Menu
Home
People
Places
Arts
History
Plants & Animals
Science
Life & Culture
Technology
Reference.org
Opal Storage Specification
open-in-new
<h2 id="overview">Overview</h2> <p>The Opal SSC (Security Subsystem Class) is an implementation profile for Storage Devices built to: </p> <ul><li>Protect the confidentiality of stored user data against unauthorized access once it leaves the owner's control (involving a power cycle and subsequent deauthentication).</li> <li>Enable interoperability between multiple SD vendors.<a class="footnote-ref" id="fnref:1" href="#fn:1"><sup>1</sup></a></li></ul> <h2 id="functions">Functions</h2> <p>The Opal SSC encompasses these functions: </p> <ul><li>Security provider support</li> <li>Interface communication protocol</li> <li>Cryptographic features</li> <li>Authentication</li> <li>Table management</li> <li>Access control and personalization</li> <li>Issuance</li> <li>SSC discovery</li></ul> <h2 id="features">Features</h2> <ul><li>Security Protocol 1 support</li> <li>Security Protocol 2 support</li> <li>Communications</li> <li>Protocol stack reset commands</li></ul> <h2 id="security">Security</h2> <p><a href="/facts/Radboud_University_Nijmegen/HzHJcIWX">Radboud University</a> researchers indicated in November 2018 that some hardware-encrypted SSDs, including some Opal implementations, had security vulnerabilities.<a class="footnote-ref" id="fnref:2" href="#fn:2"><sup>2</sup></a> </p> <h2 id="implementers-of-ssc">Implementers of SSC</h2> <h3>Device companies</h3> <ul><li><a href="/facts/Hitachi/KeK38e82">Hitachi</a></li> <li><a href="/facts/Intel_Corporation/SMF0gJJX">Intel Corporation</a><a class="footnote-ref" id="fnref:3" href="#fn:3"><sup>3</sup></a></li> <li><a href="/facts/Kingston_Technology/1EbGh9VU">Kingston Technology</a><a class="footnote-ref" id="fnref:4" href="#fn:4"><sup>4</sup></a></li> <li><a href="/facts/Lenovo/4UNdKGUU">Lenovo</a><a class="footnote-ref" id="fnref:5" href="#fn:5"><sup>5</sup></a></li> <li><a href="/facts/Micron_Technology/M5YhP13C">Micron Technology</a><a class="footnote-ref" id="fnref:6" href="#fn:6"><sup>6</sup></a></li> <li><a href="/facts/Samsung/oNXUwDjn">Samsung</a><a class="footnote-ref" id="fnref:7" href="#fn:7"><sup>7</sup></a></li> <li><a href="/facts/SanDisk/ExLEXvQB">SanDisk</a><a class="footnote-ref" id="fnref:8" href="#fn:8"><sup>8</sup></a></li> <li><a href="/facts/Seagate_Technology/kbkRXJRx">Seagate Technology</a><a class="footnote-ref" id="fnref:9" href="#fn:9"><sup>9</sup></a><a class="footnote-ref" id="fnref:10" href="#fn:10"><sup>10</sup></a> as "Seagate Secure"</li> <li><a href="/facts/Toshiba/QHRaw8Tr">Toshiba</a><a class="footnote-ref" id="fnref:11" href="#fn:11"><sup>11</sup></a><a class="footnote-ref" id="fnref:12" href="#fn:12"><sup>12</sup></a><a class="footnote-ref" id="fnref:13" href="#fn:13"><sup>13</sup></a></li></ul> <h3>Storage controller companies</h3> <ul><li><a href="/facts/Marvell_Technology_Group/IPlIhlj5">Marvell</a><a class="footnote-ref" id="fnref:14" href="#fn:14"><sup>14</sup></a><a class="footnote-ref" id="fnref:15" href="#fn:15"><sup>15</sup></a></li> <li><a href="/facts/LSI_Corporation/6efkIzMM">Avago/LSI SandForce flash controllers</a><a class="footnote-ref" id="fnref:16" href="#fn:16"><sup>16</sup></a></li></ul> <h3>Software companies</h3> <ul><li><a href="/facts/Absolute_Software/13W534XC">Absolute Software</a><a class="footnote-ref" id="fnref:17" href="#fn:17"><sup>17</sup></a></li> <li><a href="/facts/Check_Point_Software_Technologies/mAaxLsBc">Check Point Software Technologies</a><a