Secure deletion method
Gutmann’s 35-Pass Method
Gutmann’s method overwrites a file 35 times with a fixed sequence of random data and bit patterns, so that the original data cannot be recovered even with hardware-level analysis of the disk surface. Advanced File Shredder offers it as its most thorough erasure method.
Where the method comes from
The method is based on Peter Gutmann’s paper “Secure Deletion of Data from Magnetic and Solid-State Memory”, section “Erasure of Data stored on Magnetic Media”. The paper shows that traces of earlier data can remain on a magnetic disk after it has been overwritten, and designs a sequence of 35 passes that destroys those traces regardless of how the drive encodes data on its platters.
The 35 passes
Passes 1–4 and 32–35 write random data. Passes 5–31 write the patterns below, each repeated across the whole file. Patterns made of three bytes repeat every three bytes.
| Pass | Data written (binary) | Hex |
|---|---|---|
| 1 | Random data | – |
| 2 | Random data | – |
| 3 | Random data | – |
| 4 | Random data | – |
| 5 | 01010101 01010101 01010101 | 0x55 |
| 6 | 10101010 10101010 10101010 | 0xAA |
| 7 | 10010010 01001001 00100100 | 0x92 0x49 0x24 |
| 8 | 01001001 00100100 10010010 | 0x49 0x24 0x92 |
| 9 | 00100100 10010010 01001001 | 0x24 0x92 0x49 |
| 10 | 00000000 00000000 00000000 | 0x00 |
| 11 | 00010001 00010001 00010001 | 0x11 |
| 12 | 00100010 00100010 00100010 | 0x22 |
| 13 | 00110011 00110011 00110011 | 0x33 |
| 14 | 01000100 01000100 01000100 | 0x44 |
| 15 | 01010101 01010101 01010101 | 0x55 |
| 16 | 01100110 01100110 01100110 | 0x66 |
| 17 | 01110111 01110111 01110111 | 0x77 |
| 18 | 10001000 10001000 10001000 | 0x88 |
| 19 | 10011001 10011001 10011001 | 0x99 |
| 20 | 10101010 10101010 10101010 | 0xAA |
| 21 | 10111011 10111011 10111011 | 0xBB |
| 22 | 11001100 11001100 11001100 | 0xCC |
| 23 | 11011101 11011101 11011101 | 0xDD |
| 24 | 11101110 11101110 11101110 | 0xEE |
| 25 | 11111111 11111111 11111111 | 0xFF |
| 26 | 10010010 01001001 00100100 | 0x92 0x49 0x24 |
| 27 | 01001001 00100100 10010010 | 0x49 0x24 0x92 |
| 28 | 00100100 10010010 01001001 | 0x24 0x92 0x49 |
| 29 | 01101101 10110110 11011011 | 0x6D 0xB6 0xDB |
| 30 | 10110110 11011011 01101101 | 0xB6 0xDB 0x6D |
| 31 | 11011011 01101101 10110110 | 0xDB 0x6D 0xB6 |
| 32 | Random data | – |
| 33 | Random data | – |
| 34 | Random data | – |
| 35 | Random data | – |
Should you use 35 passes?
Gutmann designed the sequence to cover several older drive encoding schemes at once, so many of the passes target encodings a particular drive does not use. For modern hard drives, a few passes of cryptographically strong random data or the 7-pass US DoD 5220.22-M method are much faster and are enough in practice. Use Gutmann’s method when you want the strongest option and erasure time does not matter.
Solid-state drives: SSDs remap writes internally (wear leveling), so no overwrite method can guarantee that every old copy of a block is reached. On an SSD, shred the files, then use the drive free-space wipe with the SSD retrim option, and consider full-disk encryption for sensitive data.
Advanced File Shredder reads the last pass back from the disk to verify that the data was really overwritten, whichever method you choose. It also overwrites NTFS alternate data streams, not just the main file contents.