Data Security for Modern, Multi-Domain, Global Missions
Breadcrumb
- Curtiss-Wright
- Defense Solutions
- Capabilities
- Technologies
- Security
- NSA Commercial Solutions For Classified
What Is CSfC?
NSA’s Commercial Solutions for Classified (CSfC) program enables the use of commercial, standards-based encryption implemented in two independent layers to protect classified data. CSfC gives defense programs a faster, more flexible path to deploy secure systems without waiting for custom cryptographic hardware.
Common Criteria (CC) is an international standard (ISO/IEC 15408) for evaluating and certifying IT security, providing a structured way to define, test, and validate security functions against agreed protection profiles. For certain technologies, the CSfC program mandates that specific, selectable requirements be included in the Common Criteria evaluation to ensure the product meets the relevant NIAP-approved protection profiles.
CSfC and CC are ideal for missions that require:
- Rapid fielding
- Coalition interoperability
- Commercial hardware/software agility
- Lower SWaP and cost compared to High Assurance Type 1 solutions
- Secure operations across untrusted networks

Why CSfC Matters in Today’s Battlespace
Modern missions navigate high-risk environments and harsh conditions, generating unprecedented volumes of data from ISR feeds and sensor payloads, to mission intel and flight logs. That data can then traverse diverse networks such as tactical radios, SATCOM links, cloud gateways, and coalition environments that are often congested, intermittent, or untrusted.
NSA-approved CSfC dual-layer encryption provides robust protection for mission data, without sacrificing performance or deployment speed. By integrating independent hardware and software full drive encryption, critical mission data remains secure, whether a platform is lost, captured, or deployed within mixed-trust coalition networks.
Curtiss-Wright’s CSfC Advantage
End-to-end data protection & secure connectivity ensure mission data remains safe, reliable, & accessible wherever it goes.
Mission Protection Without Tradeoffs
NSA Approved Dual Layer Encryption
- Two independent commercial encryption layers
- Approved for classified data under NSA CSfC guidelines
- Protects data-at-rest, data-in-motion, and data-in-use

Rugged, Mission Ready Implementations
- Network attached storage with dual-layer CSfC encryption for ISR, autonomy, and high volume sensor data
- Removable, rugged storage for rapid data transfer
- SWaP optimized networking and communications

Faster Deployment & Accreditation
CSfC slashes integration and certification timelines compared to custom crypto solutions. As a cornerstone of the NSA’s strategy, CSfC leverages properly configured, layered commercial products to deliver fast, secure protection for classified data. Detailed NSA Capability Packages and strict requirements ensure approved products meet the toughest standards.
![]()
Seamless Integration with TrustedCOTS
CSfC encryption pairs with TrustedCOTS hardware rooted security to protect algorithms, mission software, and AI/ML workloads.
Ideal for Coalition & Global Operations
Because CSfC uses commercial cryptography, it supports:
- Coalition interoperability
- Export-friendly, ITAR-free security for classified data
- Multi domain, multi nation operations