class="footnote-ref" id="fnref:18" href="#fn:18"><sup>18</sup></a></li> <li>Dell Data Protection<a class="footnote-ref" id="fnref:19" href="#fn:19"><sup>19</sup></a></li> <li>Cryptomill<a class="footnote-ref" id="fnref:20" href="#fn:20"><sup>20</sup></a></li> <li><a href="/facts/McAfee/yIytBc4w">McAfee</a><a class="footnote-ref" id="fnref:21" href="#fn:21"><sup>21</sup></a></li> <li>Secude <a class="footnote-ref" id="fnref:22" href="#fn:22"><sup>22</sup></a></li> <li>Softex Incorporated<a class="footnote-ref" id="fnref:23" href="#fn:23"><sup>23</sup></a></li> <li><a href="/facts/Sophos/6oHmdqg0">Sophos</a><a class="footnote-ref" id="fnref:24" href="#fn:24"><sup>24</sup></a></li> <li><a href="/facts/NortonLifeLock/uWvBqako">Symantec</a><a class="footnote-ref" id="fnref:25" href="#fn:25"><sup>25</sup></a> (Symantec supports OPAL drives, but does not support hardware-based encryption.)<a class="footnote-ref" id="fnref:26" href="#fn:26"><sup>26</sup></a></li> <li><a href="/facts/Trend_Micro/ngD55nSj">Trend Micro</a><a class="footnote-ref" id="fnref:27" href="#fn:27"><sup>27</sup></a></li> <li>WinMagic<a class="footnote-ref" id="fnref:28" href="#fn:28"><sup>28</sup></a></li> <li>OpalLock<a class="footnote-ref" id="fnref:29" href="#fn:29"><sup>29</sup></a>(OpalLock support Self-Encrypt-Drive capable SSD and HDD. Develop by Fidelity Height LLC)</li></ul> <h3>Computer OEMs</h3> <ul><li><a href="/facts/Dell/wLlYNTMM">Dell</a><a class="footnote-ref" id="fnref:30" href="#fn:30"><sup>30</sup></a></li> <li><a href="/facts/Hewlett-Packard/abuNSYNu">HP</a><a class="footnote-ref" id="fnref:31" href="#fn:31"><sup>31</sup></a></li> <li><a href="/facts/Lenovo/4UNdKGUU">Lenovo</a><a class="footnote-ref" id="fnref:32" href="#fn:32"><sup>32</sup></a></li> <li><a href="/facts/Fujitsu/6e5gvNSa">Fujitsu</a><a class="footnote-ref" id="fnref:33" href="#fn:33"><sup>33</sup></a></li> <li><a href="/facts/Panasonic/TqkBQmgj">Panasonic</a><a class="footnote-ref" id="fnref:34" href="#fn:34"><sup>34</sup></a></li> <li><a href="/facts/Getac/z1c3U8Wd">Getac</a><a class="footnote-ref" id="fnref:35" href="#fn:35"><sup>35</sup></a></li></ul> <h2 id="external-links">External links</h2> <ul><li><a href="http://www.trustedcomputinggroup.org/resources/storage_work_group_storage_security_subsystem_class_opal">Storage Work Group Storage Security Subsystem Class: Opal</a></li></ul> <h2 id="references">References</h2> <ol> <li id="fn:1"><p>TCG Storage Security Subsystem Class: Opal Specification Version 2.01 Revision 1.00. Trusted Computing Group, Incorporated. 05 August 2015. Retrieved 2019-11-22. <a href="https://trustedcomputinggroup.org/wp-content/uploads/TCG_Storage-Opal_SSC_v2.01_rev1.00.pdf#page=12" target="_blank">https://trustedcomputinggroup.org/wp-content/uploads/TCG_Storage-Opal_SSC_v2.01_rev1.00.pdf#page=12</a> <a href="#fnref:1" class="footnote-back-ref">↩</a></p></li> <li id="fn:2"><p>Meijer, Carlo; van Gastel, Bernard (19–23 May 2019). Self-Encrypting Deception: Weaknesses in the Encryption of Solid State Drives. 2019 IEEE Symposium on Security and Privacy (SP). San Francisco, CA, USA: IEEE. pp. 72–87. doi:10.1109/SP.2019.00088. hdl:2066/207837. ISBN 978-1-5386-6660-9. ISSN 2375-1207. <a href="978-1-5386-6660-9" target="_blank">978-1-5386-6660-9</a> <a href="#fnref:2" class="footnote-back-ref">↩</a></p></li> <li id="fn:3"><p>"Intel® SSD Pro 1500 Series (M.2): Specs". Intel.com. Retrieved 2017-05-03. <a href="http://www.intel.com/content/www/us/en/solid-state-drives/ssd-pro-1500-series-m2-specification.html" target="_blank">http://www.intel.com/content/www/us/en/solid-state-drives/ssd-pro-1500-series-m2-specification.html</a> <a