1. A method of storing data, comprising: receiving, at a first interface, data to be stored and at least one attribute, the at least one attribute comprising a write command; associating the data to be stored with the at least one attribute, wherein the at least one attribute specifies a classification level of the data to be stored; transmitting the data to be stored and the at least one attribute to a second interface; encrypting, at the second interface, the data to be stored based on the at least one attribute and transmitting the encrypted data to a third interface, wherein the second interface differently encrypts data associated with different classification levels; bypassing the encrypting step for the at least one attribute and transmitting the at least one attribute to the third interface; associating, at the third interface, the encrypted data with the at least one attribute and determining a location on a storage medium for storing the encrypted data based on the at least one attribute and based on a mapping between a plurality of partitions of the storage medium and the second interface, the mapping provided by a partition table contained in a master boot record of the storage medium; transmitting the encrypted data to the storage medium, wherein the storage medium includes a plurality of locations, each location associated with a different classification level; confirming the at least one attribute is associated with a valid command and a valid storage medium location by filtering, wherein the filtering determines, based on the at least one attribute, that the valid command comprises one of a plurality of pre-determined actions and that the valid storage medium location comprises a range of sector addresses within a partition allocation associated with the classification level of the data to be stored, and wherein the filtering prevents any extraneous data from being transmitted to the storage medium unencrypted, wherein the extraneous data includes data that is not at least one of encrypted data, a valid command, and an attribute; and encrypting a critical boot sector and allowing a security domain to determine a structure of an associated partition of the critical boot sector with a security key associated with the security domain but not allowing raw access to the critical boot sector.