Which is the data wiping process performed

The main data wiping process is British HMG Infosec Standard 5 (HMG IS5), which erases in two steps: 1. A first step writing zeroes to the hard-drives. 2. A second step erasing with random data, verifying the erasure success in each hard-drive sector.

The software only allows to generate a certificate if there has no been any error and the verification succeeded in all disk sectors.

Both steps use open-source standard erasure software: the former shred and the latter badblocks.

Moreover, the user can manually set the erasure options:

  • Erasure type.

    • Normal erasure, which is reasonably secured and fast, as it doesn't perform an exhaustive verification. It uses the open-source shred software.

    • Secure erasure, which ensures all hard-drive sectors are erased. It uses the open-source badblocks software.

  • The number of steps to erase. Add steps to increase security and erasure time.

  • To perform an additional primary step writing zeroes, as it may be required by policy.

Setting custom erasure options will allow to issue an erasure certificate, but the certificate won't reflect the HMG IS5.

Is there an erasure standard you would like? Contact hello@devicetag.io.

Interesting resources:

Last updated