Copyright SK hynix Inc. 2023 Version 1.4 Page 1 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED
HFS960GDE0X098N
HFS1T9GDE0X098N
HFS3T8GDE0X098N
FIPS 140-2 Cryptographic Module
Non-Proprietary Security Policy
Document Version: 1.4
Date: 1/27/2023
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 2 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
CHANGE RECORD
Revision Date Author Description of Change
1.0 10/28/2021 Yongtae Kim First release
1.1 7/28/2022 Yongtae Kim Response to CMVP Comments
1.2 10/11/2022 Yongtae Kim Update firmware version
1.3 1/6/2023 Yongtae Kim Added Section 8.4 Firmware Update
1.4 1/27/2023 Yongtae Kim Updated entropy test description in
Table 14
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 3 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Table of Contents
Introduction .................................................................................................................................. 5
1.1 Hardware and Cryptographic Boundary ...................................................................................... 5
1.2 Block Diagram with Cryptographic Boundary.............................................................................. 7
1.3 Mode of Operation ...................................................................................................................... 8
Cryptographic Functionality........................................................................................................... 9
2.1 Critical Security Parameters....................................................................................................... 11
2.2 Public Security Parameters ........................................................................................................ 12
Roles, Authentication and Services .............................................................................................. 13
3.1 Assumption of Roles .................................................................................................................. 13
3.2 Authentication Methods............................................................................................................ 14
3.3 Services ...................................................................................................................................... 15
Self-Tests..................................................................................................................................... 23
Physical Security Policy................................................................................................................ 25
Operational Environment ............................................................................................................ 26
Mitigation of Other Attacks Policy ............................................................................................... 27
Security Rules and Guidance........................................................................................................ 28
8.1 Invariant Rules ........................................................................................................................... 28
8.2 Cryptographic Officer Initialization............................................................................................ 28
8.3 Un-Initialize the Module ............................................................................................................ 29
8.4 Firmware Update ....................................................................................................................... 29
References and Definitions .......................................................................................................... 31
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 4 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
List of Tables
Table 1: Security Level of Security Requirements.........................................................................................5
Table 2: Module Configurations ................................................................................................................... 5
Table 3: Ports and Interfaces ........................................................................................................................ 7
Table 4: Approved Cryptographic Functions.................................................................................................9
Table 5: Critical Security Parameters..........................................................................................................11
Table 6: Public Security Parameters ...........................................................................................................12
Table 7: Authenticated Roles...................................................................................................................... 13
Table 8: Unauthenticated Roles..................................................................................................................14
Table 9: Authentication Description...........................................................................................................14
Table 10: Unauthenticated Services ...........................................................................................................15
Table 11: Authenticated Services ...............................................................................................................16
Table 12: CSP Access within Services..........................................................................................................18
Table 13: PSP Access within Services..........................................................................................................21
Table 14: Power-On Self-Tests.................................................................................................................... 23
Table 15: Conditional Self-Tests..................................................................................................................24
Table 16: References................................................................................................................................... 31
Table 17: Acronyms and Definitions ...........................................................................................................32
List of Figures
Figure 1: PE8110 M.2 22110D Form Factor..................................................................................................6
Figure 2: Top View with Physical Cryptographic Boundary ..........................................................................6
Figure 3: Bottom View with Physical Cryptographic Boundary ....................................................................6
Figure 4: Module Block Diagram................................................................................................................... 7
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 5 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Introduction
This document defines the Security Policy for the SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED
cryptographic module, hereafter denoted the Module. The Module is a multiple chip embedded self-
encrypting drive (SED) compliant with TCG Core, TCG Opal, TCG Single User Mode (SUM), PCIe, and NVMe
specifications. It is also compliant with the IEEE1667 storage specification. The cryptographic module’s
controller has a built-in AES-XTS HW engine which encrypts and decrypts the user data without any
performance loss. The Module meets FIPS 140-2 overall security Level 1.
