Intel SSD 520 Series - Encryption Spec Update

[Alan_F_Intel]

As part of ongoing quality assurance, Intel Corporation has discovered a limitation of the AES (Advanced Encryption Standard) encryption feature in the Intel® SSD 520 Series, code-named Cherryville. Intel has published a specification update for the Intel SSD 520 Series product, updating the specification from AES 256-bit encryption to AES 128-bit encryption. Other Intel Solid-State Drives with data encryption, such as Intel SSD 320 Series, also feature AES 128-bit encryption.

The AES feature in the Intel SSD 520 Series, when used in combination with a strong user and master HDD password (if supported, consult your system manufacturer), helps secure the data from access by anyone that does not know the password. AES 128-bit refers to the length of the key used for data encryption. In the Intel SSD 520 Series, the key length is 128 bits. The higher the number of bits in a key, the stronger the level of encryption. Intel believes AES 128-bit encryption meets the data encryption requirements of most customers.

Intel stands behind its products and is committed to product quality, and is working to bring AES 256-bit encryption to future products. If, however, our customers are not satisfied with the 128-bit encryption in an Intel 520 Series SSD purchased before July 1, 2012, they can contact Intel customer support prior to October 1, 2012 to return their product and Intel is offering to provide a full refund of the purchase price. For further information or questions about this specification change, consumers should contact http://www.intel.com/p/en_US/support Intel Customer Support.

For further documentation on the Intel SSD 520 Series, pls see the following documents:

http://www.intel.com/content/www/us/en/solid-state-drives/ssd-520-brief.html http://www.intel.com/content/www/us/en/solid-state-drives/ssd-520-brief.html

http://www.intel.com/content/www/us/en/solid-state-drives/ssd-520-spec-update.html http://www.intel.com/content/www/us/en/solid-state-drives/ssd-520-spec-update.html

http://www.intel.com/content/www/us/en/solid-state-drives/ssd-520-aes-tech-brief.html http://www.intel.com/content/www/us/en/solid-state-drives/ssd-520-aes-tech-brief.html

[JAMES_J_Intel]

Correct. Please contact http://www.intel.com/p/en_US/support Intel Customer Support and they will answer all your questions and help you with the refund.

[idata]

I have two questions about this news.

1)

What does "The AES feature in the Intel SSD 520 Series, when used in combination with a strong user and master HDD password" means?

Does it mean the SSD data is protected by AES only after the user or master HDD parssword set?

People do not set the HDD password if they do not need AES protected.

If that is true, I guess the AES only protect the "password", not directly to the "data".

Otherwise, the SSD needs to encrypted the origional data on the disk.

2)

How could we verify 520 series is AES-128 protected, not AES-256?

[idata]

for question number 1, yes as stated you need the password to complete physical layer security of protection

http://www.intel.eu/content/www/eu/en/solid-state-drives/ssd-520-aes-tech-brief.html http://www.intel.eu/content/www/eu/en/solid-state-drives/ssd-520-aes-tech-brief.html

[idata]

Thanks for those who responded, it just seemed a little vague to me to raise a support request when what I wanted was simply a refund, but thus far all appears to be proceeding as expeced.

phtsai63, Intel have already acknowledged that there is no AES-256 capability on the drive, revised specifications reflect this reduction & vendors selling it have or should have updated their marketing accordingly.

[idata]

This is a very very serious specification update....

Can we have the full Quality Assurance report on this issue so we can evaluate how it will impact us?