TECH BRIEF

Secure Military Grade Solid State Drives Overview• Military packaging• Built-in encryption and multiple key management modes• No backdoors• Military Grade data purging and sanitization• A family of trusted tools• SSD building blocks• Data preservation• Trusted supply chain and longer lives• Military Grade SSD options

Introduction
This document introduces the considerations for selecting SolidState Drives (SSDs) for mission-critical, high-reliability and highsecurity applications. This overview augments Mercury’s white

Military packaging

paper, Safeguarding Mission Critical Data with Secure Storage

Consumer and enterprise data storage is transitioning from rotary,

Solutions which offers a more detailed study of the consequences

magnetic media to SSDs comprised of dense, rugged NAND flash

associated with selecting a commercial or enterprise-grade SSD formemory. With no moving parts, NAND flash-based drives are amilitary or aerospace applications.

requirement for all military and aerospace mission-critical applications.

Mercury has leading expertise in the rugged, secure storage

Today, military needs are driving data storage requirements far beyond

domain, leveraging twenty years of industry experience designingand building defense grade storage devices. Our proven solutions

www.mrcy.com

Figure 1. Secure Military Grade SSD rugged packaging

deployable ruggedness in to the domains of robust data security,purging and sanitization.

are found in manned, unmanned, military and commercial mission
and data recording applications that require robust built-in security,
data protection and purge capabilities. Our most rugged and secure
drives form our Military Grade portfolio of SSDs.
Figure 2. Secure Military Grade SSD rugged interconnects

Mercury Systems is a leading commercial provider of secure
sensor and safety-critical processing subsystems. Optimized forcustomer and mission success, Mercury’s solutions power a wide
variety of critical defense and intelligence programs.

100101010
001101011
110101100

ACQUIREACQUIREDIGITIZE

100101010
001101011
110101100

100101010
001101011
110101100

100101010
001101011
110101100

ACQUIREPROCESSDIGITIZEACQUIREPROCESSDIGITIZESTORAGEACQUIREPROCESSDIGITIZESTORAGEEXPLOIT

100101010
001101011
110101100

ACQUIREPROCESSDIGITIZESTORAGEEXPLOIT
DISSEMINATEBuilt-in encryption and key management
AES-256 (Advanced Encryption Standard) encryption is the industry
standard for sensitive data protection using an encryption/decryption
key to transform plain text into cipher text and vice versa. XTS (cyphertext stealing) block cipher ensures unique cipher text is produced whenencrypting identical blocks of data. Mercury was the first SSD provider
to attain NIST FIPS 197 certification for our AES-256 XTS encryption
algorithm and XTS is built-in to all our Secure Military Grade SSDs.
Common implementations of secure, commercial off-the-shelf(COTS) SSDs require a user to enter a password (ATA password) for

For more sensitive data, additional steps may be necessary to ensurethat data is absolutely not accessible. These additional steps may
include overwriting of all the data on the drive with non-sensitive data.
All storage cells, including spare cells for factory defaults, worn out
blocks, wear-leveling and garbage collection should be overwritten.
Especially sensitive data may need the assurance of multiple over-write
cycles.
No two user scenarios are the same. Defense and aerospaceapplications may require user-configurable sanitization protocols basedon the type of data being stored and the application environment.

drive access. Under this scenario, security is limited to a simple,

A family of trusted tools

low-strength, user-defined password. Although effective for some

Mercury offers multiple user-definable sanitization protocols, including:applications, defense solutions require much stronger protection
using flexible key management methods. Mercury adds this strength
requirement by augmenting ATA password access with:• Random self-generated keys• User-defined permanent keys
• Session keys (which are purged if the power is removed)• BLACK keys with KEK featuring encrypted BLACK and key
decrypion key (KEK)• External keys fill through SSD ports (RS-232 and DS-101)
These additional security implementations ensure that the encryption• TRRUST-Purge® to wipe the encryption key in less than 30ms.
• Fast clear with encryption key purge and overwriting of all data in
3 to 8 seconds.
• And other common military purge protocols – please contact
Mercury for more information.

SSD building blocks
SSDs are built using NAND flash memory of which there is twotypes, single-level cell (SLC) and multi-level cell (MLC). Each has its
advantages and disadvantages.

key is the gating factor that grants access to the stored data.

