Technical information

HGST Ultrastar C15K600 Hard Disk Drive Specification
331
21
Firmware Security
This chapter provides information on HGST encryption-specific HDD firmware and features. It is assumed that the
reader is familiar with the referenced specifications and industry standards.
21.1
Referenced Specifications and Standards
21.1.1
TCG Specifications
This section references 3 separate TCG specifications, which are available on the TCG website:
(http://www.trustedcomputinggroup.org/
):
1. TCG Core Specification, Version 1.0, Revision 0.9
- The TCG Core Specification is the general specification for trusted computing that encompasses all
classes of devices, including storage
2. TCG Storage Interface Interactions Specification (SIIF), Version 1.0, 1/27/2009
- Specifies the interaction between the HDD and the SCSI/ATA protocols
3. TCG Storage Security Subsystem Class (SSC): Enterprise, Version 1.0, rev 1.0, spec dated 1/27/09
- A Security Subsystem Class defines minimum acceptable Core Specification capabilities of a storage
device in a specific class (in our case – enterprise).
- Storage devices in specific classes may have a subset of the capabilities that are defined in the core
specification
4. TCG Storage Security Subsystem Class: Opal Specification, Version 2.00 Final Revision 1.00 (February 24,
2012)
21.1.2
Federal Information Processing Standards (FIPS)
This section references the following Federal Information Processing Standards, published by the US National
Institute of Standards (NIST), which are available on the NIST website (http://www.itl.nist.gov/fipspubs/
):
1. FIPS 197, Advanced Encryption Standard (AES), 2001 November 26.
http://csrc.nist.gov/publications/fips/
fips197/fips-197.pdf
2. FIPS 180-3, Secure Hash Standard (SHS)
http://csrc.nist.gov/publications/fips/fips180-3/fips180-3_final.pdf
3. FIPS 140-2, Security Requirements for Cryptographic Modules – 01 May 25
(Supersedes FIPS PUB 140-1, 1994 January 11)
http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf
21.1.3
National Institute of Standards (NIST)
This section references the following NIST publications, available on the NIST website
(http://www.nist.gov/index.html
)
• [AES] Advanced Encryption Standard, FIPS PUB 197, NIST, 2001, November
• [DSS] Digital Signature Standard, FIPS PUB 186-3, NIST, 2006, March
• [FIPS140] Security Requirements for Cryptographic Modules, FIPS PUB 140-2, NIST, 2002 December
• [HMAC] The Keyed-Hash Message Authentication Code, FIPS PUB 198-1, 2007 June
• [SHA] Secure Hash Standard (SHS), FIPS PUB 180-3, NIST, 2007 June
• [SP800-38E] Recommendation for Block Cipher Modes of Operation: The XTS-AES Mode for
Confidentiality on Storage Devices, SP800-38E, NIST, 2010 January