicating an updated partition size to a host computer. In some examples, data is altered prior to storing the updated partition sizes in the storage device. In this manner, a host system may not receive the updated partition sizes until after the data is altered. Altering data may avoid exposure encrypted data, information about one or more security parameters used to encrypt data on the memory unit or decrypt data retrieved from the memory unit, or combinations thereof.

主权项

1. A method, comprising:
receiving, at a storage device configured to store data encrypted with a stored security parameter and further configured to be removably connected to a host computer, a request to resize a first partition of the storage device; generating a temporary security parameter different than the stored security parameter responsive, at least in part, to the request to resize; encrypting, on the storage device, data with the temporary security parameter; writing the encrypted data to a portion of the storage device affected by the request to resize; and storing an updated partition size in at least one of the first partition or a second partition of the storage device.