We thought long and hard about the type of platform we want to use for this project. While the x86 platform has many shortcomings, it also provides a big ecosystem of OS and SW, as well as support. The fact that we have…
Yes, HSMs are very expensive and after talking to a few people in this industry we got the impression, some of the ORWL features are not present in HSMs. Like the ability to Geo-lock the device using the key (mounted in…
We currently have a Spec temperature of triggering a 'freezing event" at just above freezing Temperature 33-35F.
Thanks for the correction. I was not sure at the time.
The current Intel chipset we selected does only support RAM up to a max of 8GB. We heard the Qubes users loud and clear and the request for 16GB RAM. We will only be able to offer this in a next revision though.
We have built a list of hacks that we addressed and how. Please feel free to read up on all of these and more in our Product Description in the section "Potential attacks prevented" :…
I respect your opinion on this. We sought to build hardware that is a significant step up from what is available on the market today in terms of access control and tamper protection. We also open source the BIOS and…
Offline this SSD is protected with "AES 256-bit Encryption". Simple Brute force attempts would need WAY too long to make any sense. Does this answer your question?
Yes, physical access in most cases is a point of no GOOD return. That is why we emphasize so much on preventing this access. We have detailed the measures we have taken to prevent this here:…
Yes, correct. We think we cover the cold boot vector. Here is a section from the product description. Security mesh physically protects DRAM from both freezing specific components and removal. Breaching the mesh will…
We are actually talking about this. Thanks for your interest.
Correction. The temperature monitor is INSIDE the secure shell.
The SSD encryption key will only be deleted in case of a tamper event, NOT when the unit is moved. Tamper events are: * freezing the unit * drilling the secure enclosure or other wise breaking the traces on it * prying…
Let me state a section of our product description here, detailing the way we are approaching the "Evil Maids" USB volume boot blocked at BIOS, BIOS access controlled by security key + PIN, Intel TPM is enabled, and we…
Thanks. We agree with your statement fully. We are raising the threshold of entry to your personal data substantially, but we are still far from perfection. We did a number of steps up in the security ladder. We are…
ORWL will go in stand-by if the user is further than 10meters away from the device, if moved when away, it will shut down. If the hardware is tampered with, or chilled, the SSD encryption key is deleted within…
Our long term plan is to limit ME capabilities using the BIOS configuration. We just released the SOW of the 1st BIOS with Eltan on the WiKi. https://www.orwl.org/wiki/index.php?title=File%3ASowDESIGN-S... We are…
This looks like an awesome product to protect sensitive data. Be it in the legal field, lawyers, ...
We thought long and hard about the type of platform we want to use for this project. While the x86 platform has many shortcomings, it also provides a big ecosystem of OS and SW, as well as support. The fact that we have…
Yes, HSMs are very expensive and after talking to a few people in this industry we got the impression, some of the ORWL features are not present in HSMs. Like the ability to Geo-lock the device using the key (mounted in…
We currently have a Spec temperature of triggering a 'freezing event" at just above freezing Temperature 33-35F.
We currently have a Spec temperature of triggering a 'freezing event" at just above freezing Temperature 33-35F.
Thanks for the correction. I was not sure at the time.
The current Intel chipset we selected does only support RAM up to a max of 8GB. We heard the Qubes users loud and clear and the request for 16GB RAM. We will only be able to offer this in a next revision though.
We have built a list of hacks that we addressed and how. Please feel free to read up on all of these and more in our Product Description in the section "Potential attacks prevented" :…
I respect your opinion on this. We sought to build hardware that is a significant step up from what is available on the market today in terms of access control and tamper protection. We also open source the BIOS and…
Offline this SSD is protected with "AES 256-bit Encryption". Simple Brute force attempts would need WAY too long to make any sense. Does this answer your question?
Yes, physical access in most cases is a point of no GOOD return. That is why we emphasize so much on preventing this access. We have detailed the measures we have taken to prevent this here:…
Yes, correct. We think we cover the cold boot vector. Here is a section from the product description. Security mesh physically protects DRAM from both freezing specific components and removal. Breaching the mesh will…
We are actually talking about this. Thanks for your interest.
Correction. The temperature monitor is INSIDE the secure shell.
The SSD encryption key will only be deleted in case of a tamper event, NOT when the unit is moved. Tamper events are: * freezing the unit * drilling the secure enclosure or other wise breaking the traces on it * prying…
Let me state a section of our product description here, detailing the way we are approaching the "Evil Maids" USB volume boot blocked at BIOS, BIOS access controlled by security key + PIN, Intel TPM is enabled, and we…
Thanks. We agree with your statement fully. We are raising the threshold of entry to your personal data substantially, but we are still far from perfection. We did a number of steps up in the security ladder. We are…
ORWL will go in stand-by if the user is further than 10meters away from the device, if moved when away, it will shut down. If the hardware is tampered with, or chilled, the SSD encryption key is deleted within…
Our long term plan is to limit ME capabilities using the BIOS configuration. We just released the SOW of the 1st BIOS with Eltan on the WiKi. https://www.orwl.org/wiki/index.php?title=File%3ASowDESIGN-S... We are…
This looks like an awesome product to protect sensitive data. Be it in the legal field, lawyers, ...