Kingston Technology IronKey 256GB Keypad 200, FIPS 140-3 Lvl 3 AES-256 Encryption

Validated to FIPS 140-3 Level 3 with XTS-AES 256-bit Hardware Encryption
Kingston® IronKey™ Keypad 200 series are OS-independent, hardware-encrypted USB drives with USB-A and -C®* connectors and an alphanumeric keypad for PIN access. The KP200 series is FIPS 140-3 Level 3 validated for the highest military-grade security and features hardware-based XTS-AES 256-bit encryption. The circuitry is coated with a special epoxy layer that makes it virtually impossible to remove components without damage, thus preventing this epoxy from attacking the semiconductor components.

The KP200 features XTS-AES 256-bit hardware encryption. It is also FIPS 140-3 Level 3 (pending) certified for military security and includes enhancements that raise the bar for data protection even higher. The circuitry is coated with a special epoxy layer that makes it virtually impossible to remove components without damaging them; this resilient epoxy prevents attacks on semiconductor components. The USB drive is designed to alert the owner of tampering. It also provides protection against brute-force password attacks and BadUSB protection with digitally signed firmware. The alphanumeric keypad is covered with a polymer layer that protects the keys and hides the use of the keys by analyzing fingerprints on the keys.

The KP200 has a built-in rechargeable battery that allows the drive to be unlocked first without software and then connected to any device that supports USB mass storage type A. This offers users maximum flexibility for different platform types and operating systems.
With the Multi-PIN option (Admin/User), an easy-to-remember but hard-to-guess alphanumeric PIN for admin or user can be set up via the keypad. The administrator can restore a user PIN and enable access to the drive if the user PIN has been forgotten or if the drive has been locked after reaching the maximum number of 10 user login attempts. If both the admin and user PINs are enabled, the KP200 locks the user PIN after 10 failed login attempts. If the admin PIN is entered incorrectly 10 times in a row, the brute-force attack protection cryptographically erases the drive, destroying the data forever, and resets it.

The drive also offers two levels of write-protection modes – a global mode that can be set by the administrator and a session-only mode that can be set by the user. Read-only modes can protect the drive from malware on untrusted systems. In addition, the administrator can load content and set the global read-only mode, allowing the user to access the data but not make any changes.

Fast dual-channel performance is offered by the KP200 drives with 512GB and the KP200C drives with capacities from 64GB to 512GB.

Validated to FIPS 140-3 Level 3, Certificate No. 5133
The KP200 now meets the FIPS 140-3 Level 3 military security specifications published by NIST. This is an extended version of the FIPS 140-2 specifications, which further improves the security features and tamper protection of the USB drive. It includes XTS-AES 256-bit encryption, as well as protection against brute-force and [BadUSB] attacks with digitally signed firmware. The circuitry is coated with a special epoxy layer that makes it virtually impossible to remove components without damaging them. This resilient epoxy prevents attacks on semiconductor components.

Operating system and device independent
Since the KP200 is equipped with a rechargeable battery, the keypad can be used to unlock the USB drive without the need for software. It can then be connected to any system that supports USB-A or USB-C mass storage devices. This offers users maximum flexibility for different platform types and operating systems.

Multi-PIN option
Users have the option to set up a user or an admin/user mode. Admin can be used to restore a user PIN and enable access to the USB drive if the user PIN has been forgotten or if the USB drive has been locked after reaching the maximum number of 10 user login attempts.

Global and session-based read-only modes (write protection)
Both the administrator and the user can set a session-based read-only mode to protect the USB drive from malware on untrusted systems. The administrator can also set a global write protection mode, which puts the USB drive into read-only mode until it is reset.