Secondary key allocation to storage drive failure domains

Failure-domain-specific cryptographic keys for use in control of access to data within failure domains of a storage drive. A unique failure domain-specific cryptographic key may be associated with each of a plurality of failure domains in a storage drive. The failure domains may correspond to any portion of the storage media of a drive that is susceptible to failure while leaving other portions of the storage drive functional. In turn, upon detection of a condition associated with a failure (e.g., an actual or predicted failure) of a failure domain, the associated failure domain-specific cryptographic key may be deleted to preclude further access to data in the failed failure domain. Deletion of the failure domain-specific cryptographic key may be before or after data in the failed failure domain is rebuilt in another portion of a storage drive that is functional.