Cryptographic Erase (CE) – Purge Sanitization Method

Under NIST SP 800-88 Rev.2, Cryptographic Erase is categorized as a purge sanitization method. Instead of overwriting storage locations, this technique sanitizes the cryptographic keys that protect the data. Once these keys are securely destroyed or rendered inaccessible, the remaining encrypted data (ciphertext) on the Information System Media (ISM) can no longer be decrypted and therefore cannot be recovered.

Because only key material is sanitized, CE is significantly faster than overwrite-based techniques and can provide a high level of assurance, provided that strong cryptographic algorithms, secure key management, and proper verification mechanisms are in place.

Encrypted Information System Media

Many modern ISMs employ always-on symmetric-key encryption, meaning that all data written to the media is automatically encrypted. Self-encrypting drives (SEDs) are a common example and typically include built-in sanitization functions. In such environments, Cryptographic Erase is performed by sanitizing the internal encryption keys, thereby preventing any future access to the stored data.

Applicability of Cryptographic Erase

CE is applicable only when sensitive data has always been stored in encrypted form. If data was ever stored in plaintext on the media, then other sanitization techniques, such as overwriting, are required for those areas.

Cryptographic Erase should not be considered sufficient where encryption keys have been escrowed or backed up, unless all external copies of the keys are also securely sanitized. The organization must have confidence that no recoverable copies of the target keys remain.

For information requiring very long-term confidentiality, CE may be considered inappropriate due to the possibility of future cryptographic weaknesses or advances in computing that could enable key recovery.

Sanitization of Cryptographic Keys

Cryptographic Erase involves sanitizing the target cryptographic keys that protect the data. The recommended method is zeroization, which overwrites key material with defined patterns or random values in accordance with standards such as ISO/IEC 19790.

Target keys may include symmetric data-encryption keys, key-wrapping or key-encrypting keys, key-derivation keys, and private keys used for key transport. Keys lower in the cryptographic hierarchy must also be sanitized so that reconstruction of higher-level keys is not possible.

Quality of Cryptographic Implementations

Organizations applying CE should ensure that the cryptographic modules, random number generators, key-wrapping techniques, and zeroization mechanisms used are of sufficient quality and assurance. Validation under recognized standards, such as FIPS 140, and independent assessment of the implementation help establish confidence that sanitized keys cannot be recovered.

Documentation and Traceability

A media sanitization program using Cryptographic Erase should maintain detailed records of each operation. This documentation may include the ISM type, encryption algorithms and modes, key strengths, key management and life-cycle handling, sanitization techniques, interface commands, and error handling procedures.

Although documentation does not affect the technical effectiveness of CE, it is essential for compliance, auditability, and organizational acceptance of the sanitization process.