SandForce SF-2281: AES-256 encryption does not work

Intel discovered a bug in the SF-2281 controller that cannot be fixed with a firmware update. Every SF-2281 product is affected.
AnandTech - Intel Discovers SandForce SF-2281 Controller Can't Do AES-256 Encryption, Offers Return Program

Intel is starting a recall program for users to get a full refund now or a AES-256 capable drive a few months down the road. No word on if other vendors will follow but I wouldn't be surprised to see the recall expand to other brands. In the meantime SandForce has amended their product pages to state that AES-256 is not currently supported but will be on a future revision of the product.

 

SanDisk's opinion on the subject:

"I apologize for the delay, I have checked up my resources and would like to inform you that we have not come across any such issue with the Sandforce-2281 controller. Hence, if you face any issues with it then we will help you with the troubleshooting or replacement under the warranty cover of the drive."

So they are saying nothing is wrong :-/

 

Its the controller not the firmware so they can`t deny that it affect Sandisk SSDs as well.

How do you test out that it works btw?

 

Ok, so I tried talking to someone who at least has english as their 2nd language and got this:

"Alright, we will definitely forward this information to our headquarters and if the drives are found to have any issues then the further information regarding troubleshooting or replacement would be updated on our website."

 

I've always wondered if drive-based encryption technology ever gets looked into by independent security researchers and academia the way software-based products like Bitlocker and TrueCrypt do.

I guess the fact that SF-2281 has been out for over a year and yet this has gone completely under the radar until now means that "no" is the answer.

 

Wow...

Well, looks like all my encrypted files will be moved over to the 320 then :/. Doesn't seem like Intel is offering returns for the 330 series (only 520, per the article).

 

AES-128 encryption still works, and AES-128 is still an uncracked encryption method. AFAIK the 2281 is/was the first to claim 256 bit encryption support anyway so it isn't like there are other options if you want drive level 256 bit encryption.

But this definitely affects 100% of all 2281 based products so if a company says they are unaffected you know they're just trying to cover it up to save their bottom line. At the same time though I would expect companies might take a week or two to process the news and come up with something meaningful to say beyond "we are not aware of such a problem."

 

Well, most of us have taken a "wait and see" approach with the Intel 520.

However, I have to admit, I didn't think this would be the issue we would encounter for a recall.

 

i knew i shouldn't have gotten a sandforce drive .....doh.....it just came today.....anyone wanna buy a sandisk extreme 240Gb

 

Do they mean aes 256 bit is not supported at the drive hardware level only? Like will software solutions still work at 256 bit?