The Opal Storage Specification is a set of specifications for features of data storage devices (such as hard disk drives and solid state drives) that enhance their security. For example, it defines a way of encrypting the stored data so that an unauthorized person who gains possession of the device cannot see the data. That is, it is a specification for self-encrypting drives (SED). The specification is published by the Trusted Computing Group Storage Workgroup.

SSC Overview

The Opal SSC (Security Subsystem Class) is an implementation profile for Storage Devices built to: * Protect the confidentiality of stored user data against unauthorized access once it leaves the owner's control (involving a power cycle and subsequent deauthentication). * Enable interoperability between multiple SD vendors.

Functions

The Opal SSC encompasses these functions: * Security provider support * Interface communication protocol * Cryptographic features * Authentication * Table management * Access control and personalization * Issuance * SSC discovery

Features

* Security Protocol 1 support * Security Protocol 2 support * Communications * Protocol stack reset commands

Security

Radboud University researchers indicated in November 2018 that some hardware encryption, including some Opal implementations, had security vulnerabilities.

Implementers of SSC

Device Companies

Hitachi () is a Japanese multinational corporation, multinational Conglomerate (company), conglomerate corporation headquartered in Chiyoda, Tokyo, Japan. It is the parent company of the Hitachi Group (''Hitachi Gurūpu'') and had formed part of the Ni ...

Intel Corporation Intel Corporation is an American multinational corporation and technology company headquartered in Santa Clara, California. It is the world's largest semiconductor chip manufacturer by revenue, and is one of the developers of the x86 series ...

* Kingston Technology *

Lenovo Lenovo Group Limited, often shortened to Lenovo ( , ), is a Chinese Multinational corporation, multinational technology company specializing in designing, manufacturing, and marketing consumer electronics, Personal computer, personal computers, ...

Micron Technology Micron Technology, Inc. is an American producer of computer memory and computer data storage including dynamic random-access memory, flash memory, and USB flash drives. It is headquartered in Boise, Idaho. Its consumer products, including ...

* Samsung * SanDisk *

Seagate Technology Seagate Technology Holdings plc is an American data storage company. It was incorporated in 1978 as Shugart Technology and commenced business in 1979. Since 2010, the company has been incorporated in Dublin, Ireland, with operational headquart ...

* Toshiba

Storage Controller Companies

* Marvell * Avago/LSI SandForce flash controllers

Software companies

* Absolute Software *

Check Point Software Technologies Check Point is an American-Israeli multinational provider of software and combined hardware and software products for IT security, including network security, endpoint security, cloud security, mobile security, data security and security ...

* Dell Data Protection * Cryptomill * McAfee * Secude * Softex Incorporated *

Sophos Sophos Group plc is a British based security software and hardware company. Sophos develops products for communication endpoint, encryption, network security, email security, mobile security and unified threat management. Sophos is primarily ...

Symantec Symantec may refer to: *An American consumer software company now known as Gen Digital Inc. *A brand of enterprise security software purchased by Broadcom Inc. Broadcom Inc. is an American designer, developer, manufacturer and global supplier ...

(Symantec supports OPAL drives, but does not support hardware-based encryption.) * Trend Micro * WinMagic * OpalLock(OpalLock support Self-Encrypt-Drive capable SSD and HDD. Develop by Fidelity Height LLC)

Computer OEMs

Dell Dell is an American based technology company. It develops, sells, repairs, and supports computers and related products and services. Dell is owned by its parent company, Dell Technologies. Dell sells personal computers (PCs), servers, data ...

* HP *

Fujitsu is a Japanese multinational information and communications technology equipment and services corporation, established in 1935 and headquartered in Tokyo. Fujitsu is the world's sixth-largest IT services provider by annual revenue, and the la ...

* Panasonic *

Getac Getac () is a Taiwanese multinational technology company that specializes in rugged computers, mobile video systems, mechanical components, automotive parts, and aerospace fasteners. Getac was established on 5 October 1989 as a joint venture w ...

References

{{Reflist, 30em

External links

Storage Work Group Storage Security Subsystem Class: Opal
Computer security Computer storage technologies