After almost four months of development, version 0.40 of the console utility has been released nwipe, designed for reliable data wiping of disks using various wiping methods and pseudorandom number generators (PRNGs). It can wipe a single disk or multiple disks simultaneously.
nwipe is a fork of the dwipe command from the Darik’s Boot and Nuke (DBAN) project with numerous enhancements and optimizations.
The utility is written in C using the ncurses library for the text interface and is distributed under the GNU GPL 2.0 license.
Change log:
- The most efficient PRNG has been added as the default generator based on real-time hardware performance testing.
- Added AES-256-CTR PRNG using AES-NI instructions on compatible processors to significantly increase data wiping throughput.
- A new wiping method conforming to the BMB21-2019 standard "Technical Requirements for Data Sanitization" from the Chinese Bureau of State Secrets has been introduced.
- Direct input/output with large buffers has been implemented as the default wiping method, reducing the number of write commands and increasing throughput. Wiping execution time in tests has decreased by 5–10%, significantly reducing CPU load.
- Support for host UUID, serial number, and user-defined tags in PDF report headers has been added.
- Device topology display (using the "t" key) on the device selection screen has been enhanced for improved security and usability in systems with multiple controllers.
- The --exclude option has been improved to match devices by their block device's base identifier (major/minor), allowing for secure use of persistent identifiers in /dev/disk/by-id/ and /dev/disk/by-path/. The old string-based matching has been preserved.
- To enhance reliability, internal PRNGs are now initialized using getrandom(2) instead of through a long-lived file descriptor to /dev/urandom.
For SSD disks, it is recommended to always use nwipe / ShredOS in conjunction with the manufacturer's or supplier's own data destruction tools to ensure complete destruction of the information contained on the disk. For more details, see the relevant guide (in English).
Source: linux.org.ru
