Secure deletion method

Gutmann’s 35-Pass Method

Gutmann’s method overwrites a file 35 times with a fixed sequence of random data and bit patterns, so that the original data cannot be recovered even with hardware-level analysis of the disk surface. Advanced File Shredder offers it as its most thorough erasure method.

Passes
35
Source
Peter Gutmann, 1996
Best for
Maximum assurance on magnetic hard drives

Where the method comes from

The method is based on Peter Gutmann’s paper “Secure Deletion of Data from Magnetic and Solid-State Memory”, section “Erasure of Data stored on Magnetic Media”. The paper shows that traces of earlier data can remain on a magnetic disk after it has been overwritten, and designs a sequence of 35 passes that destroys those traces regardless of how the drive encodes data on its platters.

The 35 passes

Passes 1–4 and 32–35 write random data. Passes 5–31 write the patterns below, each repeated across the whole file. Patterns made of three bytes repeat every three bytes.

Gutmann’s overwrite sequence
PassData written (binary)Hex
1Random data–
2Random data–
3Random data–
4Random data–
501010101 01010101 010101010x55
610101010 10101010 101010100xAA
710010010 01001001 001001000x92 0x49 0x24
801001001 00100100 100100100x49 0x24 0x92
900100100 10010010 010010010x24 0x92 0x49
1000000000 00000000 000000000x00
1100010001 00010001 000100010x11
1200100010 00100010 001000100x22
1300110011 00110011 001100110x33
1401000100 01000100 010001000x44
1501010101 01010101 010101010x55
1601100110 01100110 011001100x66
1701110111 01110111 011101110x77
1810001000 10001000 100010000x88
1910011001 10011001 100110010x99
2010101010 10101010 101010100xAA
2110111011 10111011 101110110xBB
2211001100 11001100 110011000xCC
2311011101 11011101 110111010xDD
2411101110 11101110 111011100xEE
2511111111 11111111 111111110xFF
2610010010 01001001 001001000x92 0x49 0x24
2701001001 00100100 100100100x49 0x24 0x92
2800100100 10010010 010010010x24 0x92 0x49
2901101101 10110110 110110110x6D 0xB6 0xDB
3010110110 11011011 011011010xB6 0xDB 0x6D
3111011011 01101101 101101100xDB 0x6D 0xB6
32Random data–
33Random data–
34Random data–
35Random data–

Should you use 35 passes?

Gutmann designed the sequence to cover several older drive encoding schemes at once, so many of the passes target encodings a particular drive does not use. For modern hard drives, a few passes of cryptographically strong random data or the 7-pass US DoD 5220.22-M method are much faster and are enough in practice. Use Gutmann’s method when you want the strongest option and erasure time does not matter.

Solid-state drives: SSDs remap writes internally (wear leveling), so no overwrite method can guarantee that every old copy of a block is reached. On an SSD, shred the files, then use the drive free-space wipe with the SSD retrim option, and consider full-disk encryption for sensitive data.

Advanced File Shredder reads the last pass back from the disk to verify that the data was really overwritten, whichever method you choose. It also overwrites NTFS alternate data streams, not just the main file contents.