href="#fnref:3" class="footnote-back-ref">↩</a></p></li> <li id="fn:4"><p>"Solid State Hard Drives for Business". Kingston.com. 2017-03-05. Retrieved 2017-05-03. <a href="http://www.kingston.com/us/ssd/vplus/#skc300s3" target="_blank">http://www.kingston.com/us/ssd/vplus/#skc300s3</a> <a href="#fnref:4" class="footnote-back-ref">↩</a></p></li> <li id="fn:5"><p>Clain Anderson (2011-02-16). "Opal – More than a Semi-Precious Stone | Lenovo". Blog.lenovo.com. Retrieved 2017-05-03. <a href="http://blog.lenovo.com/en/blog/opal-more-than-a-semi-precious-stone" target="_blank">http://blog.lenovo.com/en/blog/opal-more-than-a-semi-precious-stone</a> <a href="#fnref:5" class="footnote-back-ref">↩</a></p></li> <li id="fn:6"><p>"Micron Technology, Inc. - Full SSD Part Catalog". Micron.com. Retrieved 2017-05-03. <a href="http://micron.com/products/solid-state-storage/client-ssd" target="_blank">http://micron.com/products/solid-state-storage/client-ssd</a> <a href="#fnref:6" class="footnote-back-ref">↩</a></p></li> <li id="fn:7"><p>"Samsung V-NAND SSD". Samsung.com. Retrieved 2017-05-03. <a href="http://www.samsung.com/global/business/semiconductor/minisite/SSD/global/html/about/whitepaper06.html" target="_blank">http://www.samsung.com/global/business/semiconductor/minisite/SSD/global/html/about/whitepaper06.html</a> <a href="#fnref:7" class="footnote-back-ref">↩</a></p></li> <li id="fn:8"><p>"SanDisk's X300s Solid State Drive". Archived from the original on 2014-08-03. Retrieved 2014-08-02. <a href="https://web.archive.org/web/20140803081737/http://www.sandisk.com/products/ssd/sata/x300s" target="_blank">https://web.archive.org/web/20140803081737/http://www.sandisk.com/products/ssd/sata/x300s</a> <a href="#fnref:8" class="footnote-back-ref">↩</a></p></li> <li id="fn:9"><p>"News". Seagate. Retrieved 2017-05-03. <a href="http://www.seagate.com/ww/v/index.jsp?locale=en-US&name=momentus-FDE-self-encrypting,FIPS-seagate-pr&vgnextoid=f0ea53279dc0b210VgnVCM1000001a48090aRCRD" target="_blank">http://www.seagate.com/ww/v/index.jsp?locale=en-US&name=momentus-FDE-self-encrypting,FIPS-seagate-pr&vgnextoid=f0ea53279dc0b210VgnVCM1000001a48090aRCRD</a> <a href="#fnref:9" class="footnote-back-ref">↩</a></p></li> <li id="fn:10"><p>"Full Disk Encryption Software, Hard Drives, SSDs & Whole Disk". WinMagic. Retrieved 2017-05-03. <a href="http://www.winmagic.com/solutions/self-encrypting-hard-drives" target="_blank">http://www.winmagic.com/solutions/self-encrypting-hard-drives</a> <a href="#fnref:10" class="footnote-back-ref">↩</a></p></li> <li id="fn:11"><p>"Fujitsu Develops HDD Security Technology based on Opal SSC Standards - Fujitsu Global". Fujitsu.com. Retrieved 2017-05-03. <a href="http://www.fujitsu.com/global/news/pr/archives/month/2009/20090128-01.html" target="_blank">http://www.fujitsu.com/global/news/pr/archives/month/2009/20090128-01.html</a> <a href="#fnref:11" class="footnote-back-ref">↩</a></p></li> <li id="fn:12"><p>"Specialty | TOSHIBA Storage & Electronic Devices Solutions Company | Americas". Storage.toshiba.com. Retrieved 2017-05-03. <a href="http://storage.toshiba.com/storagesolutions/specialty-products/mkxx61gsyg-series" target="_blank">http://storage.toshiba.com/storagesolutions/specialty-products/mkxx61gsyg-series</a> <a href="#fnref:12" class="footnote-back-ref">↩</a></p></li> <li id="fn:13"><p>"Specialty | TOSHIBA Storage & Electronic Devices Solutions Company | Americas". Storage.toshiba.com. Retrieved 2017-05-03. <a