You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: Documentation/storage_sanitization.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ This document outlines requirements for sanitization of storage devices. When a
6
6
7
7
### Media Encryption Key (MEK)
8
8
9
-
The MEK is the key used to ultimately encrypt and decrypt all data on the drive. Is is generated within the device based on an Internal Key and External Key and must never leave the device. The following requirements apply:
9
+
The MEK is the key used to ultimately encrypt and decrypt all data on the drive. It is generated within the device based on an Internal Key and External Key and must never leave the device. The following requirements apply:
10
10
* The MEK must be generated with a cryptographically-strong amount of entropy.
11
11
* An attacker without knowledge of either the Internal Key or External Key, but with knowledge of all other secrets stored at rest within the drive, as well as any external secrets, must be unable to recover the MEK.
0 commit comments