The Target of Evaluation (TOE) is a solid state self-encrypting drive that provides encryption and decryption of stored user data. The TOE provides full drive encryption to protect data at rest on a lost or stolen device. The Encryption Engine (EE) ensures that the data is encrypted using FIPS-validated algorithms. It manages the encryption and decryption of the stored data, policy enforcement, and key management.
","evaluation_configuration":"The evaluated configuration consists of the following models and versions:
\r\n\r\n
| \r\n Drive \r\n | \r\n\r\n Capacity \r\n | \r\n\r\n FIPS HW P/N & Version \r\n | \r\n\r\n CC/NIAP Listed HW P/N & Version \r\n | \r\n\r\n Controller \r\n | \r\n\r\n FW Version \r\n | \r\n
| \r\n DIGISTOR 2.5-Inch SATA SSD \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n DIG-SSD21286-SI \r\n | \r\n\r\n DIG-SSD21286-SI \r\n | \r\n\r\n PS3112-S12 \r\n | \r\n\r\n SCPG13.0 \r\n | \r\n
| \r\n 256GB \r\n | \r\n\r\n DIG-SSD22566-SI \r\n | \r\n\r\n DIG-SSD22566-SI \r\n | \r\n|||
| \r\n 512GB \r\n | \r\n\r\n DIG-SSD25126-SI \r\n | \r\n\r\n DIG-SSD25126-SI \r\n | \r\n|||
| \r\n 1024GB \r\n | \r\n\r\n DIG-SSD210006-SI \r\n | \r\n\r\n DIG-SSD210006-SI \r\n | \r\n|||
| \r\n 2048GB \r\n | \r\n\r\n DIG-SSD220006-SI \r\n | \r\n\r\n DIG-SSD220006-SI \r\n | \r\n|||
| \r\n DIGISTOR M.2 2280 SATA SSD \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n DIG-M21286-SI \r\n | \r\n\r\n DIG-M21286-SI \r\n | \r\n||
| \r\n 256GB \r\n | \r\n\r\n DIG-M22566-SI \r\n | \r\n\r\n DIG-M22566-SI \r\n | \r\n|||
| \r\n 512GB \r\n | \r\n\r\n DIG-M25126-SI \r\n | \r\n\r\n DIG-M25126-SI \r\n | \r\n|||
| \r\n 1024GB \r\n | \r\n\r\n DIG-M210006-SI \r\n | \r\n\r\n DIG-M210006-SI \r\n | \r\n|||
| \r\n 2048GB \r\n | \r\n\r\n DIG-M220006-SI \r\n | \r\n\r\n DIG-M220006-SI \r\n | \r\n|||
| \r\n DIGISTOR M.2 2280 NVMe SSD \r\n | \r\n\r\n 256GB \r\n | \r\n\r\n DIG-M2N22566-UI \r\n | \r\n\r\n DIG-M2N22566-UI \r\n | \r\n\r\n PS5012-E12 \r\n | \r\n\r\n ECPG13.0 \r\n | \r\n
| \r\n 512GB \r\n | \r\n\r\n DIG-M2N25126-UI \r\n | \r\n\r\n DIG-M2N25126-UI \r\n | \r\n|||
| \r\n 1024GB \r\n | \r\n\r\n DIG-M2N210006-UI \r\n | \r\n\r\n DIG-M2N210006-UI \r\n | \r\n|||
| \r\n 2048GB \r\n | \r\n\r\n DIG-M2N220006-UI \r\n | \r\n\r\n DIG-M2N220006-UI \r\n | \r\n|||
| \r\n DIGISTOR 2.5-Inch SATA SSD \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n DIG-SSD21286-SI \r\n | \r\n\r\n DIG-SSD212832 \r\n | \r\n\r\n PS3112-S12 \r\n | \r\n\r\n SCPG13.0 \r\n\r\n | \r\n
| \r\n 256GB \r\n | \r\n\r\n DIG-SSD22566-SI \r\n | \r\n\r\n DIG-SSD225632 \r\n | \r\n|||
| \r\n 512GB \r\n | \r\n\r\n DIG-SSD25126-SI \r\n | \r\n\r\n DIG-SSD251232 \r\n | \r\n|||
| \r\n 1024GB \r\n | \r\n\r\n DIG-SSD210006-SI \r\n | \r\n\r\n DIG-SSD2100032 \r\n | \r\n|||
