tree: 898687cfd878621b0aa42a27138c8a6c72210b16 [path history] [tgz]
  1. BUILD.gn
  2. OWNERS
  3. README.md
  4. secure-wipe.sh
  5. tests/
  6. wipe_disk
secure-wipe/README.md

Chromium OS Secure Wipe

Full disk wipe code for factory and recovery images.

Due to indirection performed by flash storage firmware (e.g. for the purpose of wear leveling) there is no constant mapping between the underlying backing store and the storage sectors exposed at the block layer. As a consequence, the only reliable way to delete any piece of data from a flash storage device is to clear the entire backing store. This package implements full disk deletion for SATA, eMCC and NVMe.

In principle, this package should provide stronger guarantees than secure_erase_file because the latter only erases the backing store at the file's current location (which may be different from past locations) whereas disk-wipe deletes the entire backing store.

Caveat emptor: While sanity checks will be put in place, there is no way to guarantee that the deletion interface called by the disk wipe code is correctly implemented by the storage device.