Use Cases
Secure data exchange across multinational networks.
Lightweight, SWaP optimized data-at-rest storage for autonomous platforms.
Secure data in motion between edge sensors and mission computers.
Tactical Cloud & Forward Deployed Nodes
Protect data-at-rest and data in-motion in mobile or disconnected environments.
CSfC Data-at-Rest Solutions
DTS1+
The DTS1+ NAS solution stores and protects mission-critical DAR during missions and transport with two layers of CSfC full drive encryption in a single, compact, ready-to-deploy device.
DTS1+
The DTS1+ NAS solution stores and protects mission-critical DAR during missions and transport with two layers of CSfC full drive encryption in a single, compact, ready-to-deploy device.
DTS1X
The DTS1X NAS device delivers high-speed and secure data transfer through a 10 GbE interface with removable memory and two layers of encryption.
DTS1X
The DTS1X NAS device delivers high-speed and secure data transfer through a 10 GbE interface with removable memory and two layers of encryption.
HSR10
Modern military intelligence, surveillance, and reconnaissance (ISR) platforms generate large amounts of highly sensitive data that must be captured and securely stored without impacting performance.
HSR10
Modern military intelligence, surveillance, and reconnaissance (ISR) platforms generate large amounts of highly sensitive data that must be captured and securely stored without impacting performance.
PacStar Secure Wireless Command Post (SWCP) TLS
The PacStar Secure Wireless Command Post (SWCP TLS) is a fully integrated, expeditionary solution that provides warfighters with the groundbreaking ability to transmit classified information over wireless networks in the field using LTE-enabled commercial smartphones and tablets.
PacStar Secure Wireless Command Post (SWCP) TLS
The PacStar Secure Wireless Command Post (SWCP TLS) is a fully integrated, expeditionary solution that provides warfighters with the groundbreaking ability to transmit classified information over wireless networks in the field using LTE-enabled commercial smartphones and tablets.
CSfC Data-in-Motion Solutions
DuraNET 3300
A MIL-rugged 26-port Cisco IOS-managed L2/L3 embedded Ethernet switch. Integrating Cisco ESS 3300 Hellcat switch modules in a robust system design.
DuraNET 3300
A MIL-rugged 26-port Cisco IOS-managed L2/L3 embedded Ethernet switch. Integrating Cisco ESS 3300 Hellcat switch modules in a robust system design.
PacStar 444
Based on Cisco Embedded Services Switch (ESS) 3300, the PacStar 444 provides high-density network access at Gigabit speeds for critical voice, data, and video connectivity in a compact, rugged form-factor.
PacStar 444
Based on Cisco Embedded Services Switch (ESS) 3300, the PacStar 444 provides high-density network access at Gigabit speeds for critical voice, data, and video connectivity in a compact, rugged form-factor.
PacStar 446
Based on Cisco Embedded Services Switch (ESS) 3300, the PacStar 446 provides high-density network access at Gigabit speeds for critical voice, data, and video connectivity in a compact, rugged form-factor
PacStar 446
Based on Cisco Embedded Services Switch (ESS) 3300, the PacStar 446 provides high-density network access at Gigabit speeds for critical voice, data, and video connectivity in a compact, rugged form-factor
DuraMAR 6300
A rugged commercial off-the-shelf (COTS) secure mobile network router integrating Cisco’s ESR6300 embedded services router (ESR) card and Cisco IOS XE software.
DuraMAR 6300
A rugged commercial off-the-shelf (COTS) secure mobile network router integrating Cisco’s ESR6300 embedded services router (ESR) card and Cisco IOS XE software.
DuraMAR 63-33
The DuraMAR 63-33 is a rugged commercial off-the-shelf (COTS) Cisco IOS XE network router and switch combo system.
DuraMAR 63-33
The DuraMAR 63-33 is a rugged commercial off-the-shelf (COTS) Cisco IOS XE network router and switch combo system.
PacStar Tactical Cybersecurity Solutions with Cisco Technology
Providing a one-stop-shop for commercial tactical encryption solutions utilizing Cisco components for tactical networks
PacStar Tactical Cybersecurity Solutions with Cisco Technology
Providing a one-stop-shop for commercial tactical encryption solutions utilizing Cisco components for tactical networks
PacStar 447
PacStar 447 provides high-performance routing, switching, and advanced network services for critical voice, data, and video connectivity in a compact, quick setup, rugged form factor.
PacStar 447
PacStar 447 provides high-performance routing, switching, and advanced network services for critical voice, data, and video connectivity in a compact, quick setup, rugged form factor.
PacStar 211
PacStar® 211 small router provides high-performance routing, switching, and advanced network access for critical voice, data, and video connectivity in a compact, quick-setup, rugged form factor.
PacStar 211
PacStar® 211 small router provides high-performance routing, switching, and advanced network access for critical voice, data, and video connectivity in a compact, quick-setup, rugged form factor.
PacStar 443
The PacStar 443 provides high-density network access ports for critical voice, data, and video connectivity in a compact, quick setup, rugged form- factor. The PacStar 443 uses advanced Cisco® switching technology and provides up to 24 ports of LAN access.
PacStar 443
The PacStar 443 provides high-density network access ports for critical voice, data, and video connectivity in a compact, quick setup, rugged form- factor. The PacStar 443 uses advanced Cisco® switching technology and provides up to 24 ports of LAN access.
The Curtiss-Wright Security Advantage
Curtiss-Wright provides a unified security architecture that spans processing, networking, storage, communications, and supply chain assurance. This ecosystem integrates:
End to end protection across processing, networking, storage, and communications.
Endorsed by the NSA for securing classified and sensitive U.S. Government information when appropriately keyed.
Our TrustedCOTS products provide confidence in the security and un-compromised protections.
Curtiss-Wright goes the extra mile to protect supply chain and manufacturing processes.