SLC-based NAND flash offers the highest level of endurance andNo backdoors

NAND is ideally suited to applications that write continually or that run

temperature robustness for the preservation of critical data. SLC

A fundamental component of any SSD is its controller which isremotely/unattended and where service is difficult at best.

usually an ASIC device designed and produced in volume by foreign

MLC-based NAND flash offers lower levels of read/write endurance

manufacturers. When these controllers are integrated into a SSD

by a factor of 10 or more. MLC NAND is ideally suited to large volume

there is no reliable way to verify that it is free of “backdoors” orstorage for a limited time (e.g. flight data recorders).

encryption bypass capabilities to thwart security features. In contrast,

Mercury’s offers both SLC, MLC, and TLC flash memory variants of ourMercury’s in-house developed ARMOR® drive controller is designed andwww.mrcy.com

manufactured in the United States. Mercury has 100% authority over
our controller’s implementation.

Secure Military Grade SSDs.

Data preservation

Data purge and sanitization

COTS SSDs are engineered to last at least as long as their warranty

When a drive falls in to the wrong hands, the contents of the drive

include firmware algorithms to reduce read/write speeds under highshould be wiped or sanitized quickly.

and may not provide extended-term data retention. Some COTS SSDs
utilization conditions to minimize early failures. This may cause criticalIn the simplest purge scenario, a remote trigger will initiate anddata to be lost during record. Mercury has full authority over ourcomplete a cryptographic erase and the encryption key will be purged incontroller which we optimize for read/write performance, even underless than 30 milliseconds. Although the cipher text remains on the drive,

sustained and heavy loading.

the cipher text cannot be decrypted without the encryption key.

Secure Military
Grade SSD

Commercial SSD• Security-driven materials and design• DMEA-Trusted, US manufacturer• Custom, US-built controller and IP• Multiple security key management modes• NIST certified cryptographic algorithms• Destruct capability• Configurable sanitization• FIPS, CC Certification• CSfC Component Listed• Data integrity circuitry and algorithms• Cost-driven materials and design• Foreign manufacturer• Foreign controller IP• Minimal security implementation• No Cryptographic validation

Figure 3. Features of a Secure Military Grade SSD outpace even the best commercial SSD

Secure Military Grade SSD options

All NAND flash storage devices occasionally corrupt small pieces ofdata, particularly if the device is heavily utilized. SSDs mitigate this risk

Mercury‘s Secure Military Grade Secure SSDs are offered as TRRUST-

through the implementation of error correcting code (ECC) and NAND

Stor and ASURRE-Stor options.

over-provisioning. Shorter-lived COTS SSDs include limited ECC andover-provisioning to maximize user capacity. Mercury’s Secure SSDs
feature advanced ECC and NAND over-provisioning that ensures dataintegrity in harsh military environments.
Mercury implements proven, customizable, multi-layered powerloss protection. Our robust data protection approach, unlike othertechnologies, is temperature independent. Mercury’s Secure Military
SSDs feature a deterministic shut-down sequence that guarantees

Figure 4. Rugged, Secure Military Grade SSD with ASURRE-Stor protection

complete read/write operations that are in progress when the power

For twenty years prime contractors have trusted Mercury Securefails.

Military Grade SSDs with TRRUST-Stor technologies for their land, air,

Trusted supply chain and longer livesand sea defense solutions. Our storage solutions range from the defacto 2.5” form-factor, to mSATA, XMC, mobile, VPX, and ultra compact

Commercial and enterprise-grade SSDs are optimized for performance

packages. The ultra-compact package has a SWaP-optimized 32 x 22and cost. This business model drives design and production to low-mm footprint and rugged tin/lead solder ball BGA attach.

manufactured using trusted devices within the United States where

ASURRE-Stor SSDs are engineered to the requirements of FIPS 140-2,

trust issues are maintained under the consequence of law. Defense

CC, and CSfC making them ideally suited for the storage of classified,

Microelectronics Activity (DMEA) accreditation is the defense industry

secret, and top secret data when used as a component in a 2-layer CSfC

standard for a trusted supplier of microelectronics solutions. Mercury’ssolution registered and approved by the NSA.

portfolio of Military Grade Secure SSDs are all designed, coded,

TRRUST-Stor™ Mission Pak ultra-portable secure SSD with integrated

manufactured and supported from a domestic DMEA accredited facility.

security and performance-enhancing algorithms is similar in size andInnovation That Matters - Mercury Security and SSD Firsts

function to a commercial USB flash drive, but precision-engineered

Consumer and enterprise product life cycles are shorter than thosesimultaneously protecting the most sensitive data from adversarial

to withstand the harshest military operating environments whilein change control-sensitive military applications. Mercury maintains

attack. The ASURRE-Stor variant of this product, with FIPS 140-2

ECO control and product availability until components are no longer

certification and eligibility for the CSfC program, is planned.

available, when end of life planning is initiated with our customers.
Multiple key
management
modes

