The TOE is a self-encrypting drive that provides encryption and decryption of stored user data.
","evaluation_configuration":"| \r\n Drive \r\n | \r\n\r\n Hardware (HW) P/N \r\n | \r\n\r\n Controller \r\n | \r\n\r\n FW Version \r\n | \r\n
| \r\n 2.5-inch SATA NAND Flash SSD \r\n | \r\n\r\n HF3-25DA128GB-A8P \r\n | \r\n\r\n PS3112-S12 \r\n | \r\n\r\n SCPU13.0 \r\n | \r\n
| \r\n HF3-25DA256GB-A8P \r\n | \r\n|||
| \r\n HF3-25DA512GB-A8P \r\n | \r\n|||
| \r\n HF3-25DA001TB-A8P \r\n | \r\n|||
| \r\n HF3-25DA002TB-A8P \r\n | \r\n|||
| \r\n HF3-25DA256GB-B8P \r\n | \r\n\r\n PS3112-S12 \r\n | \r\n\r\n SCQU15.0 \r\n | \r\n|
| \r\n HF3-25DA512GB-B8P \r\n | \r\n|||
| \r\n HF3-25DA001TB-B8P \r\n | \r\n|||
| \r\n HF3-25DA002TB-B8P \r\n | \r\n|||
| \r\n HF3-25DA004TB-B8P \r\n | \r\n|||
| \r\n M.2 2280 SATA NAND Flash SSD \r\n | \r\n\r\n M2S-80DA128GB-A8P \r\n | \r\n\r\n PS3112-S12 \r\n | \r\n\r\n SCPU13.0 \r\n | \r\n
| \r\n M2S-80DA256GB-A8P \r\n | \r\n|||
| \r\n M2S-80DA512GB-A8P \r\n | \r\n|||
| \r\n M2S-80DA001TB-A8P \r\n | \r\n|||
| \r\n M2S-80DA002TB-A8P \r\n | \r\n|||
| \r\n M2S-80DA256GB-B8P \r\n | \r\n\r\n PS3112-S12 \r\n | \r\n\r\n SCQU15.0 \r\n | \r\n|
| \r\n M2S-80DA512GB-B8P \r\n | \r\n|||
| \r\n M2S-80DA001TB-B8P \r\n | \r\n|||
| \r\n M2S-80DA002TB-B8P \r\n | \r\n|||
| \r\n M.2 2280 NVMe NAND Flash SSD \r\n | \r\n\r\n M2P-80DA256GB-A8P \r\n | \r\n\r\n PS5012-E12 \r\n | \r\n\r\n ECPU13.0 \r\n | \r\n
| \r\n M2P-80DA512GB-A8P \r\n | \r\n|||
| \r\n M2P-80DA001TB-A8P \r\n | \r\n|||
| \r\n M2P-80DA002TB-A8P \r\n | \r\n|||
| \r\n M2P-80DA256GB-BEP \r\n | \r\n\r\n PS5012-E12 \r\n | \r\n\r\n ECQU15.0 \r\n | \r\n|
| \r\n M2P-80DA512GB-BEP \r\n | \r\n|||
| \r\n M2P-80DA001TB-BEP \r\n | \r\n|||
| \r\n M2P-80DA002TB-BEP \r\n | \r\n
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The evaluation demonstrated that the product meets the security requirements contained in the Security Target. The criteria against which the UD info SSD Drives, Firmware Versions: SCPU13.0/ECPU13.0/SCQU15.0/ECQU15.0 was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1, Revision 5. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1, Revision 5. The product, when configured as identified in the UD info SSD Drives, Firmware Versions: SCPU13.0/ECPU13.0/SCQU15.0/ECQU15.0 Common Criteria Guide, Version 1.1, January 2025, satisfies all of the security functional requirements stated in the UD info SSD Drives, Firmware Versions: SCPU13.0/ECPU13.0/SCQU15.0/ECQU15.0 Security Target, Version 1.2, January 2025. The project underwent CCEVS Validator review. The evaluation was completed in February 2025. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report (report number CCEVS-VR-11469-2025) prepared by CCEVS.
","environmental_strengths":"The TOE enables encryption and decryption of user data on a SED to protect it from unauthorized disclosure.
\r\nThe TOE ensures key material used for storage encryption is properly generated and protected from disclosure. It also implements cryptographic key and key material destruction during transitioning to a Compliant power saving state, or when all keys and key material are no longer needed.
\r\nThe TOE enables management of its security functions, including:
\r\ni) Changing and erasing the Data Encryption Key (DEK)
\r\nii) Updating the TOE firmware
\r\nThe TOE ensures the authenticity and integrity of firmware updates through digital signatures using Rivest Shamir Adleman Algorithm (RSA) 2048 with Secure Hash Algorithm (SHA)-256.
\r\nThe TOE ensures its integrity and operation by performing self-tests.
\r\nThe TOE performs cryptographic operations as shown in relevant Cryptographic Algorithm Validation Program (CAVP) certificates.
","features":[{"id":2600,"feature_name":"Cryptographic Hashing"},{"id":2599,"feature_name":"Cryptographic Signature Verification"},{"id":2576,"feature_name":"DRBG"},{"id":2574,"feature_name":"Full Drive Encryption"},{"id":2575,"feature_name":"Key Destruction"},{"id":2601,"feature_name":"Keyed-hash message authentication"},{"id":2598,"feature_name":"Symmetric Key Generation"}]}