iStorage datAshur SD | Encrypted USB flash drive

• 

  FIPS 140-3 Level 3 compliant, tamper proof & evident design

  All data stored on the datAshur SD is encrypted using FIPS PUB 197 validated, AES-XTS 256-bit hardware encryption. All components incorporated within the datAshur SD are completely covered by a layer of super tough epoxy resin, which is virtually impossible to remove without causing permanent damage to the components. The drive is also designed to be tamper-evident making it obvious to the User if it has been pried open and tampered with.

  Wear resistant keypad

  The onboard keypad is covered with a layer of polymer coating that protects the keys and hides key usage to avoid tipping off a potential hacker to commonly used keys.

Rugged, Shockproof & Crushproof

The datAshur SD is extremely rugged, surviving a drop of up to 4m onto a concrete surface.

The drive is also crushproof, withstands the weight of a 2.7 ton vehicle.

No need to worry about spills

The drive’s IP68 accreditation means it will survive being submerged under 1.5m of water for 30 minutes and deemed fit enough to withstand dust, dirt and sand.

• 

  Independent User & Admin PINs

  Which makes it perfect for corporate and government deployment. If the User forgets their PIN, the drive can be unlocked using the Admin PIN. The Administrator can then allow the User to set a new User PIN.

  User PIN enrolment

  The Admin can set a restriction policy for the User PIN. This includes setting the minimum length of the PIN, as well as requiring the input of one or more ‘Special Characters’. The ‘Special Character’ functions as ‘SHIFT + digit’.

Transfer your files in seconds

Superspeed USB 3.2 (Generation 1). Backwards compatible with older USB ports.

Up to - 100MB/s Read speed

Up to 95MB/s Write speed

• 

  One-time User recovery PIN

  Admin configurable, extremely useful in situations where a User has forgotten their PIN, allowing the User to unlock the device and set a new User PIN.

Common Criteria EAL5+ certified secure microprocessor

Offers ultimate security against hackers, detecting and responding to tampering with features such as:

• Dedicated hardware for protection against SPA/DPA/SEMA/DEMA attacks.

• True Random Number Generator (TRNG), with NIST SP800-90B approved analogue noise source.

• Advanced hardware protection against physical attacks, including:

– Active Shield, for detecting any physical intrusion or tampering

– Enhance Protection Object, for protecting the memory against any attempts to introduce perturbations via laser attacks.

– Glitch & Slope Detectors, for monitoring the internal power supply, and protecting the execution against glitch attacks on the power pins.

– Built-in Parity Check mechanism, for detecting any corruption of sensitive states and registers.

– Bare-metal Memory and Bus Encryption, for mitigating the risk of program, code and data integrity violation.

– Environmental Protection Systems, for preventing any execution out of the operating ranges (voltage, frequency and temperature).

• Secure Memory Management & Access Protection, for preventing against code injection attacks.

• In-house state-of-the-art secure firmware, developed with pervasive protection throughout the code, and designed to resist against advanced Side Channel Attacks.

• NIST SP800-90A approved Deterministic Random Bit Generator (DRBG), generating random numbers which are statistically equivalent to a uniformly distributed data stream.

Read only (write protect) - Dual Mode

Both Admin and User can configure the datAshur SD as a read-only (write protect) device. If configured by the Admin, the feature cannot be modified or disabled by the User, allowing the Admin to pre-provision a device with pre-loaded content as a read-only drive for the User.

OS & Host independent - works across any host and embedded systems

No software required; the drive will work on any device with a USB port. USB Type C and Type A connectivity (included)

Bootable feature

Ideal in certain cases where the datAshur SD needs to remain unlocked during USB port re-enumeration, such as during a reboot process or passing the device through a virtual machine. Allows users to install an OS on the datAshur SD and boot directly from it.

Brute force hack defence mechanism

Intelligently programmed to protect against all forms of brute force attacks.

If the User PIN is entered incorrectly 10 consecutive times, the User PIN will be deleted and the drive can only be accessed by either activating the User recovery PIN (if configured) or entering the Admin PIN.

If the Admin PIN is entered incorrectly 10 consecutive times, all data, PINs and the encrypted encryption key will be lost forever.

How secure is it?

• On-device Crypto-chip

Offering 100% real-time military grade AES-XTS 256-bit Hardware Encryption with FIPS PUB 197 validated encryption engine.

• Government validations

FIPS 140-3 Level 3 compliant (pending Q2 2022).

• Key-logger and Brute Force Attack Protection

The datAshur SD is authenticated (unlocked) and all functions are performed using the onboard alphanumeric keypad and with zero software and host involvement, the device is not vulnerable to key-loggers and/or brute force attacks.

• Polymer coated, wear resistant alphanumeric keypad

The datAshur SD keypad is coated with a layer of wear resistant polymer that protects the keys and hides key usage to avoid tipping off a potential hacker to commonly used keys

• Brute force hack defence mechanism

If the User PIN is entered incorrectly 10 consecutive times, the User PIN will be deleted and the drive can only be accessed by either activating the User recovery PIN (if configured) or entering the Admin PIN. If the Admin PIN is entered incorrectly 10 consecutive times, all data, PINs and the encrypted encryption key will be deleted and lost forever.

• Immune to Bad USB

Both the USB Crypto chip and Secure Microprocessor incorporate digitally signed flash lock mechanisms making the datAshur SD immune to Bad USB

• Tamper proof & evident design

All critical components incorporated within the datAshur SD are completely covered by a layer of super tough epoxy resin, which is virtually impossible to remove without causing permanent damage to the components. The drive is also designed to be tamper evident making it obvious if it has been tampered with.

Auto-lock

The datAshur SD automatically locks when unplugged from the host computer or when power to the USB port is turned off. It can also be set to automatically lock when idle following a predetermined length of time.

Self-destruct

Pre-program the datAshur SD with a self-destruct PIN, once entered, the encrypted encryption key and all PINs are deleted rendering the drive unable to then decrypt data stored on iStorage microSD Cards that were encrypted with the same drive.

Drive Reset

Deletes the encrypted encryption key, all PINs and renders all data as lost forever. The device can then be redeployed which randomly generates a new encrypted encryption key, a process that can be repeated as many times as required.

Whitelisting on networks

Configured with a unique VID/PID and internal/external serial number with barcode, allowing easy integration into standard end-point management software (white-listing), to meet internal corporate requirements.

datAshur PRO provides an array of benefits, helping you to:

Protect data against cyber-attacks, data leakage and human error

 

Comply with data security and confidentiality laws, such as GDPR, CCPA, HIPAA and others

 

Avoid hefty fines as a result of non-compliance, as well as additional expenses involved in a breach

 

Keep a secure offline back-up of your data that you can access and quickly restore in the event of a ransomware attack

 

Gain customer trust

 

Promote a positive brand reputation

 

Encourage data protection best practices across the organisation

 

Maintain business continuity

 

Product Diagram:

1. Red LED light (locked)

2. Green LED light (unlocked)

3. Alphanumeric keypad

4. KEY button

5. Blue LED light (when solid, the drive is connected to the computer, when flashing data is being transferred)

Full specification and details can be found in the Product Datasheet PDF file