| \r\n 2048GB \r\n | \r\n\r\n DIG-SSD220006-SI \r\n | \r\n\r\n DIG-SSD2200032 \r\n | \r\n|||
| \r\n DIGISTOR M.2 2280 SATA SSD \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n DIG-M21286-SI \r\n | \r\n\r\n DIG-M212832 \r\n | \r\n||
| \r\n 256GB \r\n | \r\n\r\n DIG-M22566-SI \r\n | \r\n\r\n DIG-M225632 \r\n | \r\n|||
| \r\n 512GB \r\n | \r\n\r\n DIG-M25126-SI \r\n | \r\n\r\n DIG-M251232 \r\n | \r\n|||
| \r\n 1024GB \r\n | \r\n\r\n DIG-M210006-SI \r\n | \r\n\r\n DIG-M2100032 \r\n | \r\n|||
| \r\n 2048GB \r\n | \r\n\r\n DIG-M220006-SI \r\n | \r\n\r\n DIG-M2200032 \r\n | \r\n|||
| \r\n DIGISTOR M.2 2280 NVMe SSD \r\n | \r\n\r\n 256GB \r\n | \r\n\r\n DIG-M2N22566-UI \r\n | \r\n\r\n DIG-M2N225632 \r\n | \r\n\r\n PS5012-E12 \r\n | \r\n\r\n ECPG13.0 \r\n | \r\n
| \r\n 512GB \r\n | \r\n\r\n DIG-M2N25126-UI \r\n | \r\n\r\n DIG-M2N251232 \r\n | \r\n|||
| \r\n 1024GB \r\n | \r\n\r\n DIG-M2N210006-UI \r\n | \r\n\r\n DIG-M2N2100032 \r\n | \r\n|||
| \r\n 2048GB \r\n | \r\n\r\n DIG-M2N220006-UI \r\n | \r\n\r\n DIG-M2N2200032 \r\n | \r\n|||
| \r\n DIGISTOR Ships Removable NVMe SSD \r\n | \r\n\r\n 256GB \r\n | \r\n\r\n DIG-M2N22566-UI \r\n | \r\n\r\n Q80-M2N225632 \r\n | \r\n||
| \r\n 512GB \r\n | \r\n\r\n DIG-M2N25126-UI \r\n | \r\n\r\n Q80-M2N251232 \r\n | \r\n|||
| \r\n 1024GB \r\n | \r\n\r\n DIG-M2N210006-UI \r\n | \r\n\r\n Q80-M2N2100032 \r\n | \r\n|||
| \r\n 2048GB \r\n | \r\n\r\n DIG-M2N220006-UI \r\n | \r\n\r\n Q80-M2N2200032 \r\n | \r\n|||
| \r\n 256GB \r\n | \r\n\r\n DIG-M2N22566-UI \r\n | \r\n\r\n Q80R-M2N225632 \r\n | \r\n|||
| \r\n 512GB \r\n | \r\n\r\n DIG-M2N25126-UI \r\n | \r\n\r\n Q80R-M2N251232 \r\n | \r\n|||
| \r\n 1024GB \r\n | \r\n\r\n DIG-M2N210006-UI \r\n | \r\n\r\n Q80R-M2N2100032 \r\n | \r\n|||
| \r\n 2048GB \r\n | \r\n\r\n DIG-M2N220006-UI \r\n | \r\n\r\n Q80R-M2N2200032 \r\n | \r\n|||
| \r\n DIGISTOR C Series FW M.2 2280 NVMe SSD \r\n | \r\n\r\n 256GB \r\n | \r\n\r\n DIG-M2N22566-AI \r\n | \r\n\r\n DIG-M2N225633 \r\n | \r\n\r\n PS5012-E12 \r\n | \r\n\r\n ECPM13.1 \r\n | \r\n
| \r\n 512GB \r\n | \r\n\r\n DIG-M2N25126-AI \r\n | \r\n\r\n DIG-M2N251233 \r\n | \r\n|||
| \r\n 1024GB \r\n | \r\n\r\n DIG-M2N210006-AI \r\n | \r\n\r\n DIG-M2N2100033 \r\n | \r\n|||
| \r\n 2048GB \r\n | \r\n\r\n DIG-M2N220006-AI \r\n | \r\n\r\n DIG-M2N2200033 \r\n | \r\n|||
| \r\n DIGISTOR Ships Removable C Series FW NVMe SSD \r\n | \r\n\r\n 256GB \r\n | \r\n\r\n DIG-M2N22566-AI \r\n | \r\n\r\n Q80-M2N225633 \r\n | \r\n||
| \r\n 512GB \r\n | \r\n\r\n DIG-M2N25126-AI \r\n | \r\n\r\n Q80-M2N251233 \r\n | \r\n|||
| \r\n 1024GB \r\n | \r\n\r\n DIG-M2N210006-AI \r\n | \r\n\r\n Q80-M2N2100033 \r\n | \r\n|||
| \r\n 2048GB \r\n | \r\n\r\n DIG-M2N220006-AI \r\n | \r\n\r\n Q80-M2N2200033 \r\n | \r\n|||
