FlashBlade Data Encryption Module

Certificate details

Certificate ID #5000
Status active
Validation dates 17.04.2025
Sunset date 16-04-2027
Standard FIPS 140-3
Security level 1
Type Hardware
Embodiment Single Chip
Caveat Interim validation
Exceptions
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description The FlashBlade Data Encryption Module is the hardware inside the proprietary storage devices responsible for performing XTS-AES-256 encryption and decryption.
Version (Hardware) PM8607B1-F3EI
Version (Firmware) 2.10
Vendor Pure Storage, Inc. http://www.purestorage.com
Lab Lightship Security, Inc.
Algorithms
  • AES-XTSA906
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES-256, AES
Block cipher modes
XTS

Security level
Level 1

Title Microsoft Word - FlashBlade_Data_Encryption_Module-Security_Policy 2025-04-03.docx
Author brent
Creation date D:20250403073239-04'00'
Modification date D:20250403073239-04'00'
Pages 12
Producer Microsoft: Print To PDF

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5000,
  "dgst": "0f8eb4b72b6e0c9e",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#A906",
        "AES-XTSA906"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "2.10"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {
        "XTS": {
          "XTS": 8
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES 256": 1,
          "AES-256": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 8,
          "FIPS 197": 1,
          "FIPS PUB 140-3": 1,
          "FIPS140-3": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 16,
            "AES-256": 2
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES-XTSA906"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A906"
      ]
    },
    "policy_metadata": {
      "/Author": "brent",
      "/CreationDate": "D:20250403073239-04\u002700\u0027",
      "/ModDate": "D:20250403073239-04\u002700\u0027",
      "/Producer": "Microsoft: Print To PDF",
      "/Title": "Microsoft Word - FlashBlade_Data_Encryption_Module-Security_Policy 2025-04-03.docx",
      "pdf_file_size_bytes": 1274620,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 12
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "a0584a204391e1415c72805d8a1865f4dd51895b429af31426cdba2ca5828f1c",
      "source_hash": "c037caaf0e999aa719ee3451eca2127e9cc80554d5a71148de8b45e5529910fb",
      "txt_hash": "da6a3d1bfed1feef58f66111a29cdd2b8ece2757553d7af4e242909fdce6a8f5"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/April 2025_010525_0659.pdf",
    "date_sunset": "2027-04-16",
    "description": "The FlashBlade Data Encryption Module is the hardware inside the proprietary storage devices responsible for performing XTS-AES-256 encryption and decryption.",
    "embodiment": "Single Chip",
    "exceptions": [
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": "2.10",
    "historical_reason": null,
    "hw_versions": "PM8607B1-F3EI",
    "level": 1,
    "mentioned_certs": {},
    "module_name": "FlashBlade Data Encryption Module",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-04-17",
        "lab": "Lightship Security, Inc.",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Pure Storage, Inc.",
    "vendor_url": "http://www.purestorage.com"
  }
}