Skip to content

Commit 39edb4f

Browse files
authored
Merge pull request #9 from opencomputeproject/main
update from upstream
2 parents dbc65fe + e2b06b5 commit 39edb4f

3 files changed

Lines changed: 78598 additions & 1 deletion

File tree

Documentation/storage_sanitization.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ This document outlines requirements for sanitization of storage devices. When a
66

77
### Media Encryption Key (MEK)
88

9-
The MEK is the key used to ultimately encrypt and decrypt all data on the drive. Is is generated within the device based on an Internal Key and External Key and must never leave the device. The following requirements apply:
9+
The MEK is the key used to ultimately encrypt and decrypt all data on the drive. It is generated within the device based on an Internal Key and External Key and must never leave the device. The following requirements apply:
1010
* The MEK must be generated with a cryptographically-strong amount of entropy.
1111
* An attacker without knowledge of either the Internal Key or External Key, but with knowledge of all other secrets stored at rest within the drive, as well as any external secrets, must be unable to recover the MEK.
1212

0 commit comments

Comments
 (0)