| \r\n 256GB \r\n | \r\n\r\n DIG-M2N22566-AI \r\n | \r\n\r\n Q80R-M2N225633 \r\n | \r\n|||
| \r\n 512GB \r\n | \r\n\r\n DIG-M2N25126-AI \r\n | \r\n\r\n Q80R-M2N251233 \r\n | \r\n|||
| \r\n 1024GB \r\n | \r\n\r\n DIG-M2N210006-AI \r\n | \r\n\r\n Q80R-M2N2100033 \r\n | \r\n|||
| \r\n 2048GB \r\n | \r\n\r\n DIG-M2N220006-AI \r\n | \r\n\r\n Q80R-M2N2200033 \r\n | \r\n
\r\n
","security_evaluation_summary":"
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The evaluation demonstrated that the product meets the security requirements contained in the Security Target. The criteria against which the DIGISTOR TCG OPAL SSC FIPS SSD Series, firmware version SCPG13.0/ECPG13.0/ECPM13.1 was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1, Revision 5, April 2017. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1, Revision 5, April 2017. The product, when delivered and configured as identified in the DIGISTOR TCG OPAL SSC FIPS SSD Series, firmware version SCPG13.0/ECPG13.0/ECPM13.1 Common Criteria Guide, Version 1.3, January 2023, satisfies all the security functional requirements stated in the DIGISTOR TCG OPAL SSC FIPS SSD Series, firmware version SCPG13.0/ECPG13.0/ECPM13.1 Security Target, Version 1.7, March 2023. The project underwent CCEVS Validator review. The evaluation was completed in March 2023. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report (report number CCEVS-VR-VID11297-2023) prepared by CCEVS.
","environmental_strengths":"The TOE is comprised of the following security features which are described in more detail in the subsections below.
\r\nCryptographic Support
\r\nThe TOE ensures key material used for storage encryption is properly generated and protected from disclosure. It also implements cryptographic key and key material destruction during transitioning to a Compliant power saving state, or when all keys and key material are no longer needed.
\r\nThe TOE performs cryptographic operations as shown in relevant Cryptographic Algorithm Validation Program (CAVP) certificates.
\r\nUser Data Protection
\r\nThe TOE enables encryption and decryption of user data on a SED to protect it from unauthorized disclosure.
\r\nSecurity Management
\r\nThe TOE enables management of its security functions, including:
\r\ni) Changing and erasing the DEK
\r\nii) Updating the TOE firmware
\r\nProtection of the TSF
\r\nThe TOE ensures the authenticity and integrity of firmware updates through digital signatures using RSA 2048 with SHA-256. The TOE supports the D3 compliant power saving state dependent on the OS parameters or user-initiated request.
\r\nThe TOE ensures its integrity and operation by performing self-tests.
","features":[]}