::Trend Micro Threat Resource Center::

19 January 2009

SanDisk Cruzer USB drive listed for Common Criteria Certification

USB drives are getting more sleek and certified. Introducing the SanDisk Cruzer Enterprise FIPS edition secure USB flash drive:

SanDisk has been selected for evaluation of this new product for Common Criteria EAL2 certification under the data protection schedule of the Defense Signals Directorate, Australian Government Department of Defense.

SanDisk Cruzer Enterprise FIPS edition is designed to meet the security requirements of government agencies and financial institutions, featuring FIPS 140-2 level 2 certification for encryption, a standard set by the National Institute of Standards and Technology (NIST). The encrypted flash drive imposes mandatory access control on all files, which are stored in a secure partition that implements 256-bit hardware-based AES encryption.

FYI:
The Evaluation Assurance Level (EAL1 through EAL7) of an IT product or system is a numerical grade assigned following the completion of a Common Criteria security evaluation. EAL2 certifies the product is Structurally Tested.

Common Criteria is a framework in which computer system users can specify their security requirements, vendors can then implement and/or make claims about the security attributes of their products and testing laboratories can evaluate the products to determine if they actually meet the claims.