The FIPS 140-2 security levels for the Module are as follows:
Table 1: Security Level of Security Requirements
Security Requirement Security Level
Cryptographic Module Specification 1
Cryptographic Module Ports and Interfaces 1
Roles, Services, and Authentication 1
Finite State Model 1
Physical Security 1
Operational Environment N/A
Cryptographic Key Management 1
EMI/EMC 1
Self-Tests 1
Design Assurance 1
Mitigation of Other Attacks N/A
Overall Level 1
The Module has the following configurations:
Table 2: Module Configurations
HW P/N and Version FW Version Description
1 HFS960GDE0X098N 41081A10 960GB
2 HFS1T9GDE0X098N 41081A10 1.9TB
3 HFS3T8GDE0X098N 41081A10 3.8TB
1.1 Hardware and Cryptographic Boundary
The Module is designed to be embedded in a General Purpose Computer (host) and is connected through
the PCIe connecter. The module does not support a maintenance access interface.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 6 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
The Module PE8110 has an M.2 22110D physical form factor as depicted in Figure 1. The components
exposed are depicted in Figure 2 and Figure 3. The cryptographic boundary is defined as the entire PCB as
indicated by the red outline in Figure 2 and Figure 3.
Figure 1: PE8110 M.2 22110D Form Factor
Figure 2: Top View with Physical Cryptographic Boundary
Figure 3: Bottom View with Physical Cryptographic Boundary
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 7 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Table 3: Ports and Interfaces
Port Interfaces Description Logical Interface Type
PCIe
Connector
Power Power Connector Power
NVMe NVMe interface Control in, Data in, Data out, Status out
SMBus Management Interface Control in, Status out
JTAG Debug Port
(permanently disabled)
N/A
UART Debug Port
(permanently disabled)
N/A
1.1.1 NVMe Interface
The NVMe interface provides the primary interface to interact with the Module. Most services provided
by the Module are accessed via the NVMe Interface including Opal configuration, reading and writing user
data, retrieving FIPS capability support, and retrieving FIPS status reporting.
1.1.2 SMBus Interface
The SMBus interface provides the ability to audit the SSD environment (temperature, Vital Product Data).
1.2 Block Diagram with Cryptographic Boundary
The Module uses a single chip controller (Aquarius) with a PCIe/NVMe and SMBus interface on the
systems side and SK hynix NAND flash internally. The following figure depicts the Module operational
environment. The red outline in Figure 4 below depicts the cryptographic boundary which is the physical
boundary as depicted above (Figure 3). All firmware runs on the controller within this boundary.
Figure 4: Module Block Diagram
Aquarius Controller
Nand
Nand
SK HYNIX NAND Memory
PCIe/NVMe
DRAM
NAND
Interface
ROM
CPU
PMC
SRAM
ECC
DRAM Interface
PCIe/
NVMe
Interface
SMBus
Interface
AES 256
TRNG CTR DRBG
SHA/HMAC
SMBus
Power
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 8 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
The Module is composed of the following components:
• Aquarius Controller – The controller SoC (System On Chip). This component is responsible for
terminating PCIe/NVMe commands; reading or writing data to the Host platform; encrypting or
decrypting data from the Host platform; and storing or retrieving data to SK hynix NAND nonvolatile
memory.
• PMC – Power Management Controller –Manages power control of the Module
• PCIe/NVMe Interface – Provides PCI/NVMe Interface access to the controller
• SMBus Interface – Provides SMBus Interface access to the controller
• CPU – Central Processing Unit of the controller
• ROM – Read only memory – Non-volatile memory which has first bootable code for controller
• ECC – Error Correction Code memory provides Error correction and detection access to the
controller
• SRAM – Static Random Access memory
• DRAM Interface – Provides access to SK hynix DRAM
• NAND Interface – Provides access to SK hynix NAND Memory
• SK hynix DRAM – Dynamic Random Access Memory. DRAM Provides variable storage, instruction
memory, data mapping tables and buffer for user data going into and out of the device.
• SK hynix NAND memory – NAND flash is the storage medium where encrypted user data, firmware
for the Aquarius controller, and other non-volatile configuration data needed by the Aquarius
controller during execution.
The Module relies on the PCIe/NVMe interface as input/output devices.
1.3 Mode of Operation
The Module is always in the FIPS Approved Mode of operation. The module has two distinct operational
modes in the approved mode of operation as described below.
