Security Basics mailing list archives

RE: Hard Drive data security


From: Atom 'Smasher' <atom () suspicious org>
Date: Thu, 7 Oct 2004 00:04:49 -0400 (EDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Tue, 5 Oct 2004, Paris E. Stone wrote:

I was informed that /dev/null just wrote zeros to the drive and that a better way was multiple passes using random:

dd if=/dev/urandom of=/dev/had

or maybe /dev/random

Not positive, so many *nixes with their own ways of doing things.

But basically /dev/urandom writes ones and zeros in random fashion.
==========================

typically, on systems that have them, /dev/random is "true" random and /dev/urandom is a CSPRNG.

http://en.wikipedia.org/wiki/CSPRNG

what makes /dev/urandom better than /dev/random for wiping a disk is that it can generate output a *lot* faster.

if a few passes over a disk from /dev/urandom isn't good enough, use a sledgehammer (and safety glasses).


        ...atom

 _________________________________________
 PGP key - http://atom.smasher.org/pgp.txt
 762A 3B98 A3C3 96C9 C6B7 582A B88D 52E4 D9F5 7808
 -------------------------------------------------

        "According to Business Week, the average CEO [Chief
         Executive Officer] made 42 times the average blue-collar
         worker's pay in 1980, 85 times in 1990 and a staggering
         531 times in 2000."
                -- AFL-CIO 'Executive Paywatch'
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.3.6 (FreeBSD)
Comment: What is this gibberish?
Comment: http://atom.smasher.org/links/#digital_signatures

iQEcBAEBCAAGBQJBZMBnAAoJEAx/d+cTpVci7lUH/i///plDVNUEbCxbhlTkPeaj
CdLm8g+530Ro9FR0I67co60UBLywCfHkQPFGMG/32SQXkoZJPWD89Jz/VcqfzmwV
x/P9HnSXWxKp9CoNVJKuOFmhKy3aiqtpjct1aF3POR7lBg7xfoJxo0m86ArGDIjX
+fo5Fe7tEwkVeb1YHmekin8vc66hYXtvImLI7/LKqc7KHQ/+vbE4uJ3Tsfllo40E
fa60jB07D56x6voTgXrj4Sha/BDMcN6iI/D4h2HKZrL6coOqbdRQemp+DN0xXETq
VOwR8JcITKzVzjv23fEtWCAw6vEigBa7VJTvmMAPJ9LyOpcw5htpqpxyWsYsawY=
=7ZEx
-----END PGP SIGNATURE-----


Current thread: