RE: wrong key behaviour
> the drive must not return any data if the wrong key is given.
Not being funny, but how does the drive know if the key it is given is wrong? Either
(a) it keeps a copy of the key internally (easy to hack), or
(b) it encrypts a special string and keeps that internally (in flash or on media), or
(c) it must add a crpytographically safe integrity field computed over the plaintext on each sector
to tell if it has been decrypted correctly. This is just like adding authentication, and will add
overhead. It's probably not possible to rely on CRC because that isn't always there (vendor specific
additional sector information).
I presume the only sensible method is (b)?
Colin.