GuardianEdge demonstrates its commitment to product excellence by certifying and validating its products under the Common Criteria and NIST FIPS 140-2. These rigorous certifications provide assurance that GuardianEdge solutions operate correctly to enforce security and protect data. They are conducted by third party labs regulated by the US government, and require the successful completion of in-depth product testing. GuardianEdge customers can rely on these results.
Common Criteria
The Common Criteria is an international standard (ISO 15408) that was developed by the United States, Canada, France, Germany, the United Kingdom, and the Netherlands. The standard has been subsequently recognized by many other nations. In the US, the program is managed by the National Information Assurance Partnership (NIAP), a program operated by the National Security Agency (NSA).
GuardianEdge's hard disk encryption product successfully passed Common Criteria testing in 2003. Here are the results, including the approved Security Target for disk encryption:
Common Criteria Certificate
Validation Report
Security Target
These results can be confirmed on the NIAP web site at
http://www.niap-ccevs.org/cc-scheme/st/?vid=3008
Currently, GuardianEdge is pursuing Common Criteria EAL4+, the highest level that's mutually recognized internationally. The independent evaluation and testing is being conducted by the Cygnacom Solutions Security Evaluation Lab.
The certification covers:
GuardianEdge Data Protection Framework
GuardianEdge Hard Disk Encryption
GuardianEdge Removable Storage Encryption
The "in evaluation" listing can be found on the NIAP site at:
http://www.niap-ccevs.org/cc-scheme/in_evaluation.cfm#VID10003
To learn more about Common Criteria, visit:
http://niap.nist.gov/cc-scheme/index.html
http://www.commoncriteriaportal.org/
FIPS 140-2 Cryptographic Library
FIPS 140-2 is the federal standard that ensures that systems providing cryptographic protection for sensitive or valuable data are implemented correctly. Its use by US and Canadian government organizations is mandatory.
GuardianEdge's encryption technology has been tested and validated against the FIPS 140-2 standard. To learn more, visit:
http://www.guardianedge.com/products/cryptographic-library.php
http://www.guardianedge.com/news_events/press-releases/2005/april-7.php