Method and apparatus to generate zero content over garbage data when encryption parameters are changed

A storage apparatus comprising:

• a storage medium including a plurality of memory locations;
• a write channel configured to write information representing data to the plurality of memory locations;
• a read channel configured to read information representing data from the plurality of memory locations;
• and
• a controller configured to:
• control the write channel to write information to the plurality of memory locations;
• control the read channel to read information representing data from the plurality of memory locations;
• in response to an encryption indication that the write channel wrote information to at least one memory location of the plurality of memory locations using a first encryption/decryption method, generate a flag in a map between the a respective logical block address and a respective physical block address, wherein the flag indicates information at the respective physical block address is invalid in response to an invalidity indication of a change in the encryption/decryption method from the first encryption/decryption method to the second, different encryption/decryption method;
• prevent the read channel from reading the at least one memory location using a second, different encryption/decryption method;
• and
• cause the write channel to write the respective physical block address with zeroes in response to the change in the encryption/decryption method from the first encryption/decryption method to the second, different encryption/decryption method.

A method comprising:

• detecting, by a controller of a storage apparatus, a change in an encryption/decryption scheme used to read and write data to a storage medium;
• in response to detecting the change in encryption/decryption scheme, causing, by the controller, a logical block address to return an indication of being written in zeroes when a physical block address associated with the logical block address had been encrypted using an old encryption/decryption scheme;
• and
• causing, by the controller, a write channel to write zeroes using a new encryption/decryption scheme to the physical block address,
• wherein respective logical block addresses of a plurality of logical block addresses are associated with respective physical block addresses of a plurality of physical block addresses written with an old encryption/decryption scheme,
• wherein the plurality of logical block addresses mapped to the physical block addresses in a map;
• and
• wherein the map comprises at least one flag indicating that information representing data at a respective logical block address is invalid when the information representing data written to the respective physical block address associated with the respective logical block address is written using the old encryption/decryption scheme.