Trusted Mobility Solutions



SPYRUS Hydra PC™ Receives FIPS 140-2 Level 3 Validation

First USB Flash Drive to Support All Suite B Cryptographic Algorithms

San Jose, Calif. – September 9, 2009 – SPYRUS, Inc. today announced that its Hydra Privacy Card® (Hydra PC™) has been awarded Federal Information Processing Standards (FIPS) 140-2 Level 3 Certificate #1179 by the U.S. National Institute of Standards and Technology (NIST) and the Government of Canada Communications Security Establishment (CSE) jointly administered Certificate Module Validation Program. Meeting the FIPS 140-2 Level 3 testing criteria ensures that the Hydra PC cryptographic module is physically secure against tampering and electronic attacks or access to critical security parameters, and that cryptographic algorithm implementations comply with relevant government security standards. All security of the Hydra PC is designed, developed and manufactured in the U.S.A.

Unique to the secure flash drive industry, SPYRUS security protection goes beyond the criteria set by FIPS. Hydra PC is the only FIPS-validated USB encryption drive that:
  • Encrypts every file with a unique AES 256-bit encryption key. Files are also “sealed” with a digital signature to enforce unparalleled protection of both the plaintext and ciphertext from being modified by malware, accidental corruption, or even deliberate modification. If a file has been modified for any reason, it cannot be decrypted. This assures both the confidentiality and integrity of every file.

  • Supports the entire set of unclassified Suite B algorithms that are used by the U.S. Department of Defense to protect SECRET and TOP SECRET information.

  • Permits sharing of encrypted data and media sharing among designated Hydra PC users.

  • Utilizes a powerful split-key technique to confine use of the Hydra PC to a designated computer or enclave of computers.

  • Permits a user to store Suite B-encrypted files on the Hydra PC memory media, on the host computer’s hard drive, on a shared network drive, or in the “cloud,” where the files can be downloaded and decrypted by authorized Hydra PC users.

  • Supports removable/replaceable commercial microSD/SDHC memory cards. Unlimited amounts of data can be protected with a single drive, reducing life-cycle equipment costs for secure data management. Hydra PC can also be provided in an embedded memory configuration.
Hydra PC provides expanded security benefits to customers through encryption key and PIN management that is more robust than that required by the FIPS standards. SPYRUS achieves this advanced performance in the following ways:
  • Only SPYRUS uses Suite B ECC algorithms, equivalent in strength to 7,680-bit RSA keys, to protect Hydra PC encryption keys.

  • Encryption keys are never exposed outside of the tamper-resistant security boundary and cannot be imported or exported.

  • SPYRUS uses high-assurance random number generation to create high-entropy keys.

  • Hydra PC never stores the PIN internally, not even in a hashed form.
All Hydra PC models are available in Virus-Protected (ViP) versions that provide antivirus/anti-malware scanning of files. SPYRUS also offers centralized remote activation, policy enforcement, and management of all Hydra PC encryption drives within an enterprise.

“Hydra PC joins a long history of SPYRUS hardware security modules meeting and exceeding FIPS standards for tamper resistance and cryptographic processor hardware protection against passive and invasive attacks encountered in hostile military and critical infrastructure operations,” said Tom Dickens, Chief Operating Officer of SPYRUS. “This tradition of groundbreaking excellence is carried forward by our family of Hydra PC encryption devices—the Hydra PC Personal Encryption Device, the Enterprise Edition, and the Digital Attaché—that use these FIPS-validated features.”

About SPYRUS

SPYRUS, Inc., a Microsoft Managed ISV Partner, has pioneered portable security products and solutions to meet customer requirements for high-assurance security since 1992. Our mission is to set the standard for the new era of secure information sharing and long-term data protection. SPYRUS, Inc. is headquartered in San Jose, CA. See www.spyrus.com for further information.

SPYRUS, the SPYRUS logo, Hydra Privacy Card and Hydra PC are either registered trademarks or trademarks of SPYRUS, Inc., in the U.S. and/or other jurisdictions. All other company, organization and product names are trademarks of their respective organizations.

SPYRUS Media Contact:

Madison Alexander PR for SPYRUS
Dan Chmielewski Phone: (714) 832-8716 or (949) 231-2965 (cell)
dchm@madisonalexanderpr.com




© 1996–2010 SPYRUS, Inc.
About Us  ::  Contact Us  ::  Patents  ::  Legal Notices  ::  Privacy Policy