Encryption

256-bit AES full-disk hardware encryption in XTS mode

using two 256-bit crypto keys

Access Control

Two-factor authentication via smartcard and PIN

according to the principle ”having and knowing”

Cryptographic Key Management

The cryptographic keys can be created, changed

and destroyed by the user with the smartcard.

Approved for handling classified data up to the levels of:

EU RESTRICTED and NATO RESTRICTED.