Cryptographic Erase
A sanitization method that makes encrypted data infeasible to recover by securely eliminating the key material required to decrypt it.
Cryptographic erase does not require every user block to be physically overwritten. Its security depends on the data having been encrypted under an appropriate key lifecycle and on the required key material being eliminated so that decryption is no longer feasible.
A controller message saying that a key was removed is not the whole proof. Key location, backup copies, coverage of the encrypted address space and the device's encryption design all belong to the sanitization argument.
NVMe Sanitize describes the device-level command path, while SSD and NVMe Media Sanitization and Cryptographic Erase covers the forensic and operational boundary.