Opal Storage Specification

This article has multiple issues. Please help improve it or discuss these issues on the talk page. (Learn how and when to remove these messages) This article relies excessively on references to primary sources. Please improve this article by adding secondary or tertiary sources. Find sources: "Opal Storage Specification" – news · newspapers · books · scholar · JSTOR (May 2017) (Learn how and when to remove this message) This article is missing information about Opalite and Pyrite, two subsets defined by the TCG (& the even simpler TCG Enterprise). Please expand the article to include this information. Further details may exist on the talk page. (June 2023) (Learn how and when to remove this message)

The Opal Storage Specification is a set of specifications for features of data storage devices (such as hard disk drives and solid state drives) that enhance their security. For example, it defines a way of encrypting the stored data so that an unauthorized person who gains possession of the device cannot see the data. That is, it is a specification for self-encrypting drives (SED).

The specification is published by the Trusted Computing Group Storage Workgroup.

This section does not cite any sources. Please help improve this section by adding citations to reliable sources. Unsourced material may be challenged and removed. (May 2017) (Learn how and when to remove this message)

The Opal SSC (Security Subsystem Class) is an implementation profile for Storage Devices built to:

• Protect the confidentiality of stored user data against unauthorized access once it leaves the owner's control (involving a power cycle and subsequent deauthentication).
• Enable interoperability between multiple SD vendors.^[1]

This section does not cite any sources. Please help improve this section by adding citations to reliable sources. Unsourced material may be challenged and removed. (May 2017) (Learn how and when to remove this message)

The Opal SSC encompasses these functions:

• Security provider support
• Interface communication protocol
• Cryptographic features
• Authentication
• Table management
• Access control and personalization
• Issuance
• SSC discovery

This section does not cite any sources. Please help improve this section by adding citations to reliable sources. Unsourced material may be challenged and removed. (May 2017) (Learn how and when to remove this message)

• Security Protocol 1 support
• Security Protocol 2 support
• Communications
• Protocol stack reset commands

Radboud University researchers indicated in November 2018 that some hardware-encrypted SSDs, including some Opal implementations, had security vulnerabilities.^[2]

• Hitachi
• Intel Corporation^[3]
• Kingston Technology^[4]
• Lenovo^[5]
• Micron Technology^[6]
• Samsung^[7]
• SanDisk^[8]
• Seagate Technology^[9][10] as "Seagate Secure"
• Toshiba^[11][12][13]

• Marvell^[14][15]
• Avago/LSI SandForce flash controllers^[16]

• Absolute Software^[17]
• Check Point Software Technologies^[18]
• Dell Data Protection^[19]
• Cryptomill^[20]
• McAfee^[21]
• Secude ^[22]
• Softex Incorporated^[23]
• Sophos^[24]
• Symantec^[25] (Symantec supports OPAL drives, but does not support hardware-based encryption.)^[26]
• Trend Micro^[27]
• WinMagic^[28]
• OpalLock^[29](OpalLock support Self-Encrypt-Drive capable SSD and HDD. Develop by Fidelity Height LLC)

• Dell^[30]
• HP^[31]
• Lenovo^[32]
• Fujitsu^[33]
• Panasonic^[34]
• Getac^[35]

• Storage Work Group Storage Security Subsystem Class: Opal