Encrypted SSD Storage for Client Devices

PCs are the primary user productivity devices. They continue to ingest, process and store information that may include sensitive and classified data. Many PCs operate in insecure environments where an adversary may gain physical access to the device. Without adequate protection adversaries can extract, modify, encrypt or destroy data. Attacks such as wiping and cloning only take seconds to execute. An adversary with longer access can employ advanced data recovery that includes a variety of techniques to defeat different endpoint protections.

Protecting sensitive data from advanced threat actors requires layers of protection. Software encryption provides a basic level of protection but can be defeated using a variety of techniques and technologies. This is why the NSA, DISA, NIAP and other leading experts require full drive hardware encryption to meet standards including CSfC for data at rest and FIPS 140-2. Ideally organizations use a combination of software and hardware encryption with pre boot authentication and multifactor authentication providing layers of protection that can defeat the most sophisticated threat actors.

Cigent offers secure storage on M.2 2280 SSD which is the legacy standard for storage in PCs. The emerging configuration in PCs is M.2 2230 SSD which is the standard on all Microsoft Surface Devices and many of the newest Dell Latitude and Precision PCs and HP Elite Books and HP Workstations.

Cigent secure storage and Software Full Drive Encryption are listed on the NSA CSfC Components List for data at rest, including the Pre-Boot Authentication requirement. Cigent cryptographic modules are validated under FIPS 140-2 and 140-3, and Cigent capabilities support Executive Order 14028 requirements including encryption of data at rest, multifactor authentication, and zero trust access control.

Cloning and wiping are common attacks where an adversary will copy or “clone” a drive and/ or erase or “wipe” a drive. Clone and wipe attacks can take place when a device is at rest or in use. When a device is in use an adversary with physical access can execute an attack in only a few seconds. Cigent prevents cloning and wiping by locking all data ranges. Utilizing hidden partitions data remains protected even when a device is unlocked.