PCIe U.2 SSDs

Swissbit storage supports TCG Opal 2.0 specifications for standardized encryption key management and secure erase functionality. Opal enables pre-boot authentication, user-based access control, and compliance with data protection regulations requiring hardware-encrypted storage. IT administrators manage encryption policies centrally without custom software per storage vendor. Opal's locking ranges enable partitioning storage into encrypted and unencrypted regions, supporting use cases requiring both protected data and unencrypted boot partitions.

Swissbit implements AES-256 encryption in hardware for full-disk encryption without performance penalty. Cryptographic keys reside in controller secure storage, never exposed to host systems. Encryption operates transparently: host writes plaintext, controller encrypts before NAND storage, decrypts on reads. This protects data at rest without application modification. Hardware encryption performs faster than software encryption and cannot be bypassed through memory inspection or operating system vulnerabilities. We support key management through standard interfaces including TCG OPAL and proprietary solutions for applications requiring specific key hierarchies.

Swissbit storage implements secure boot verification to prevent execution of tampered or malicious firmware. The controller's root-of-trust validates firmware authenticity using cryptographic signatures before execution. Only firmware signed with trusted keys can execute. This protects against firmware-level attacks that could compromise encryption, expose data, or create persistent backdoors. Secure boot extends the system's chain-of-trust into storage, critical for applications requiring verified boot sequences including industrial IoT, medical devices, and automotive systems.

Swissbit implements multiple erase methods for different security requirements. Secure Erase cryptographically destroys encryption keys, rendering data unrecoverable without overwriting NAND (completing in seconds). Sanitize overwrites all NAND cells, meeting DoD 5220.22-M and similar data destruction standards but requiring minutes to hours. Purge combines cryptographic key destruction with overwrite for maximum security. Fast Erase resets NAND to factory state for redeployment. Applications select appropriate erase methods balancing security requirements against time constraints and device lifecycle.

Swissbit implements end-to-end data path protection using CRC checksums and ECC validation from host interface through NAND storage. This detects silent data corruption from electrical interference, firmware bugs, or NAND cell failures. Traditional storage verifies data integrity only at NAND interface; errors in controller processing, buffer RAM, or interface logic go undetected. End-to-end protection validates data integrity at every stage, ensuring data read from NAND matches data written by host.

Swissbit controllers implement thermal monitoring and adaptive management to maintain performance and data integrity across temperature extremes. When temperature approaches operational limits, the controller throttles operations to prevent thermal damage while maintaining data accessibility. Temperature-dependent read retry algorithms adjust error correction aggressiveness based on current temperature, compensating for temperature-induced signal degradation. Thermal monitoring data integrates with system-level thermal management, enabling coordinated responses to temperature stress across the entire embedded system.

Swissbit implements hardware-supported power-fail protection to prevent data corruption during unexpected power loss. Power-fail detection circuits monitor supply voltage. When voltage drops below thresholds indicating imminent power loss, capacitors provide energy for the controller to complete in-flight NAND operations, flush write caches, and update metadata to consistent states. This process takes milliseconds but prevents corruption that would otherwise require filesystem recovery, data loss, or complete drive failure. Power-fail protection is critical for industrial automation, medical devices, and automotive applications experiencing frequent power cycling, voltage instability, and unexpected shutdowns.

Swissbit implements LDPC (Low-Density Parity-Check) error correction for superior data recovery compared to BCH or Reed-Solomon codes. LDPC corrects more bit errors per page, enabling reliable operation of NAND with higher error rates, extending drive lifespan as cells degrade. This is particularly important for MLC/TLC NAND and high-temperature operation where error rates increase. LDPC's computational complexity requires hardware acceleration; our controllers implement dedicated LDPC engines for real-time correction without performance penalty.

Swissbit implements Block RAID algorithms that distribute data across multiple NAND dies with parity protection. If a die fails completely (beyond error correction capability) Block RAID reconstructs data from remaining dies. This provides drive-level redundancy without requiring host-level RAID controllers. Block RAID is particularly valuable for applications requiring high reliability but lacking space, power, or complexity budget for multiple drives in RAID configuration.

Swissbit storage supports secure in-field firmware updates to address issues discovered post-deployment, add features, or improve performance without hardware replacement. Firmware updates use secure delivery mechanisms (signed images, encrypted channels) to prevent malicious firmware injection. The update process maintains fallback capability; if new firmware fails validation or causes operational issues, the controller automatically reverts to previous working firmware. This enables long-lifecycle products to benefit from improvements without risking bricked devices.

Swissbit implements comprehensive S.M.A.R.T (Self-Monitoring, Analysis and Reporting Technology) for predictive maintenance. Our storage reports detailed health metrics: total bytes written, remaining endurance percentage, bad block count, temperature history, power cycle count, unexpected power loss events. This enables condition-based maintenance rather than time-based replacement. System integrators monitor S.M.A.R.T data to predict end-of-life and schedule replacement during maintenance windows, preventing unexpected failures in production environments. Our Device Manager software provides visualization and analysis tools.

NVMe storage supports multiple namespaces, enabling a single physical drive to present as multiple logical drives to the host system. Swissbit implements namespace support for virtualization environments, multi-tenant systems, and applications requiring isolated storage domains. Each namespace maintains independent addressing, access control, and performance characteristics. This enables efficient resource sharing while maintaining isolation between workloads or security domains.

Swissbit storage provides real-time telemetry for system-level diagnostics and performance optimization. Telemetry data includes instantaneous metrics: IOPS, bandwidth, latency, command queue depth, temperature, power consumption. This enables system integrators to optimize application behavior, identify bottlenecks, and diagnose performance issues without specialized test equipment. Telemetry supports remote monitoring and fleet management for distributed deployments where physical access is limited or costly.