Encryption Done Right?

Arguably one of the most interesting features of the M500 is its hardware encryption engine. Like many modern drives, the M500 features 256-bit AES encryption engine - all data written to the drive is stored encrypted. By default you don't need to supply a password to access the data, the key is just stored in the controller and everything is encrypted/decrypted on the fly. As with most SSDs with hardware encryption, if you set an ATA password you'll force the generation of a new key and that'll ensure no one gets access to your data.

Unfortunately, most ATA passwords aren't very secure so the AES-256 engine ends up being a bit overkill when used in this way. Here's where the M500 sets itself apart from the pack. The M500's firmware is TCG Opal 2.0 and IEEE-1667 compliant. The TCG Opal support alone lets you leverage third party encryption tools to more securily lock down your system. The combination of these two compliances however makes the M500 compatible with Microsoft's eDrive standard. 

In theory, Windows 8's BitLocker should leverage the M500's hardware encryption engine instead of using a software encryption layer on top of it. The result should be better performance and power consumption. Simply enabling BitLocker didn't seem to work for me (initial encryption time should take a few seconds not 1+ hours if it's truly leveraging the M500's hardware encryption), however according to Crucial it's a matter of making sure both my test platform and the drive support the eDrive spec. There's hardly any good info about this online so I'm still digging on how to make it work. Once I figure it out I'll update this post. Update: It works!

Assuming this does work however, the M500 is likely going to be one of the first drives that's a must have if you need to run with BitLocker enabled on Windows 8. The performance impact of software encryption isn't huge on non-SandForce drives, but minimizing it to effectively nothing would be awesome.

Crucial is also printing a physical security ID on all M500 drives. The PSID is on the M500's information label and is used in the event that you have a password protected drive that you've lost the auth code for. In the past you'd have a brick on your hand. With the M500 and its PSID, you can do a PSID revert using 3rd party software and at least get your drive back. The data will obviously be lost forever but the drive will be in an unlocked and usable state. I'm also waiting to hear back from Crucial on what utilities can successfully do a PSID reset on the M500.

NAND Configurations, Spare Area & DRAM

 

I've got the full lineup of M500s here for review. All of the drives are 2.5" 7mm form factor designs, but they all ship with a spacer you can stick on the drive for use in trays that require a 9.5mm drive (mSATA and M.2/NGFF versions will ship in Q2). The M500 chassis is otherwise a pretty straightforward 8 screw design (4 hold the chassis together, 4 hold the PCB in place). There's a single large thermal pad that covers both the Marvell 9187 controller and DDR3-1600 DRAM, allowing them to use the metal chassis for heat dissipation. The M500 is thermally managed. Should the controller temperature exceed 70C, the firmware will instruct the drive to reduce performance until it returns to normal operating temperature. The drive reduces speed without changing SATA PHY rate, so it should be transparent to the host.

The M500 is Crucial's first SSD to use 20nm NAND, which means this is the first time it has had to deal with error and defect rates at 20nm. For the most part, really clever work at the fabs and on the firmware side keeps the move to 20nm from being a big problem. Performance goes down but endurance stays constant. According to Crucial however, defects are more prevalent at 20nm - especially today when the process, particularly for these new 128Gbit die parts, is still quite new. To deal with potentially higher defect rates, Crucial introduced RAIN (Redundant Array of Independent NAND) support to the M500. We've seen RAIN used on Micron's enterprise SSDs before, but this is the first time we're seeing it used on a consumer drive.

You'll notice that Crucial uses SandForce-like capacity points with the M500. While the m4/C400 had an industry standard ~7% of its NAND set aside as spare area, the M500 roughly doubles that amount. The extra spare area is used exclusively for RAIN and to curb failure due to NAND defects, not to reduce write amplification. Despite the larger amount of spare area, if you want more consistent performance you're going to have to overprovision the M500 as if it were a standard 7% OP drive.

