| # Chromium OS Secure Wipe |
| |
| Full disk wipe code for factory and recovery images. |
| |
| Due to indirection performed by flash storage firmware (e.g. for the purpose of |
| wear leveling) there is no constant mapping between the underlying backing store |
| and the storage sectors exposed at the block layer. As a consequence, the only |
| reliable way to delete any piece of data from a flash storage device is to clear |
| the entire backing store. This package implements full disk deletion for SATA, |
| eMCC and NVMe. |
| |
| In principle, this package should provide stronger guarantees than |
| secure_erase_file because the latter only erases the backing store at the file's |
| *current* location (which may be different from past locations) whereas |
| disk-wipe deletes the entire backing store. |
| |
| Caveat emptor: While sanity checks will be put in place, there is no way to |
| guarantee that the deletion interface called by the disk wipe code is correctly |
| implemented by the storage device. |
