Kommentare zu: SSDs and TrueCrypt: durability and performance issues

Von: Media Addicted

Media Addicted — Wed, 12 Oct 2011 07:53:00 +0000

…just take all of the space available and encrypt it with truecrypt. all i’ve read about that indicates, that it doesn’t matter at all if you decide to use all the space available…

Von: Media Addicted

Media Addicted — Fri, 24 Jun 2011 15:29:00 +0000

just use it

Von: Guest

Guest — Fri, 24 Jun 2011 15:27:00 +0000

Ok. I think I understand what you saying. I have a brand new Crucial M4 128GB SSD, never been used, I have it plugged in right now but not done anything with it. So given my scenario, what would you suggest?

Many Thanks.

Von: Media Addicted

Media Addicted — Fri, 24 Jun 2011 06:53:00 +0000

with new drives like intel’s 320 / 510 series, ocz’s vertex 3 etc. this isn’t a problem anymore as manufacturers have increased spare areas to 10-15% of a drive’s capacity. if you stick with some older ones go for sth like 5-10% of drive’s capacity.

important: you first have to secure erase your SSD, then partition with that additional spare area to make it work. if you simply shrink existing partitions or delete existing ones, the controller won’t use the space as spare area…

Von: Media Addicted

Media Addicted — Fri, 24 Jun 2011 06:53:00 +0000

Von: Guest

Guest — Thu, 23 Jun 2011 21:31:00 +0000

You say you should leave some unpartitioned space for the controller to use for wear leveling, how much for an 128GB SSD, say 1GB unpartitioned space?

Von: Azu

Azu — Tue, 07 Sep 2010 22:32:10 +0000

So this whole article can be condensed to “don’t use security products unless you need security”? Okay…

Von: Media Addicted

Media Addicted — Wed, 28 Jul 2010 10:15:57 +0000

Michal, this post is titled “performance and durability”, not security BTW: security would be a very interesting topic to cover, unfortunately I’m not competent in this area.

Von: Michal

Michal — Sun, 25 Jul 2010 10:11:29 +0000

You didn’t mentioned security at all. Security is most important thing of encrypted disks. Trim is potentialy security risk. TrueCrypt first write random data to the whole drive so nobody could recognize whether the block is empty or not. This is the opposite of trim function. So if you want safety storage you can’t use trim. This is huge problem and I guess there is need to make up whole new way how to encrypt ssd with trim function and no power loss.

Von: Media Addicted

Media Addicted — Tue, 20 Jul 2010 20:56:26 +0000

Kannst ruhig deutsch schreiben, der Artikel ist nur Englisch, weil so viele englische Leser meine Tekkie-Posts lesen

Nein, bei mir war das kein problem. Ich tippe mal, dass du eine SSD mit SandForce controller hast, die nutzen Garbage collection. Und diese garbage-Informationen müllen den Controller bei Komplettverschlüsselung zu, weil ja das OS gar nicht mitbekommt, welche Sektoren physikalisch beschrieben werden und welche nicht. Irgendwann sagt dann der Controller, dass alles “Garbage” ist und hat keinen Platz mehr für irgend was anderes (für den Controller sieht es ja so aus, als sei die ganze Platte mit Zufallsdaten vollgemüllt) und dann bleibt es eben stehen – denke ich mir jetzt mal so.

Kann man GC ggf. deaktivieren?