> Microsoft quietly dropped support for encryption offload support ("OPAL") in SSD drives because the hardware vendors were doing absolute clown-shoes things like a single static hard-coded key or the key was literally empty / all zeroes!
That's just the default OPAL key.
The idea was that you are supposed to SET the key... they made all paths go through the encryptor, so "unencrypted" was just a key with zeroes.
That's just the default OPAL key.
The idea was that you are supposed to SET the key... they made all paths go through the encryptor, so "unencrypted" was just a key with zeroes.