• Uninitialized Mode – In this operational state, the ownership of the drive is not taken. Once the
ownership is taken, the module transitions to initialized mode.
• Initialized Mode - In this operational state, the ownership of the drive is taken. To initialize the
drive, the module owner must take ownership of the device and activate Locking SP by following
steps in the Crypto Officer Initialization section from the uninitialized mode.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 9 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Cryptographic Functionality
The Module implements the FIPS Approved cryptographic functions listed in the tables below. The term
FIPS Approved cryptographic function is defined by FIPS 140-2 specifications.
Table 4: Approved Cryptographic Functions
Cert Algorithm Mode Description Functions/Caveats
A913 AES [197]
ECB [38A]
Key Sizes: 256
Boundary: Hardware
Encrypt, Decrypt
Underlying for XTS, KW,
and CTR_DRBG
XTS [38E]
Key Sizes: 256
Per IG A.9, the module
assures Key1 and Key2 are not
equal.
Boundary: Hardware
Encrypt, Decrypt
A913 AES [197] KW [38F]
Forward
Key Sizes: 256
Boundary: Hardware
Authenticated Encrypt,
Authenticated Decrypt
VA CKG [IG D.12]
[133 Rev2] Section 6.10F
1
Direct Symmetric Key
generation using
unmodified DRBG output
[133 Rev2] Section 6.2.31F
2 Derivation of symmetric
keys from a Password
A912 DRBG [90A] CTR
Prediction Resistance: Yes, No
Supports Reseed
Mode: AES-256
Derivation Function Enabled:
Yes
Additional Input: 0-2048
Increment 128
Entropy Input: 256-2048
Increment 128
Nonce: 128-1024 Increment
128
Personalization String Length:
0-2048 Increment 128
Returned Bits: 512
Additional Input used: 256 Bits
Entropy Input used: 1792 Bits
Nonce used: 896 Bits
Personalization String: 256 Bits
Deterministic Random Bit
Generation
1
CKG – The module performs Cryptographic Key Generation (CKG) meeting the requirements in FIPS 140-
2 IG D.12 and SP 800-133 rev2, Section 6.1. The generated symmetric key is the unmodified output from
the Approved SP 800-90A AES-256 CTR DRBG.
2
CKG – The module performs Cryptographic Key Generation (CKG) meeting the requirements in FIPS 140-
2 IG D.12 and SP 800-133 rev2, Section 6.2.3. The symmetric key is derived from a password using the
Approved SP 800-132 PBKDF. The key can only be used for storage applications.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 10 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Cert Algorithm Mode Description Functions/Caveats
Boundary: Firmware
A913 HMAC [198-1] SHA-256
Key Sizes: 256 bits
λ = 32 bytes
Boundary: Hardware
Integrity Check Public
Security Parameter (PSP)
and PBKDF
ENT (P)
ENT (P) [90B]
[Annex C]
–
Hardware Non-Deterministic
RNG; minimum of 512 bits per
access.
Boundary: Hardware
The ENT (P) output is
used to seed the
Approved DRBG.
Synopsys
A912 PBKDF [132] Option 1a
sLen = 32 bytes salt
C = 1,000 iterations
HMAC SHA-256 Cert. #A913
Boundary: Firmware
Password Based Key
Derivation. The keys
derived from passwords
are used only in storage
application. The
probability of guessing
the key is 1/(2^256) =
1.16e+77.
A912 RSA [186-4] PSS
n = 2048 SHA 256
Boundary: Firmware
SigVer - Digital Signature
verification (Firmware
Download, Maker
Authentication)
Firmware
A914 RSA [186-4] PSS
n = 2048 SHA 256
Boundary: Hardware
SigVer - Digital Signature
verification (ROM Secure
Boot)
Hardware
A913 SHS [180-4] SHA-256 Boundary: Hardware
Firmware Integrity Self-
Test and HMAC-SHA-256
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 11 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
2.1 Critical Security Parameters
All CSPs used by the Module are described in this section. All usage of these CSPs is described in the
services detailed in Section 4.
Table 5: Critical Security Parameters
CSP Description / Usage
DRBG-EI Deterministic Random Bit Generator – Entropy Input
Size: 1792 bits of entropy data. Provides 268 bits of security strength. (268.8 bits of
min-entropy input without a nonce.)
