808bits

datAshur Pro 3.0

FIPS 140-2 certificate #2688 · iStorage Limited · data as of 2026-10-21

datAshur Pro 3.0, from iStorage Limited, holds FIPS 140-2 certificate #2688 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number2688
StandardFIPS 140-2
Statushistorical
Overall level3
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendoriStorage Limited · website
Software versionsN/A
Hardware versionsIS-FL-DA3-256-4; IS-FL-DA3-256-8; IS-FL-DA3-256-16; IS-FL-DA3-256-32; IS-FL-DA3-256-64
Firmware versionsEncryption Controller: V1.01.10; Security Controller: v1.11

Module description

Quoted from the NIST CMVP entry for this certificate.

iStorage datAshur Secure USB Flash Drive (iStorage datAshur Pro 3.0 or datAshur) is an encrypted storage device that provides a secure way to store and transfer data. User authentication is self-contained via an onboard keypad. User data is protected by hardware-based 256-bit XTS-AES encryption to secure sensitive information in the event that the drive is lost or stolen. The data encryption key (DEK) and other cryptographic parameters are generated within the module on first use through the use of a NIST approved DRBG. The seed for the DRBG is also produced within the module from an NDRNG.

Security level exceptions

  • Mitigation of Other Attacks: N/A

Approved algorithms (5)

AlgorithmCAVP certificates
AES3749, 3757
DRBG1032
HMAC2459
PBKDFvendor affirmed
SHS3127

Other algorithms

NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2016-07-26InitialPenumbra Security, Inc.
2017-03-17UpdatePenumbra Security, Inc.
2017-06-02Update
2017-07-14UpdatePenumbra Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2016-07-26, 2017-03-17, 2017-06-02, 2017-07-14

Source documents