808bits

iStorage FIPS 140-2 Level 2 Module Rev 1.0

FIPS 140-2 certificate #3294 · iStorage Ltd. · data as of 2026-09-12

iStorage FIPS 140-2 Level 2 Module Rev 1.0, from iStorage Ltd., holds FIPS 140-2 certificate #3294 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number3294
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-Chip Embedded
VendoriStorage Ltd. · website
Hardware versionsRev 1.0
Firmware versionsEC Firmware version IS_EC_FW_2_59_1X and SC Firmware version 1.6

Module description

Quoted from the NIST CMVP entry for this certificate.

iStorage FIPS 140-2 Module is a portable USB 3.1 module with real-time AES-XTS 256-bit hardware encryption and super-fast data transfer. An easy-to-use keypad interface enables secure access with unique 7-15 digit PINs and software-free setup and operation. The module is platform/device independent. The GDPR compliant module has a dedicated secure microprocessor (Common Criteria EAL4+ ready), employing built-in physical protection mechanisms to defend against external tamper, bypass attacks and more. All critical components are covered by super tough epoxy resin.

Security level exceptions

  • Cryptographic Module Specification: Level 3
  • Cryptographic Module Ports and Interfaces: Level 3
  • Physical Security: Level 3
  • EMI/EMC: Level 3
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms (6)

AlgorithmCAVP certificates
AES4642, 5179
CKGvendor affirmed
DRBG1954
HMAC3435
PBKDFvendor affirmed
SHS4183

Allowed algorithms

NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2018-09-26InitialPenumbra Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2018-09-26

Source documents