DRBG V The secret value V (128 bits) in the current DRBG internal working state
DRBG Key The secret Key (256 bits) in the current DRBG internal working state
DRBG
seed_material
The DRBG-internal seed_material value (2944 bits) used within the CTR_DRBG
algorithm
CO Password Crypto Officer password
Type: Password
Purpose: used for authenticating the CO role
User Password User Password
Type: Password
Purpose: used for authenticating User roles
HRK Hidden Root Key
Type: AES wrapping key
Purpose: Used to wrap following keys: PSP_HMAC_KEY, MEK_KEK, TPER_SALT_KEK,
and KS_HMAC_KEY.
PSP_HMAC_KEY Public Security Parameter HMAC Key
Type: 256-bit
Purpose: Key is used for PSP Integrity Check
MEK_KEK Type: AES 256
Purpose: Key wraps the MEKs.
TPER_SALT_KEK Type: AES 256
Purpose: Key wraps the SALT PSP.
KS_HMAC_KEY Type: HMAC
Purpose: Key is used to RSA public key integrity check
TPER_KEK Type: AES 256
Purpose: Key wraps the MEKs.
SUM_KEKi
Where i is 0-8 keys.
Type: AES 256
Purpose: It is the key wrapping key used for MEKs.
MEKj
Where j is 0-8 keys.
Type: AES 256
Purpose: MEK0 is the Global Range Key. MEK1-8 keys are used for User data encryption.
AUTH_KEYm
Where m is 0-15 keys.
Type: key derived from PBKDF2 using password provided by the host. This includes
the CO and User passwords.
Purpose: Key is used for KEK wrapping.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 12 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
2.2 Public Security Parameters
Table 6: Public Security Parameters
Key Description / Usage
SALT This is the 256-bit salt used as input to the PBKDF2. A unique salt is associated
with the derivation of each AUTH_KEY.
PSID PIN This 32-byte PIN is used to access the TCG Revert service. The PSID PIN is visibly
printed on a production label on the Module.
MSID PIN This 32-byte default PIN is used to authenticate the CO role (Admin SP SID)
during the Initialize service. It can be displayed via the Show Status/Read
Security Configuration service.
FW Public Key Type: 2048-bit RSA Public Key
Purpose: Key is used for RSA signature verification of the firmware image.
Maker Public Key Type: 2048-bit RSA Public Key
Purpose: Key is used to authenticate Maker role to access Zeroize service.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 13 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Roles, Authentication and Services
3.1 Assumption of Roles
The module supports Cryptographic Officer (CO), User, Maker and PSID roles. The method for assuming a
role is explicit by the TCG authentication. The operator of the module is not required to authenticate as
this is a Level 1 module. However, a password authentication is required to assume CO, User and PSID
role as per the module design, although the provided mechanism does not fully comply with FIPS
authentication requirement and so cannot be claimed as Authentication in this context.
The cryptographic module enforces the separation of roles by enforcing re-authentication with the
appropriate password (or PIN) when changing roles. Note that although each TCG role includes a unique
identifier (UID) as part of the authentication process, authentication is still considered role-based because
the UID corresponds to the TCG role itself, not an individual operator.
Table 7 lists all operator roles supported by the module. The Module does not support a maintenance role
and/or bypass capability. The Module does not support concurrent operators. Authentication data is
stored encrypted and never output from the module. Authentication is cleared during each power cycle.
Table 7: Authenticated Roles
Role
Name
Description / Corresponding Roles Authentication Data Authentication
Type
CO Crypto Officer –
- Admin SP SID - This role is responsible
for transitioning from uninitialized
mode to initialized mode.
- Admin SP Admin 1 – This role is
disabled by default but can be enabled
by SID authority. When enabled, it can
transition the Module back to
uninitialized mode from initialized
mode.
- Locking SP Admin 1, 2, 3, and 4 –This
role is used to enable and disable Users,
create and delete user ranges, lock or
unlock the ranges and cryptographically
erase the user ranges.
Password
- After five (5) failure
attempts requires
power cycle to
authenticate again
Authentication
is not required
for FIPS 140-2
Level 1.
