Coming soon: Full-disk encryption for all computer drives

28.01.2009

-- The Storage Interface Interactions Specification, which specifies how the TCG's existing Storage Core Specification and the other specifications interact with other standards for storage interfaces and connections. For example, the specification supports a number of transports, including ATA parallel and serial, SCSI SAS, Fibre Channel and ATAPI.

Several of the drive manufacturers, including Seagate, Fujitsu and , already support the specification on some of their drives. Hitachi, for instance, is shipping its internal TravelStar 500 laptop drives with full-disk encryption.

Several encryption management software vendors, including Wave Systems, WinMagic Inc. and CryptoMill Technologies, have also announced product certification for the specification.

Brian Berger, a marketing manager with Wave Systems and chair of the TCG marketing work group, said the specifications call for the use of Advanced Encryption Standard (AES). Vendors are free to choose to AES 128-bit or AES 256-bit keys depending on the level of security they want. Neither have been broken.

"Things like key manageability and patch management become things of the past," he said. "You don't have to worry about what version of encryption software is running or what [encryption appliance] your system's plugged into. When encrypted drives are under management, users can't turn off encryption, so there's no chance of users losing machines with valuable data on them after having turned off encryption."