Module Name

Aegis Secure Key 3Z Cryptographic Module

Standard

FIPS 140-2

Status

Active

Sunset Date

1/29/2022

Validation Dates

01/30/2017;03/10/2017;03/27/2017;05/02/2017;12/06/2018;04/16/2019;06/13/2019;07/18/2019

Overall Level

3

Caveat

When installed, initialized and configured as specified in Section 11.1 of the Security Policy

Security Level Exceptions

• Mitigation of Other Attacks: N/A

Module Type

Hardware

Embodiment

Multi-Chip Stand Alone

Description

Apricorn’s Aegis Secure Key 3z is a hardware encrypted USB 3.1 memory key. Its software-free design works with any host that supports USB and mass storage compliant. Authentication is performed via the embedded keypad & all CSPs (PINs, encryption keys, etc) never leave the device boundary for improved security. The 3z supports 1 admin and 1 user, has no factory default PINs (requires Force Enrollment upon first use) and offers a variety of features including programmable brute force, recovery PINs, 7-16 digit PIN, auto lock, read only modes, and is compatible with Apricorn’s Aegis Configurator

Tested Configuration(s)

• N/A

FIPS Algorithms

AES	Certs. #2235 and #4032
DRBG	Cert. #260
ECDSA	Cert. #919
KAS	Cert. #86
SHS	Cert. #1911

Other Algorithms

NDRNG

Hardware Versions

RevA [A, B, C, D], RevB [D], and RevD [D, E], with {P/Ns ASK3Z-8GB (8GB) [A, B, C, D, E], ASK3Z-16GB (16GB) [A, B, C, D, E], ASK3Z-32GB (32GB) [A, B, C, D, E], ASK3Z-64GB (64GB) [A, B, C, D, E] and ASK3Z-128GB (128GB) [A, B, C, D, E]}

Firmware Versions

7.1 [A], 7.5 [B], 7.7 [C], 7.8 [D] and 7.8RM [E]