Non-Disruptive Self-Encrypting-Drive Encryption Key Switching

A method, comprising:

• encrypting, by a system comprising at least one processor, data of a self-encrypting drive with a device encryption key that is stored on the self-encrypting drive, wherein the self-encrypting drive comprises a priority list of encryption ciphers;
• generating, by the system, a key value based on an encryption cipher that is selected from the priority list of encryption ciphers;
• decrypting, by the system, the data of the self-encrypting drive with the device encryption key, to produce read and decrypted data;
• updating, by the system, the device encryption key based on the key value, to produce an updated device encryption key;
• writing, by the system, the read and decrypted data to the self-encrypting drive, wherein the writing comprises encrypting the read and decrypted data with the updated device encryption key;
• and
• processing, by the system, reads and writes for the self-encrypting drive with the updated device encryption key.

A non-transitory computer-readable medium comprising instructions that, in response to execution, cause a system comprising at least one processor to perform operations, comprising:

• generating a key value based on an encryption cipher that is selected from a priority group of encryption ciphers that is stored on a self-encrypting drive that encrypts data with a device encryption key;
• decrypting the data of the self-encrypting drive with the device encryption key, to produce read and decrypted data;
• updating the device encryption key based on the key value, to produce an updated device encryption key;
• writing the read and decrypted data to the self-encrypting drive, wherein the writing comprises encrypting the read and decrypted data with the updated device encryption key;
• and
• processing reads and writes for the self-encrypting drive with the updated device encryption key.