Learn about Key Per IO (KPIO) encryption technology in this technical presentation exploring a joint initiative between NVM Express and TCG Storage Work Group that established a new KPIO Security Subsystem Class under TCG Opal SSC for NVMe storage devices. Discover how KPIO enables management of numerous encryption keys that can be securely downloaded into NVM subsystems, allowing encryption of user data on a per-command basis rather than traditional Self-Encrypting Drive methods. Explore practical applications including EU-GDPR compliance, data erasure across multiple disks, selective data removal in multi-tenant environments, and encryption of individual sensitive files. Gain insights from Solidigm's SSD Security Architect on implementing this new capability for enhanced data security and management flexibility in modern storage systems.
Overview
Syllabus
How to use an Encryption Key per I/O
Taught by
NVM Express