Google's 6y study into enterprise and consumer grade SSDs - it's not pretty

[LAwLz]

On 2/27/2016 at 3:56 PM, patrickjp93 said:

We have hardware-level AES 256. Just use that or the new 512 version.

AES 512 does not exist. Someone has proposed it, and some people are doing double AES-256 (which is not a good idea by the way, see MITM and for example 3DES), but right now there is no such thing as AES-512, and it is certainly not implemented in some SSD controller.

It's not like we will need longer key sizes anyway. We will all be long long dead before AES 256 gets broken, unless someone finds a massive security hole it in (and since that hasn't happened in the last 15+ years I think we are pretty safe).

 

On 2/27/2016 at 4:48 PM, patrickjp93 said:

AES128 can be broken (intelligent pattern-finding brute force) by the Titan supercomputer in about 4 hours.

[Citation Needed]