A password
mechanism is
provided but
does not
comply with
FIPS 140-2.
User User –
- Locking SP User 1 – 9 - This role can
unlock and lock the drive to allow the
operator to read and write data to the
drive. This user can also call the
Cryptographic Erase service.
Password
- After five (5) failure
attempts requires
power cycle to
authenticate again
Authentication
is not required
for FIPS 140-2
Level 1.
A password
mechanism is
provided but
does not
comply with
FIPS 140-2.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 14 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Maker Maker –
This is an assumed role which enables the
operate to execute Zeroize Service
command.
RSA Signature
- After five (5) failure
attempts requires
power cycle to
authenticate again
Role-based
PSID TCG PSID Authority –
This authority is considered an
authenticated role because the PSID PIN
(32 bytes) must be entered to perform the
PSID Revert as an authenticated service.
The PSID PIN is intended to only be
available to an operator that is physically
present with the Module. This role is used
to access PSID Revert service.
PIN
After five (5) failure
attempts requires
power cycle to
authenticate again
Authentication
is not required
for FIPS 140-2
Level 1.
A PIN
mechanism is
provided but
does not
comply with
FIPS 140-2.
Table 8: Unauthenticated Roles
Role Name Description
Anybody - TCG Anybody Authority – This authority is considered unauthenticated because no
password is needed for this authority. This authority can read the MSID PIN, and
other security configuration data through TCG Get method. It has a 64-bit UID.
3.2 Authentication Methods
The module supports PIN authentication and RSA Signature verification methods. The strength of
authentication is described in Table 9.
Table 9: Authentication Description
Authentication
Method
Description
Password
(or PIN)
The module’s minimum Password/PIN length is zero bytes, but a 32 byte length is
recommended. If a particular Password/PIN has a length of zero bytes, then
authentication by Password/PIN is disabled.
RSA Signature Key Length is 2048-bit, Key strength is equal to 112 bits.
RSA 2048 has a key strength of 112 bits, which is the minimum approved by CMVP.
The probability of guessing the key of 112 bit strength is 1/(2^112) = 1/(5.19e+33)
= 1.9e-34, which is less than 1/1,000,000. This effectively eliminates the possibility
of determining the private key through exhaustive methods. Each verification takes
86 milliseconds. Limiting it to less than 11 attempts per second.
After five (5) consecutive unsuccessful authentication attempts have occurred, the
Module requires a reset before any more login attempts can be attempted. The
reset time required in performing a reset to the Module is eight (8) seconds.
Therefore, a maximum of (60/(11 + 8))*5 = 15 attempts are possible in one minute
and the probability that a false acceptance occurs over a one minute interval is 15/
2^112 = 2.89e-33, which is smaller than 1/100,000.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 15 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
3.3 Services
All services implemented by the Module are listed in the tables below. CSP usage for each service
described is specified in Table 10 below. The services highlighted in bold in Table 10 and Table 11can be
called in uninitialized mode.
The unauthenticated Anybody role can do unauthenticated services.
Table 10: Unauthenticated Services
Service Description
Power Cycle
(Self-Test)
Powers the module off and on again. This triggers the following:
1. Power-On Self-Tests of the Module.
2. Unblock locked-out authorities that have exhausted their Try Limit.
3. Enable CO authority (Admins SP SID) if it is previously blocked by Block
SID Authentication service.
Hot reset Resets one of the ports of the Module by performing a PCIe Hot Reset.
Warm reset Resets the Module by performing an NVMe Subsystem Reset or PCIe Warm
reset.
Show Status This is a set of commands from the TCG and NVMe protocols to read Security
Configuration. Specifically, this includes NVMe Security Send/Receive, Identify
Controller commands, which can be used for reading FIPS mode
(Initialized/Uninitialized), error messages, and other status information.
The FIPS Mode indicator is a subset of the NVMe Security Receive command (TCG
Level 0 Discovery) and the returned word of the NVMe Identify Controller
command (word at offset 4092, bit 0).
Read FIPS
Compliance
The Module’s FIPS 140 Compliance descriptor (hardware and firmware versions)
can be retrieved in the format specified by SFSC specification using TCG IF-RECV
command with Protocol Id 0 and ComID 2.
