Comments on: How long does a 7 Pass US DoD 5220 method take?

Question: How long does a 7 Pass US DoD 5220 method take?

meta.mark — Wed, 06 Feb 2008 20:04:05 -0800

How long will it take to do a 7 pass US DoD 5220 Compliant data wipe on a 120 GB Hard Drive?

I am using TrueCrypt to encrypt my entire drive. I have made the rescue disk and am ready to start encrypting it. But there is an option to use either a 3 or 7 pass US DoD 5220 Compliant data wipe method or the "Gutmann" 35 pass method. They caution that the Gutmann method may take several weeks. But does anyone know how long the 7 pass US DoD 5220 will take? Thanks!

By: caddis

caddis — Wed, 06 Feb 2008 20:24:44 -0800

It is so hard to say because it seems like every app operates at different speeds. I have one which will do two passes on a 60 GB drive in something like 15 to 20 minutes and another which would take an hour and a half for the same level of wiping. I think you are looking at somewhere around four or five hours for what you want, but it could be less if the program is efficient. Unless you have data concerning a major crime on that disk I can see no reason for anything beyond the DoD method, and probably less. Punks who want your personal info probably won't even bother with a drive that has been wiped with a single pass. It's cheaper to find another one that hasn't been. Anyway, it shouldn't be to burdensome to do a DoD wipe. I am pretty sure it will be complete overnight.

By: samsara

samsara — Wed, 06 Feb 2008 20:26:41 -0800

It'll take some time...primarily depending on the RPMs your drive is at (other factors as well). I'd expect about a day or so (dod3 takes us about 6-10 hours for that drive size where I work). Honestly unless you're protecting highly classified top secret material dod3 should be fine. The more passes you do the more sophisticated the equipment needs to be to recover it. At dod 7 you're talking about some expensive efforts.

By: so_

so_ — Wed, 06 Feb 2008 20:26:55 -0800

This page shows a 10 pass KillDisk run at 30 minutes per gigabyte.
http://www.its.niu.edu/its/sh/downloads/wipedisk.shtml#etoc

I ran the single zero pass on a bunch of hard drives of varous sizes in about 10-15 minutes.

By: chrisamiller

chrisamiller — Wed, 06 Feb 2008 20:32:40 -0800

If possible, just run a single pass - 7-fold overwrite is extreme overkill. At even 1 or two passes, it will take forensic-level labs a very long time to get anything off of your drive.

One more data point - for an old 250 GB drive of mine that I wiped (7200 rpm), it took at least 12 hours for a single pass.

By: russm

russm — Wed, 06 Feb 2008 21:22:07 -0800

it depends on how big the drive is and on the drive's maximum sustained write speed. drive size multiplied by sustained write speed multiplied by 7 is your lower bound. be aware that (according to wikipedia, at least)

As of the June 2007 edition of the DSS C&SM, overwriting is no longer acceptable for sanitization of magnetic media; only degaussing or physical destruction is acceptable.

do you actually need to meet DoD 5220.22-M, or is this just a checkbox for a manager's procedural compliance?

By: dixie flatline

dixie flatline — Wed, 06 Feb 2008 23:08:49 -0800

Well, I am stating the obvious, but does this software have some kind of progress meter? Why not just let it run for n minutes and then do some arithmetic? If you're wiping the disk anyway, it's not like you're going to lose anything if you interrupt it and start over. I don't see much reason the progress would be non-linear.

And this is tangential to the question, but security only really makes sense in relation to the likelihood of a particular attack. I would seriously consider whether there would be any reasonable attack that would involve trying to read a wiped disk vs. other, easier ways of obtaining the same information.

By: procrastination

procrastination — Thu, 07 Feb 2008 04:51:20 -0800

I do computer forensics for a living. Anything more than one pass is overkill, unless you think that your data is worth enough for someone to spend millions of dollars over the course of a year to try to recover it - and still have the risk of failing. Do the minimum and don't worry about it. One pass is enough to defeat almost anyone. The government specs are paranoid to an extreme.