Catnoo
Notes de paramétrage de postes de travail, et autres vicissitudes ...

Accueil > Matériel divers > Disques > disque - effacement définitif

disque - effacement définitif

mercredi 29 mars 2017, par Lucien-Henry

Outils possibles

Sous Linux :

  • srm
  • wipe
  • shred
  • dd
  • scrub
  • smem
  • sfill
  • sswap

sudo apt-get install secure-delete

Explication d’outils

srm command works similarly to “rm” command, but instead of just deleting the file, it first overwrites it multiple times with some random data and then removes the file permanently. srm erasing magnetic media

shred command destroys files/folder’s contents

sfill checks the specified partition/directories for space marked as free or available, and then uses its algorithm to fill it up with some random data.

sswap command is used to securely wipe your swap partitions.

smem is used to clean the contents of memory

dd is also used for securely wiping out the contents of a hard disk or partitions.

sudo dd if=/dev/random of=/dev/sda
sudo dd if=/dev/zero of=/dev/sda

sudo dd if=/dev/zero of=/dev/sdd1 bs=1M
dd_rescue /dev/zero /dev/sda

Wipe was originally developed to securely erase files from magnetic media. This command line utility writes special patterns to the files repeatedly. It uses fsync() call and/or the O_SYNC bit to force disk access. It uses Gutmann algorithm for repeated writes. You can remove contents of single file, folder or entire hard disk with this command, but whole hard disk format using wipe command will take good amount of time.

sudo aptitude install wipe
wipe /dev/sda1

dban
Blancco software the only data erasure software to be certified in France by the DCSSI (Central Information Systems Security Division under the authority of the French General Secretary for National Defense).
The Blancco erasure client was comprehensively tested to ensure that the product is suitable for effectively erasing drives.
I tried DBAN and as far as I can tell it takes about an hour per gigabyte.
dban

Méthode
Then connect the drive and run the same command again. there should be an additional line in the second run and that is your actual device name. What you see in /media/ is your mountpoint where you access the filesystem.

sudo fdisk -l
sudo umount /media/someLabel
sudo shred /dev/sdd -f -v -z --iterations=10
#sudo shred /dev/sdc1 -uv
sudo dd if=/dev/urandom of=/dev/sdX

Méthode
All disk drives have an erase utility built into the drive controller. This is the only way to do a secure erase on a disk, but it is very slow. See the hdparm man page for details. It is a two step process :

sudo hdparm --security-set-pass PWD /dev/sdb
sudo hdparm --security-erase PWD /dev/sdb

Méthode à employer
On assume que les zones constructeur DCO et HPA ne sont pas concernées ... mais aucune donnée n’a pu être placée par l’utilisateur "lambda".

sudo fdisk -l
dd if=/dev/zero of=/dev/sdX bs=8192 conv=noerror oflag=direct
dd if=/dev/urandom of=/dev/sdX bs=8192 conv=noerror oflag=direct

Liens divers

srm vs wipe vs shred
4 Tools to Securely Delete Files from Linux
shred or dd or any thing ???
Certifications de dban / blancoo
Can Intelligence Agencies Read Overwritten Data ?
Problématique SSD 1
Problématique SSD 1
Les zones constructeurs (HPA/DCO)

SPIP | | Plan du site | Suivre la vie du site RSS 2.0
Habillage visuel © digitalnature sous Licence GPL