href="http://storage.toshiba.com/storagesolutions/specialty-products/mkxx61gsyd-series" target="_blank">http://storage.toshiba.com/storagesolutions/specialty-products/mkxx61gsyd-series</a> <a href="#fnref:13" class="footnote-back-ref">↩</a></p></li> <li id="fn:14"><p>"Marvell Technology Group Ltd". Marvell.com. Retrieved 2017-05-03. <a href="http://www.marvell.com" target="_blank">http://www.marvell.com</a> <a href="#fnref:14" class="footnote-back-ref">↩</a></p></li> <li id="fn:15"><p>"Marvell, Kingston Collaboration Proves Positive with Over Six Million SSD Units Shipped". Kingston Technology. Retrieved 30 December 2021. <a href="https://www.kingston.com/spain/es/company/press/article/49507" target="_blank">https://www.kingston.com/spain/es/company/press/article/49507</a> <a href="#fnref:15" class="footnote-back-ref">↩</a></p></li> <li id="fn:16"><p>"SandForce Flash Storage Processor SSD Controllers". Archived from the original on 2013-08-08. Retrieved 2013-08-01. <a href="https://web.archive.org/web/20130808084202/http://www.lsi.com/products/storagecomponents/Pages/sandforce_flash_storage_processors.aspx" target="_blank">https://web.archive.org/web/20130808084202/http://www.lsi.com/products/storagecomponents/Pages/sandforce_flash_storage_processors.aspx</a> <a href="#fnref:16" class="footnote-back-ref">↩</a></p></li> <li id="fn:17"><p>"Self-Healing Endpoint Security". Absolute. Retrieved 2017-05-03. <a href="http://www.absolute.com" target="_blank">http://www.absolute.com</a> <a href="#fnref:17" class="footnote-back-ref">↩</a></p></li> <li id="fn:18"><p>"Industry-Leading Cyber Security Keeps Networks, Data Centers, Mobile Devices & Endpoints One Step Ahead | Check Point Software". Checkpoint.com. Retrieved 2017-05-03. <a href="http://www.checkpoint.com" target="_blank">http://www.checkpoint.com</a> <a href="#fnref:18" class="footnote-back-ref">↩</a></p></li> <li id="fn:19"><p>"Data Security | Dell United States". Dell.com. 2017-04-26. Retrieved 2017-05-03. <a href="http://www.dell.com/encryption" target="_blank">http://www.dell.com/encryption</a> <a href="#fnref:19" class="footnote-back-ref">↩</a></p></li> <li id="fn:20"><p>"CryptoMill :: Products & services". Archived from the original on 2012-02-09. Retrieved 2012-01-14. <a href="https://web.archive.org/web/20120209044329/http://www.cryptomill.com/products/default.php" target="_blank">https://web.archive.org/web/20120209044329/http://www.cryptomill.com/products/default.php</a> <a href="#fnref:20" class="footnote-back-ref">↩</a></p></li> <li id="fn:21"><p>"McAfee Corporate KB - KB75045". Kc.mcafee.com. Retrieved 2017-05-03. <a href="https://kc.mcafee.com/corporate/index?page=content&id=KB75045" target="_blank">https://kc.mcafee.com/corporate/index?page=content&id=KB75045</a> <a href="#fnref:21" class="footnote-back-ref">↩</a></p></li> <li id="fn:22"><p>"FinallySecure™ Enterprise - SECUDE AG". Archived from the original on 2012-01-26. Retrieved 2012-01-14. <a href="https://web.archive.org/web/20120126034405/http://www.secude.com/products/finallysecuretrade-enterprise/" target="_blank">https://web.archive.org/web/20120126034405/http://www.secude.com/products/finallysecuretrade-enterprise/</a> <a href="#fnref:22" class="footnote-back-ref">↩</a></p></li> <li id="fn:23"><p>"Comprehensive Data Encryption and Protection Solutions - SecureDrive". Softexinc.com. 2014-06-20. Retrieved 2017-05-03. <a href="http://www.softexinc.com/securedrive/overview" target="_blank">http://www.softexinc.com/securedrive/overview</a> <a href="#fnref:23" class="footnote-back-ref">↩</a></p></li> <li