Data Destruction: An Overview of Technologies and Standards

1. Hard Disk Drives (HDDs)#

• Operating principle: data is stored on tracks on magnetic platters and read or written by a head.
• Erasure challenge: normal deletion (such as deleting a file in the operating system) removes only file-system index information, such as FAT tables or MFT records. The actual data remains on the tracks. More thorough methods—multiple overwrites, degaussing, or physical destruction—are therefore required for irreversible erasure.
• Suitable methods: multiple data overwrites, degaussing, and physical shredding.

2. Solid-State Drives (SSDs) / NVMe Drives#

• Operating principle: data is stored in NAND flash cells, while a controller and FTL (Flash Translation Layer) manage reads, writes, and wear leveling.
• Erasure challenges
  • FTL impact: traditional overwriting is limited and inefficient on SSDs. The FTL may map writes to new empty blocks, leaving original blocks invalid but not immediately erased until garbage collection runs. This can leave residual data.
  • Wear: SSD flash cells have limited program/erase (P/E) cycles. Heavy writing, such as repeated overwriting, significantly reduces SSD life.
• Suitable methods: prefer controller-based Secure Erase (SE) or Sanitize commands, such as those defined by ATA/NVMe standards. These commands efficiently instruct the controller to reset all storage cells, including reserved space, to factory state—usually through internal discharge. The data is theoretically unrecoverable, with far less wear than repeated overwriting. Physical destruction is also reliable.

1. One Pass#

Write a fixed pattern (such as all 0x00 or all 0xFF) or random data across the entire disk once.

• Characteristic: fast
• Security assessment: low
• Use case: non-sensitive data requiring quick erasure

2. GA/T 1143-2014 (China)#

GA/T 1143-2014, Information Security Technology—Security Technical Requirements for Data Destruction Software Products, was jointly drafted by several Chinese security research, testing, and technology organizations.

3. DoD 5220.22-M (United States)#

A U.S. Department of Defense data-erasure standard from which many other standards were derived.

4、IEEE Std 2883-2022#

At least two overwrites Write a fixed character first (such as 0x00) and its complement second (such as 0xFF).

Verification: randomly sample at least 5% of the addressable space.

• Characteristic: relatively fast
• Security assessment: high
• Use case: sensitive data requiring efficiency, security, and verifiability

Key notes 👇

1. Standard applicability: GA/T 1143-2014 and DoD 5220.22-M were designed primarily for the physical characteristics of HDDs, including magnetic remanence. Multiple overwrites aim to overcome residual magnetism in magnetic media, making recovery with specialized equipment such as magnetic force microscopy (MFM) difficult.
2. SSD/NVMe warning: strongly avoid applying the above multiple-overwrite standards directly to SSDs/NVMe drives:
   • Ineffective: the FTL makes it difficult for overwrites to cover the original physical locations.
   • Shortens drive life: heavy writing rapidly consumes SSD P/E cycles.
   • Inefficient: it is much slower than a dedicated Secure Erase command.

NIST SP 800-88 Purge / ATA/NVMe Secure Erase (SE) / Sanitize#

• Principle: send a specific command to the SSD controller, such as ATA SECURITY ERASE UNIT or NVMe Format NVM with the Sanitize option. The controller resets all NAND flash cells, including invisible over-provisioned space, to an empty state, effectively restoring factory initialization.

• Advantages: efficient and thorough; theoretically clears all data at once, including every physical block managed by the mapping table.

  • Fast: much faster than repeated overwriting.
  • Low wear: minimal impact on SSD life, usually equivalent to one P/E cycle.
  • Standards support: recommended by NIST SP 800-88 Rev. 1 as a Clear and Purge method for solid-state media.

• Requirement: the SSD controller and firmware must correctly support the command. Remove any BIOS/UEFI and drive passwords before execution.

1. AOMEI Partition Assistant#

Supported standards: One Pass, DoD 5220.22-M, Gutmann (35 overwrites), and others.

• Advantage: user-friendly graphical interface (GUI).
• Disadvantage: requires Windows or a WinPE environment; use overwriting cautiously on SSDs.

2、nwipe#

Supported standards: multiple overwrite modes, including DoD and Gutmann.

• Advantage: open-source command-line tool that runs on Linux distributions and Live CD/USB environments. Recent versions (0.35+) can generate PDF erasure certificates for audit or compliance requirements.
• Disadvantage: use overwriting cautiously on SSDs.

3、DiskGenius#

Supported standards: primarily sector filling, similar to One Pass.

• Advantage: provides a GUI.
• Disadvantage: requires Windows and has relatively limited functionality, focused mainly on sector operations; use overwriting cautiously on SSDs.

4. RAID/HBA Hardware Erase#

Principle: use the erasure function built into a modern RAID or HBA (host bus adapter) card. Its processor sends erasure commands—overwriting or Secure Erase—to attached HDDs or SSDs.

• Advantage: independent of the host operating system and usable from BIOS/UEFI or dedicated management software. For SSDs, it may send the more efficient Secure Erase command, depending on hardware support.
• Disadvantage: implementation and reliability depend on the hardware vendor. Confirm the supported erasure method and media type.