The breakdown of capacities vs. NAND/DRAM on-board is below:

Crucial M500 NAND/DRAM Configuration
  # of NAND Packages # of Die per Package Total NAND on-board DRAM
960GB 16 4 1024GB 1GB
480GB 16 2 512GB 512MB
240GB 16 1 256GB 256MB
120GB 8 1 128GB 256MB

As with any transition to higher density NAND, there's a reduction in the number of individual NAND die and packages in any given configuration. The 9187 controller has 8 NAND channels and can interleave requests on each channel. In general we've seen the best results when 16 or 32 devices are connected to an 8-channel controller. In other words, you can expect a substantial drop off in performance when going to the 120GB M500. Peak performance will come with the 480GB and 960GB drives.

You'll also note the lack of a 60GB offering. Given the density of this NAND, a 60GB drive would only populate four channels - cutting peak sequential performance in half. Crucial felt it would be best not to come out with a 60GB drive at this point, and simply release a version that uses 64Gbit die at some point in the future.

The heavy DRAM requirements point to a flat indirection table, similar to what we saw Intel move to with the S3700. Less than 5MB of user data is ever stored in the M500's DRAM at any given time, the bulk of the DRAM is used to cache the drive's OS, firmware and logical to physical mapping (indirection) table. Relatively flat maps should be easy to defragment, but that's assuming the M500's garbage collection and internal defragmentation routines are optimal.

Introduction & The 128Gbit 20nm NAND Die Performance Consistency
Comments Locked

111 Comments

View All Comments

  • BHSPitMonkey - Tuesday, April 9, 2013 - link

    Correction: "securily" should read "securely" in the section about encryption.
  • iaco - Tuesday, April 9, 2013 - link

    Only 72 TB of writes? That must be a mistake. That's even worse than Samsung's TLC NAND with 1000 write cycles. At 500 GB, 1000 cycles is equal to 500 TB. 3000 cycles for MLC NAND is 1500 TB. Anand, please tell me the spec is wrong, otherwise this drive is not worth the price.
  • Anand Lal Shimpi - Tuesday, April 9, 2013 - link

    That's directly from the M500 datasheet. Note that Intel rates the 335 at 20GB of writes per day for 3 years or 21.9TB but explicitly calls that out as a minimum endurance. I suspect that's what this 72TB rating is as well. Samsung doesn't publish similar numbers for the 840 and everyone comes up with their endurance numbers in different ways so they wouldn't likely be comparable either.

    The NAND is no less reliable than previous 20nm versions, so I have no reason to believe we won't see significantly longer lifespan out of the M500 than just 72TB of writes.

    Take care,
    Anand
  • microlithx - Tuesday, April 9, 2013 - link

    If you look at Micron's data sheets, particularly at the enterprise SATA SSDs, you'll see they report 7 PB. They won't guarantee it but they'll probably reach that if you overprovision accordingly.
  • NotablePerson - Tuesday, April 9, 2013 - link

    What I'm confused about is how the 72TB endurance rating is the same across the board for all four of the SSDs. Shouldn't there be at least SOME variance in their ratings on account of the additional NAND?
  • Kristian Vättö - Tuesday, April 9, 2013 - link

    I don't have the datasheet with me (I'm travelling this week) but that 72TB was not sequential writes. IIRC it was 90% random and 10% sequential (and a couple of different IO sizes too), hence the endurance rating. Anand should be able to confirm the exact methodology but 72TB sounds normal in my ears, some have ~30TB (but 100% 4KB random writes).
  • Solid State Brain - Wednesday, April 10, 2013 - link

    I believe this is their way of telling buyers that they do not officially support or endorse enterprise usage (ie more than 40 GiB/day) on these drives, although their NAND flash memory is specced for way more than just 72 TiB of writes especially on higher capacity models.

    I would expect the 960 GB (1 TiB) drive to unofficially endure for at least 1.5 PiB of writes (at 2x write amplification).
  • Solid State Brain - Wednesday, April 10, 2013 - link

    I meant to say that the 960 GB model (894.07 GiB) has 1 TiB of flash memory installed on its PCB. The "missing" capacity is for overprovisioning purposes.
  • comomolo - Friday, May 3, 2013 - link

    I can't believe they sell a 1TB drive that will day after fully writing it just 72 times.
  • theduckofdeath - Tuesday, April 9, 2013 - link

    This was a bit disappointing, I think. Hopefully a FW update or two will improve the numbers a bit, otherwise it just feels like a step backwards if you're not going for the 1TB model.

Log in

Don't have an account? Sign up now