The Target of Evaluation (TOE) comprises the following Seagate® Secure NVMe Self-Encrypting Drives (SEDs) provided by Seagate Technology LLC. and developed by Phison Electronics Corporation:
\r\n| \r\n\r\n | \r\n\r\n Model # \r\n | \r\n\r\n Firmware \r\n | \r\n
| \r\n Nytro 5550H 15mm U.2/U.3 Mixed Use \r\n | \r\n\r\n XP800LE70025 \r\nXP1600LE70025 \r\nXP3200LE70025 \r\nXP6400LE70025 \r\nXP12800LE70025 \r\n | \r\n\r\n SE4SA530 \r\nSGEBHG02 \r\n | \r\n
| \r\n Nytro 5350H 15mm U.2/U.3 Read Intensive \r\n | \r\n\r\n XP1920SE70025 \r\nXP3840SE70025 \r\nXP7680SE70025 \r\nXP15360SE70025 \r\n | \r\n\r\n SE4SA530 \r\nSGEBHG02 \r\n | \r\n
| \r\n Nytro 5550M 15mm U.2/U.3 Mixed Use \r\n | \r\n\r\n XP800LE70055 \r\nXP1600LE70055 \r\nXP3200LE70055 \r\nXP6400LE70055 \r\nXP12800LE70055 \r\n | \r\n\r\n SE4SA530 \r\nSGEBHG02 \r\n | \r\n
| \r\n Nytro 5350M 15mm U.2/U.3 Read Intensive \r\n | \r\n\r\n XP1920SE70055 \r\nXP3840SE70055 \r\nXP7680SE70055 \r\nXP15360SE70055 \r\n | \r\n\r\n SE4SA530 \r\nSGEBHG02 \r\n | \r\n
| \r\n Nytro 5550M 7mm U.2/U.3 Mixed Use \r\n | \r\n\r\n XP800LE10025 \r\nXP1600LE10025 \r\nXP3200LE10025 \r\nXP6400LE10025 \r\n | \r\n\r\n SE4SA530 \r\nSGEBHG02 \r\n | \r\n
| \r\n Nytro 5350M 7mm U.2/U.3 Read Intensive \r\n | \r\n\r\n XP1920SE10025 \r\nXP3840SE10025 \r\nXP7680SE10025 \r\n | \r\n\r\n SE4SA530 \r\nSGEBHG02 \r\n | \r\n
The SEDs implement NIST-validated cryptographic algorithms and provide an Instant Secure Erase (ISE) function and full protection of customer data-at-rest with self-encrypting drive locking. They are designed in accordance with Trusted Computing Group (TCG) specifications.
\r\nThe TOE provides the Full Disk Encryption (FDE) Encryption Engine functionality as specified by collaborative Protection Profile for Full Drive Encryption – Encryption Engine. In particular, the TOE provides data encryption, policy enforcement, and key management functions. The TOE provides for the generation, update, protection, and destruction of the Data Encryption Key (DEK) and other intermediate keys under its control.
","evaluation_configuration":"","security_evaluation_summary":"The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme for the collaborative Protection Profile for Full Drive Encryption – Encryption Engine, Version 2.0+Errata 20190201, 1 February 2019. The evaluation methodology used by the evaluation team to conduct the evaluation is Common Methodology for Information Technology Security Evaluation, Version 3.1 release 5, April 2017. The product, when delivered configured as identified in the guidance document, satisfies all the security functional requirements stated in Seagate® Secure NVMe Self-Encrypting Drives Security Target, Version 0.24, 07 March 2024. The evaluation was completed in April 25, 2024. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"Cryptographic Support
\r\nThe TOE implements NIST-validated cryptographic algorithms supporting cryptographic functions. The TOE provides Key Wrapping, Key Derivation, and Border Encryption Value (BEV) Validation.
\r\nUser Data Protection
\r\nThe TOE performs Full Drive Encryption such that the drive contains no plaintext user data. The TOE performs user data encryption by default in the out-of-the-box configuration using AES in XTS mode with 256 bit encryption keys.
\r\nSecurity Management
\r\nThe TOE supports management functions for changing and erasing the DEK, initiating TOE firmware updates, and configuring a password for firmware updates.
\r\nProtection of the TSF
\r\nThe TOE: provides trusted firmware update and update access control functions; protects Key and Key Material; and supports power saving states. The TOE runs a suite of self-tests during initial start-up (on power on).
","features":[{"id":3016,"feature_name":"Cryptographic Hashing"},{"id":3015,"feature_name":"Cryptographic Signature Verification"},{"id":3012,"feature_name":"DRBG"},{"id":3008,"feature_name":"Full Drive Encryption"},{"id":3009,"feature_name":"Key Destruction"},{"id":3017,"feature_name":"Keyed-hash message authentication"},{"id":3014,"feature_name":"Symmetric Key Generation"}]}