Security Protocol In Command
August 2016 Commands 209
Note – Advanced Encryption Standard—AES—is a block cipher
encryption algorithm that uses Counter with CBC-MAC (Cipher
Block Chaining–Message Authentication Code), or CCM, as a
mode of encryption that provides both a strong form of privacy
(security) and efficient authentication.
Supported Key Formats Page
A request of Security Protocol of 20h and a Security Protocol Specific 0011h will
return a list of all supported key formats.
DKAD_C Decryption KAD capable when Decryption Mode is Decrypt or Mixed
00b = Not specified (Not supported)
01b = Drive requires a U-KAD provided by the Host for decrypting
operations.
If not provided with SPOUT command Set Data Encryption page then
terminate the command with Check Condition with sense key set to
Illegal Request and the ASC set to Incomplete
Key-Associated Date Set.
10b = Not required (Not supported)
11b = Optional (Not supported)
EEMC_C External encryption mode capabilities
00b = Not supported
RDMC_C Raw decryption mode capable
001b = Raw decryption mode not supported
EAREM Encryption mode recorded
1 = Encryption mode is recorded with each logical block
MSDK_Count Maximum supplemental decryption key count supported 00000000h =
Currently not supported
Security Algorithm Code 80010010h = ENCR_AES_CCM16 (RFC 4309)
Parameter Value
TABLE 3-159 Supported Keys Formats Page
Byte
Bit
76543210
0
thru
1
(MSB)
Page Code (0011h)
(LSB)
2
thru
3
(MSB)
Page Length in bytes (0001h)
(LSB)
4 Supported Key Formats (00h)