id="fn:24"><p>"Full Disk Encryption | Always-On, Multi-Platform Enterprise Encryption Synchronizes Devices, Hard Drives, Removable Media, BitLocker, and Cloud Storage Protection in Real-Time". Sophos.com. Retrieved 2017-05-03. <a href="https://www.sophos.com/en-us/products/safeguard-encryption.aspx" target="_blank">https://www.sophos.com/en-us/products/safeguard-encryption.aspx</a> <a href="#fnref:24" class="footnote-back-ref">↩</a></p></li> <li id="fn:25"><p>"Endpoint Encryption Powered by PGP Technology". Symantec.com. Retrieved 2017-05-03. <a href="https://www.broadcom.com/products/cybersecurity" target="_blank">https://www.broadcom.com/products/cybersecurity</a> <a href="#fnref:25" class="footnote-back-ref">↩</a></p></li> <li id="fn:26"><p>"Archived copy". Archived from the original on 2017-09-25. Retrieved 2016-02-03.{{cite web}}: CS1 maint: archived copy as title (link) <a href="https://web.archive.org/web/20170925230747/https://support.symantec.com/en_US/article.tech217784.html" target="_blank">https://web.archive.org/web/20170925230747/https://support.symantec.com/en_US/article.tech217784.html</a> <a href="#fnref:26" class="footnote-back-ref">↩</a></p></li> <li id="fn:27"><p>"Data Protection – Endpoint and Gateway Suites | Trend Micro". Us.trendmicro.com. Retrieved 2017-05-03. <a href="http://us.trendmicro.com/us/products/enterprise/endpoint-encryption/index.html" target="_blank">http://us.trendmicro.com/us/products/enterprise/endpoint-encryption/index.html</a> <a href="#fnref:27" class="footnote-back-ref">↩</a></p></li> <li id="fn:28"><p>"Full Disk Encryption Software, Hard Drives, SSDs & Whole Disk". WinMagic. Retrieved 2017-05-03. <a href="http://www.winmagic.com/products" target="_blank">http://www.winmagic.com/products</a> <a href="#fnref:28" class="footnote-back-ref">↩</a></p></li> <li id="fn:29"><p>"Software management of TCG self-encrypting drives". Fidelity Height LLC. <a href="https://fidelityheight.com" target="_blank">https://fidelityheight.com</a> <a href="#fnref:29" class="footnote-back-ref">↩</a></p></li> <li id="fn:30"><p>"Dell Official Site | Dell United States". Dell.com. 2017-04-26. Retrieved 2017-05-03. <a href="http://www.dell.com" target="_blank">http://www.dell.com</a> <a href="#fnref:30" class="footnote-back-ref">↩</a></p></li> <li id="fn:31"><p>"Laptop Computers, Desktops, Printers and more | HP® Official Site". Hp.com. Retrieved 2017-05-03. <a href="http://www.hp.com" target="_blank">http://www.hp.com</a> <a href="#fnref:31" class="footnote-back-ref">↩</a></p></li> <li id="fn:32"><p>[1] Archived 2008-08-28 at the Wayback Machine <a href="http://www.lenovo.com" target="_blank">http://www.lenovo.com</a> <a href="#fnref:32" class="footnote-back-ref">↩</a></p></li> <li id="fn:33"><p>"Fujitsu News Updates - Fujitsu UK". Fujitsu.com. Retrieved 2017-05-03. <a href="http://www.fujitsu.com/emea/news/pr/fel-de_20090128.html" target="_blank">http://www.fujitsu.com/emea/news/pr/fel-de_20090128.html</a> <a href="#fnref:33" class="footnote-back-ref">↩</a></p></li> <li id="fn:34"><p>"Panasonic Toughpad | Rugged Tablet | Toughpad". Panasonic.com. 2015-10-27. Retrieved 2017-05-03. <a href="http://www.Panasonic.com/toughbook" target="_blank">http://www.Panasonic.com/toughbook</a> <a href="#fnref:34" class="footnote-back-ref">↩</a></p></li> <li id="fn:35"><p>"Rugged Notebooks, Tablets, Handhelds and Laptops from". Getac.com. Retrieved 2017-05-03. <a href="http://www.Getac.com/" target="_blank">http://www.Getac.com/</a> <a href="#fnref:35" class="footnote-back-ref">↩</a></p></li> </ol>