External andisolated key
fill ports

Ruggedized
connectors

User-refillable
encryption keys
after key purge

User-refillable
encryption keys

All blocksanitation

BGA attach

Non-powered
destruct capability

Physical mode
sanitization
verification

First NIAP
certified

FIPS 197 certification
for AES-256 XTS
encryption

First HWFDE SSD
for CSfC program

www.mrcy.com

cost centers outside of the USA. Defense microelectronics should beMercury’s new TRRUST-Stor VPX RT radiation-tolerant SSD featuring

for fault-tolerance with up to six failed NAND devices, the new device

BuiltSECURE™ technology is the first commercial SSD precision-offers long-term data integrity for applications where device repair

engineered for the harshest possible operating environmentsor replacement is cost-prohibitive. Recognizing that no two mission

leveraging OpenVPX™ standards. Although designed for commercial

requirements are identical, customers can tailor power consumption

satellite applications, the new device can also be adapted for otheragainst performance requirements for each unique mission. Mercury’s

applications where radiation exposure may occur, including high-new storage product is designed for seamless integration with thealtitude aircraft, airborne weapons, and mission-critical ground

OpenVPX ecosystem of processing boards and chassis.

computing systems. TRRUST-Stor VPX RT SSD includes advanced

For more information, including modified-COTS secure storage options

BuiltSECURE error correction algorithms paired with large geometry

please contact Mercury Systems at secure.ssd@mrcy.com orindustrial-grade Single-Level Cell (SLC) NAND flash memory. Designed(602) 437-1520.

Figure 5. Comparison of commercial and Secure Military Grade SSDs

Security

Data integrity

Physicalrobustness

Supply ChainFeature

COTS solution

TRRUST-Stor ®

ASURRE-Stor ®

BenefitSelf-encryption

AES-128
AES-256

AES-256 XTS
Other algorithms supported

AES-256 XTS
Other algorithms supported

Flexibility and security

Key management

ATA password onlyMultiple key management modes

Multiple key management modes

Customizable security implementation

Backdoors

Possible

NoNo

US design and 3rd party validation
eliminated back door security threatSanitizationNoUser configurable

User configurable

Flexibility and security

Warranty throttling

CommonNoNoConsistent read/write performance

ECC

1E-14 UBER

Better than 1E-18 UBER

Better than 1E-18 UBER

Data integrity

Data protection upon
power loss

CommonYes

Yes

Data integrity

Shock and vibration

Limited tolerance

Very high tolerance

Very high tolerance

Suitable for the harshest military andaerospace environments

Temperature throttling

TypicalNoNo

Operating temperature

Optimized for officeenvironments

Optimized for wide temp swings

Optimized for wide temp swings

Form Factor

2.5", M.2, BGA

2.5", mSATA, BGA, Mobile, VPX, M.2*

2.5", Mobile*, BGA*, M.2*

Flexibility

Space Application
Variants

NoYes

No

Suitable for high radiation environments

Country of origin

Typically foreign

Built in US (DMEA-trusted)

Built in US (DMEA-trusted)

Trusted manufacturer

Controller origin

Typically foreign

ARMOR™ controller designed in the USARMOR controller designed in the US

Security customization and pedigree

Commercial availability

1-2 years

Very long-term

Very long-termLong-term supply continuity

Validated security

Trusted component for 2-layer
encryption implementation,such as CSfC

3rd party certifications

FIPS 1971

FIPS 197

FIPS 197
CC (#CCEVS-VR-VID10783-2017)2
FIPS 140-23 (#2884)
CSfC HWFDE component listed4

Validated for sensitive
data storage

NoNoYes

Independentvalidation

TRRUST-Stor and ASURRE-Stor are registered trademarks and BuiltSECURE, Innovation That Matters and Mercury Systems are trademarks of Mercury Systems, Inc. Other products mentioned may
be trademarks or registered trademarks of their respective holders. Mercury Systems, Inc. believes this information is accurate as of its publication date and is not responsible for any inadvertent errors.
The information contained herein is subject to change without notice.
Copyright © 2018 Mercury Systems, Inc. 									3309.04E-0418-TB-SSD-military

Innovation That Matters™
Corporate Headquarters
50 Minuteman Road • Andover, MA • 01810 USA(978) 967-1401 • (866) 627-6951
Fax (978) 256-3599
www.mrcy.com

www.mrcy.com*Planned, but not launched.
1 For more information on FIPS 197, please refer to http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf
2 For more information CC (Common Criteria for Information Technology Security Evaluation), please refer to https://www.commoncriteriaportal.org/
3 For more information on FIPS 140-2, please refer to http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf
4 For more information on CSfC, Certified Solutions for Classified Program, please refer to https://www.nsa.gov/resources/everyone/csfc/