Scalar and Express P-series are self-encrypting solid-state drives, which is based on a single ASIC controller and different size of memory chips of volatile DRAM and non-volatile NAND. Those cryptographic modules are designed to fulfill non-proprietary Host Key encryption and other security functions such as zeroization, sanitization, write-protection, and random number generation. They are compatible to use at industry-standard form factors such as 2.5” SATA hard drive, mSATA, SATA M.2, or NVMe M.2 & U.2 SSD slot as well as the ruggedized form factors such as R-SATA or RMM.
","evaluation_configuration":"This evaluation covers the TOE only in its evaluated configuration. To use the product in the evaluated configuration, the product must be configured as specified in the Guidance Documentation.
Security target contains a list of evaluated models and firmware revisions applicable to those models.
","security_evaluation_summary":"The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) processes and procedures. The TOE was evaluated against the criteria contained in the Common Criteria for Information Technology Security Evaluation, Version 3.1 Revision 5. The evaluation methodology used by the Evaluation Team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 Revision 5. The evaluation was successful and provides a level of assurance that the TOE meets the Security Functional Requirements identified in the Security Target (Scalar and Express P-series SSD, version NV.R1900 Security Target, Version 1.8, May 15, 2025). The project underwent CCEVS Validator review. The evaluation was completed in May 2025. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"Cryptographic Support
The drive utilizes the cryptographic algorithms that are approved for use by NIST FIPS 140-3 per SP 800-140C and SP 800-140D.
User Data Protection
The drive uses XTS-AES-256 (SP800-38E) IEEE Std. 1619-2007 XTS-AES-256 algorithm to encrypt all user data on the drive.
Security Management
The drive allows authorized users to change the data encryption key (DEK), erase the DEK, initiate firmware updates, erase user data, and change passwords.
Protection of the TSF
The drive protects itself by running a suite of self-tests at power-up and before using certain functions, authenticating firmware and by not providing any mechanism to export any key values.
","features":[{"id":1980,"feature_name":"Cryptographic Hashing"},{"id":1979,"feature_name":"Cryptographic Signature Verification"},{"id":1977,"feature_name":"DRBG"},{"id":1972,"feature_name":"Full Drive Encryption"},{"id":1976,"feature_name":"Key Destruction"},{"id":1981,"feature_name":"Keyed-hash message authentication"},{"id":1978,"feature_name":"Symmetric Key Generation"}]}