Government certified to the HIGHEST STANDARDS

iStorage holds the distinction of offering the world’s first flash drive to achieve FIPS certification at the FIPS 140-3 Level 3 standard — the datAshur PRO+C.

You can find our FIPS 140-3 Level 3 Certificate #4918 here

iStorage is also the world’s first and only vendor to attain the following government certifications on the diskAshur PRO² and diskAshur DT² range of PIN authenticated, hardware encrypted, HDDs and SSDs: FIPS 140-2 Level 2/3, NCSC CPA, NLNCSA BSPA and NATO Restricted level.

In addition to the above certifications, iStorage’s most secure and highest capacity encrypted USB flash drive, the datAshur PRO² has been certified to: FIPS certification 140-2 Level 3 and the iStorage datAshur PRO has also been certified to: FIPS 140-2 Level 3, NLNCSA DEP-V and NATO Restricted level.  

The diskAshur PRO³ and diskAshur DT³ are amongst the first encrypted HDDs/SSDs pending the new FIPS 140-3 Level 3 scheme. They also provide the ultimate data protection, having recently passed the CAVP (Cryptographic Algorithm Validation Program) testing as part of the FIPS certification 140-3 Level 3 validation scheme that the products are currently being evaluated against. The issued CAVP certificates are listed below:

• iStorage diskAshur³ cryptographic library- Certificate A5501
• iStorage diskAshur³ EC library- Certificate A5502
• iStorage diskAshur³ RNG library- Certificate A5500
• iStorage Entropy Source Certificate E198

140-3 is the latest version of the U.S. government computer security standard used to validate cryptographic modules

• Level 1: Requires production-grade equipment and externally tested algorithms.
• Level 2: Adds requirements for physical tamper-evidence and role-based authentication.
• Level 3: Adds requirements for physical tamper-resistance and identity-based authentication. There must also be physical or logical separation between the interfaces by which “critical security parameters” enter and leave the module. Private keys can only enter or leave in encrypted form. Level 3 also requires the module to detect and react to out-of-range voltage or temperature (environmental failure protection, or EFP), or alternatively undergo environmental failure testing (EFT).

The Federal Information Processing Standard Publication 140-2 is a US government computer security standard which defines the level of security and to approve cryptographic modules, with:

• Level 1 providing the lowest level of security
• Level 2 showing evidence of tampering features including tamper-evident coatings or seals.
• Level 3 – in addition to the tamper-evident physical security mechanisms required at Security Level 2, Level 3 attempts to prevent the intruder from gaining access to critical security parameters (CSPs)