https://github.com/amenzhinsky/opal

Opal Library and Utilities
https://github.com/amenzhinsky/opal

Last synced: 2 days ago
JSON representation

Opal Library and Utilities

• Host: GitHub
• URL: https://github.com/amenzhinsky/opal
• Owner: amenzhinsky
• License: mit
• Created: 2019-12-25T19:29:03.000Z (almost 5 years ago)
• Default Branch: master
• Last Pushed: 2020-01-25T17:08:11.000Z (almost 5 years ago)
• Last Synced: 2023-03-01T21:35:49.414Z (over 1 year ago)
• Language: Go
• Size: 42 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# OPAL (WIP)

Command line tools and library for controlling Opal disk drives using Linux IOCTLs with [sedutil](https://github.com/Drive-Trust-Alliance/sedutil) compatibility layer.

## Requirements

Different IOCTLs were added in different kernel versions, the most notable in 4.14 so make sure your kernel is not that old.

`CONFIG_BLK_SED_OPAL` kernel parameter must be enabled:

```bash

zcat /proc/config.gz | grep CONFIG_BLK_SED_OPAL

```

## `sedutil` compatibility

By default `opalctl` uses password hashing just like `sedutil` does. Instead of sending a raw password to a device it's PBKDF2'd first.

If you use a `sedutil` fork ([1](https://github.com/ChubbyAnt/sedutil), [2](https://github.com/ladar/sedutil)) that switched to SHA512 password hashing algorithm use `-sha512` option.

To use raw passwords pass `-raw` option with `-hex` if needed.

## Usage

### Unlock After Suspend

To enable drive unlocking after a suspend of a device previously encrypted with `sedutil`:

```bash

opalctl save  RW

```