 |
 |
Hardware RAID Encryption |
| |
Enova® SecureIDE RAID is an encrypted bridge board that connects between the generic RAID controller and the IDE UltraDMA disk drives, offering 133MB/sec real-time hardware encryption speed to all the connnected RAID hard drives. |
| |
|
|
Hardware Security |
| |
Enova® SecureIDE RAID contains two (2) or four (4) Enova® Technology X-Wall® XO-128 (or XO-192) cryptographic bridge chips that are capable of delivering 133MB/sec bursting to all connected RAID hard drives. Operation of encryption and decryption is totally transparent to users. Look below Gartner's note on hardware security:
“Hardware is also not invulnerable to attack, but it generally requires much more sophisticated attackers with larger budgets than those that typically succeed against software-only security options. When information is sensitive, valuable or ‘must be trusted not to change’, hardware has to be part of the solution.” * Gartner Research Note COM-16-5309, 10 June 2002: “Software Security is Soft Security: Hardware is required” |
| |
|
|
No performance degradation |
| |
There isn't any performance degradation because of operations of encryption and decryption. All disk contents including Operating System, boot sector, and temp./swap files are strongly encrypted using NIST & CSE certified TDES 128-bit or 192-bit hardware algorithms.
The Enova® SecureIDE RAID does not require any special device drivers nor does it depend on Operating System. It is compatible with all known operating systems as long as your generic RAID controller supports them all. The PCI interface only offers the required power, ground and support to the Enova® SecureIDE RAID. |
| |
|
| |
|
| |
|
|
Key management |
| |
All RAID disk drives share the same Secure Key which is provided via an external key token connected through an extension cord to the Enova® SecureIDE RAID for key insert. The key token serves as user authentication for access control while the X-Wall XO-128 ASIC encrypts and decrypts. The X-Wall XO-128 design allows users to remove the key token after the connected RAID hard drives have been properly recognized by the OS. The "Secure Key" is transmitted into the microchip at boot up via a hardwired protocol and is retained in protected volatile memory inside the chip until the power is turned off. The same key token has to present again during next power on or resume from hibernation state. The security is greatly enhanced because 1) the Secure Key disappears when the power is down and 2) the data can not be read, because no one can find the Secure Key by electronic means. |
 |
| |
|
|
|
How does it operate? |
| |
As illustrated in Figure 1, the regular RAID connection without encryption. All disk drives maybe connected directly to the generic RAID controller which also supplies required device drivers under various operating systems. The generic RAID configuration relies heavily on the software disk encryption which is notoriously known for poor performance and soft security. |
| |
|
| |
|
| |
|
| |
Figure 2 shows that Enova® SecureIDE RAID sits in between the generic RAID controller and disk drives, offering hard security at 133MB/sec bursting to all RAID disk drives. The operation of encryption/decryption is totally transparent to all disk drives, offering absolutely no performance degradation. |
| |
|
| |
|
| |
|
| |
|
|
Specifications |
| - |
X-Wall |
| |
XO-64 or XO-128 or XO-192 |
| - |
IDE Interface |
| |
ATA-6 Compliant |
| |
Support 48-bits LBA Addressing (For Hard Disk >137GB) |
| |
Support PIO modes 0 to 4 |
| |
Support Ultra DMA modes 0 to 6 |
| - |
Support Hard Disks |
| |
Four (4) chips support four hard drives; Two (2) chips support two hard drives |
| - |
Support RAID Modes |
| |
RAID 0, 1, 0+1, 5
Please note: Either the Host or the Generic RAID controller has to support the actual RAID functionalities. Enova® SecureIDE RAID simply bridges through all RAID functionalties from the Host to disk drives then adds hardware security. |
- |
PCI Interface |
| |
PCI 2.2 Compliant (Power Only - 5V and 3.3V) |
- |
LED Indicators |
| |
1 - Power LED |
| |
1 - Key Error LED |
| |
4 - Hard Disk Active LEDs |
- |
Secure Key Interface |
| |
Single Secure Key Operation |
| |
Enova® Standard 1394A Form Factor |
- |
Power Consumption |
| |
For DES < 1.12A |
| |
For TDES < 1.44A |
- |
Dimensions |
| |
18 cm (L) x 9.5cm (W) |
|
|
Available Manufacturers |
|
|
|
|
