HARDWARE SECURITY BENCH / HONOLULU
ASSESSMENTS AVAILABLESecure boot, post-quantum readiness, and hardware security assessments for product teams preparing for demanding security reviews.
SSX360 offers scoped bench assessments, CNSA 2.0 and NIAP readiness reviews, and evidence preparation. Start with one board, module, or product line. Agree the work and price before testing begins.
01 / ASSESSMENT SCOPE
Choose a focused assessment or combine the work into a product-level review. Each engagement names the test boundary and the evidence to be delivered.
Review the cryptographic inventory, boot chain, update path, and evidence gaps against the requirements that apply to your product. Identify the relevant NIAP Protection Profile and policy, including Policy #33 where applicable.
DELIVERABLERequirement map and prioritized gap register
Assess signed boot and firmware updates, including rejection of unauthorized images, rollback controls, and recovery behavior. Plan migration work for LMS, ML-DSA-87, or ML-KEM-1024 according to the signing or key-establishment use case.
DELIVERABLETest record and migration statement of work
Organize the module boundary, documentation, evidence requests, and laboratory handoff. Define program support per module, with external laboratory fees and validation responsibilities identified separately.
DELIVERABLEEvidence index and laboratory handoff plan
Review the source design, sampling plan, health tests, and supporting records against NIST SP 800-90B. Document assessment conditions and gaps that need attention before a validation submission.
DELIVERABLEEntropy assessment and evidence package
Assess exposure to fault injection and side-channel leakage within an authorized bench scope. Record the tested configuration, observations, limitations, and recommended follow-up.
DELIVERABLEFindings report and remediation priorities
Review security-relevant hardware and firmware changes, maintain the evidence record, and plan targeted retests. Monthly support is scoped to the product line and its release schedule.
DELIVERABLEChange review and retest plan
02 / ENGAGEMENT
Identify the hardware revision, firmware build, intended use, applicable requirements, and permitted test methods.
Record the configuration and test conditions. Trace each finding to the observations that support it.
Receive a findings report, evidence index, requirement mapping, and prioritized next steps. Signed evidence and offline review can be included in scope.
Evidence handling can use SSX360’s private Matrix Scroll and Scroll Console tools, with signed records and an agreed review package.
How we handle evidence03 / BEFORE YOU BEGIN
It reviews the cryptographic inventory, intended use, migration constraints, and supporting evidence for a defined product. The result is a gap assessment and engineering plan based on the applicable NSA guidance and product requirements.
No. SSX360 provides readiness assessments, evidence preparation, and program support. Formal Common Criteria evaluations are performed by approved Common Criteria Testing Laboratories (CCTLs) under the NIAP program. SSX360’s assessment is not NIAP validation or NSA approval.
Yes. An engagement can begin with one board, module, or product line. Hardware availability, documentation, permitted methods, deliverables, and pricing are agreed before work begins.
Pricing depends on the hardware, test scope, evidence requirements, and review schedule. Contact mission@ssx360.com for a scoped proposal. A focused readiness review can establish the next steps before a larger engineering engagement.
Confidentiality, permitted access, ownership, and delivery are agreed for each engagement. Client designs, raw measurements, and detailed test procedures are not published as part of the website or newsletter.
04 / STANDARDS & GUIDANCE
We identify the applicable requirements at scoping. Readiness assessments and bench reports support an evaluation; formal certification and validation follow the relevant program and laboratory process.
START WITH A DEFINED SCOPE
Describe the product or environment, the assessment objective, and your schedule. We will agree the deliverables and price with you.
mission@ssx360.com