ShredOS is a Linux Distro Built to Wipe Your Data
A Linux distro built to help you destroy data. Sounds pretty cool!
Secure disposing of old/unused hard disks and SSDs correctly is essential to prevent the leak of any sensitive information such drives may contain. A simple format or deletion of files does not guarantee data erasure, and you have to go the extra step by implementing specialized tools.
This is even more critical for businesses or government entities handling highly sensitive materials, as a data leak could result in significant financial and reputational damage or, in worst-case scenarios, pose a direct threat to national security.
We will be taking a look at ShredOS, a specialized Linux-based operating system that employs a host of data erasure tools and techniques to ensure that your data drives never end up exposing sensitive information to threat actors.
ShredOS: Overview β
Built as a lightweight operating system, ShredOS's only purpose is to securely erase the contents of disks by making use of nwipe, a disk eraser utility that features a number of erasure methods.
It can be run on both 32-bit and 64-bit systems, with legacy and UEFI boot being supported to ensure a broad scope of coverage across different platforms. Plus, it ships with many additional tools like hdparm, hexedit, smarmontools, nvme, and sg3_utils for further aiding in disk cleanups.
Why Would You Want To Try It?
The short answer is due to its massive arsenal of erasure tools and techniques. Thanks to its nwipe foundation, users can take advantage of 10 different erasure methods that include Fill With Zeros, Fill With Ones, RCMP TSSIT OPS-II, DoD Short, DoD 5220.22M, Gutmann Wipe, PRNG Stream, Verify Zeros, Verify Ones, and HMG IS4 enhanced.
There are five pseudorandom number generators included too, with options like Mersenne Twister, ISAAC, ISAAC-64, Lagged Fibonacci, and XORoshiro-256. There is also a program to verify whether the disk is actually empty before the last pass fills the device with zeroes.
When cleaning a disk, users can manually add the number of wipes ShredOS will carry out with the selected wipe method, and there is the option to run a final blanking pass post-wipe, leaving the disk with zeros (as data).
After everything is done, a PDF report is generated (can be disabled/configured), showing important details of the wipe operation.
You have to keep in mind that erasing hard disk drives is the most optimal use case of ShredOS as there are some limitations that prevent full cleanup of solid-state drives (SSDs). Physically destroying such drives is the best course of action.
Moreover, I was unable to test ShredOS as I did not have any extra drives that I could wipe, but it should perform just fine seeing that it did not misbehave when I ran it inside a virtual machine.
π₯ Get ShredOS
The most recent release of ShredOS can be found on GitHub, where the developers provide IMG and ISO files for writing to a USB drive, CD/DVD, or running it with Ventoy.
The same repository also acts as the documentation if you scroll down on the main page.
Suggested Read π