Block SID
Authentication
Disables CO (Admin SP SID) authentication when ownership of the drive is not
taken.
TCG Authentication Authenticates an operator using TCG PIN through Start session or TCG
Authentication method.
Enable Zeroization
Service
Authenticates an operator using RSA 2048 signature verification using
Zeroization Public Key (the Maker Public Key).
Get Random Number TCG Random method used to generate and output a random number from the
DRBG
Telemetry logs The Module allows the collection of debugging information through NVMe log
pages. The purpose of the telemetry log data is to provide information required
to debug firmware issues remotely.
Read/Write User
Data
Reads/Writes user data. This service is only successful if the module is in
uninitialized mode.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 16 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Service Description
Firmware Update Loads a firmware image. All firmware loaded into the module is authenticated
with RSA signature verification over the entire firmware image. Loaded firmware
only executes if the firmware load test is successful. The version of the loaded
firmware must be listed on the Module’s FIPS certificate in order to remain in an
Approved Mode.
Format NVM /
Namespace
Management
Wipes the data of a particular namespace by generating new MEK. This service
is only successful if the range is unlocked for read/write access via Lock/Unlock
range service.
Sanitize Wipes the data of a particular namespace by generating new MEK. This service
is accessible only in Uninitialized mode.
Enable/Disable
edrive mode
Enables or disables edrive mode. In edrive mode, the Probe Silo specific
commands can be issued, and the TCG commands and responses can be
transported within the IEEE1667 protocol.
Probe Silo specific
commands (edrive
mode only)
The Probe Silo specific commands can be issued only in the edrive mode to
configure silos within the module and get IEEE1667 capabilities of the module.
Note:
• CO= Cryptographic Officer Role
• U = User Role
• M = Maker Role
• ASP = Admin SP (Security Provider)
• LSP = Locking SP (Security Provider)
• P = PSID Role
Table 11: Authenticated Services
Service Description
CO U M P
ASP
SID
ASP
Admin
1
LSP
Admin
1
-
4
LSP
User
1
-
9
Maker
PSID
Take ownership
Changes default password of SID to a value other than
MSID.
X - - - - -
Activate OPAL
Enables Locking SP via TCG Activate method. Activate
method can enable SUM.
X - - - - -
Deactivate
OPAL
Reverts the drive back to the Original Factory State
through TCG Revert or Revert SP methods.
Note: For Revert SP,
1. Global Range data is preserved if KeepGlobal
parameter is TRUE.
2. TPER_SALT_KEK and PSP_HMAC_KEY are also
preserved.
X X X - - -
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 17 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Service Description
CO U M P
ASP
SID
ASP
Admin
1
LSP
Admin
1
-
4
LSP
User
1
-
9
Maker
PSID
Admin Set PIN
Updates Admin authority PIN.
X X X - - -
User Set PIN
Updates User authority PIN.
Locking SP Admins can set PINs for any Non-SUM Users.
- - X X - -
Enable/Disable
User Set PIN
Disables a non-SUM User’s ability to change its own PIN. - - X - - -
Enable/Disable
Admin SP
authorities
Enables or disables an Admin SP authority. X - - - - -
Enable/Disable
Locking SP
authorities
Enables or disables a Locking SP Admins and non-SUM
Users.
- - X - - -
Enable/Disable
SUM
Configures users and ranges in SUM through TCG
Reactivate method.
- - X - - -
Locking Range
Configuration
For non-SUM ranges: Used to modify a range starting
address, capacity, and attributes of non-SUM ranges.
- - X - - -
For SUM Policy 1: Used to modify a SUM range starting
address, capacity and attributes by Admins if allowed.
- - X - - -
For SUM Policy 0: Used to modify a SUM range starting
address, capacity and attributes by SUM Users if allowed.
- - - X - -
Lock/Unlock
range
Controls read and write access to a range by either locking
or unlocking the LBA range. In Non-SUM, Admins and
Users (if allowed by Admins) have access. In SUM, only
Users have access.
- - X X - -
Set common
name
Customizes the name of a TCG Authority. Admins and
Users (if allowed by Admins) have access.
