My Passport Encryption - Have Alendal et al. 2015 weaknesses being solved by WD?

Hi,

I just purchased a My Passport 4TB exernal drive (model WDBYFT0040BOR).

I read on a 2015 paper that some old My Passport drives had security flaws in their encryption procedures (see for example this blog post Western Digital's hard drive encryption is useless. Totally useless • The Register and the 2015 paper “got HW crypto? On the (in)security of a Self-Encrypting Drive series” https://eprint.iacr.org/2015/1002.pdf ).

I would like to know which controller is used in my drive, and if in the meantime those reported weaknesses have been addressed and solved by Western Digital.

Thank you
Duccio

1 Like