- - X X - -
Data store table
Set
Writes a stream of bytes to unstructured storage. Admins
and Users (if allowed by Admins) have access.
- - X X - -
Crypto Erase of
a range
For Non-SUM Ranges: Erases a range by destroying its
existing MEK and generating a new one. This service is
performed via TCG GenKey method. By default, Admins
have access. If Admins allows, Users also have access.
- - X X - -
For SUM Ranges via TCG Erase method: Erases a range by
destroying its existing MEK and generating a new one. The
range’s LBA range is unlocked, and the User PIN is reset to
the NULL password. This service is performed via the TCG
Erase method.
- - X X - -
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 18 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Service Description
CO U M P
ASP
SID
ASP
Admin
1
LSP
Admin
1
-
4
LSP
User
1
-
9
Maker
PSID
For SUM Ranges via TCG GenKey method: Erases a range
by destroying its existing MEK and generating a new one.
This service is performed via the TCG GenKey method.
- - - X - -
Read/Write
User Data
Reads/Writes user data. This service is only successful if
the range is unlocked for read/write access via
Lock/Unlock range service.
- - X X - -
Zeroization
Destruction of plaintext keys and CSPs. This service
decommissions the drive.
- - - - X -
PSID Revert
TCG Revert method using PSID. This service returns the
Module to its original factory state. The authentication
data (PSID) is printed on the label of the Module.
- - - - - X
• G = Generate: The Module generates or derives the CSP.
• I = Input: The CSP is input into the Module.
• X = Execute: The Module reads and uses the CSP.
• W = Write: The Module writes the CSP to storage.
• Z = Zeroize: The module zeroizes the CSP.
• - = Not accessed by the service.
Table 12: CSP Access within Services
Service
CSPs
CO
Password
User
Password
DRBG-EI
DRBG
V
DRBG
Key
DRBG
seed_material
HRK
PSP_HMAC_KEY
MEK_KEK
TPER_SALT_KEK
KS_HMAC_KEY
TPER_KEK
SUM_KEK
i
MEK
j
AUTH_KEY
m
Authenticated Services
Take ownership
I,
X,
Z
-
G,
X,
Z
X,
G
X,
G
X,
G
- X - X -
G,
X
- -
G,
X,
Z
Activate OPAL
I,
X,
Z
X
G,
X,
Z
X,
G
X,
G
X,
G
- X - X - -
G,
X
-
G,
X,
Z
Deactivate OPAL X -
G,
X,
Z
X,
G,
Z
X,
G,
Z
X,
G,
Z
X
Z,
G,
X
Z,
G,
X
Z,
G,
X
-
X,
Z
X,
Z
X,
Z,
G
G,
X,
Z
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 19 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Service
CSPs
CO
Password
User
Password
DRBG-EI
DRBG
V
DRBG
Key
DRBG
seed_material
HRK
PSP_HMAC_KEY
MEK_KEK
TPER_SALT_KEK
KS_HMAC_KEY
TPER_KEK
SUM_KEK
i
MEK
j
AUTH_KEY
m
Admin Set PIN
I,
X,
Z
-
G,
X,
Z
X,
G
X,
G
X,
G
- X - X - X -- -
G,
X,
Z
User Set PIN -
I,
X,
Z
G,
X,
Z
X,
G
X,
G
X,
G
- X - X - X X -
G,
X,
Z
Enable/Disable User Set
PIN
- - - - - - - X - - - - - - -
Enable/Disable Admin SP
authorities
X -
G,
X,
Z
X,
G
X,
G
X,
G
- X - X - - - -
G,
X,
Z
Enable/Disable Locking SP
authorities
X X
G,
X,
Z
X,
G
X,
G
X,
G
- X - X - X - -
G,
X,
Z
Enable/Disable SUM
I,
X,
Z
X
G,
X,
Z
X,
G
X,
G
X,
G
- X - X -
Z,
G,
X
Z,
G,
X
-
G,
X,
Z
Locking Range
Configuration
- -
G,
X,
Z
X,
G
X,
G
X,
G
- X X - - X X
G,
X,
Z
-
Lock/Unlock range - - - - - - - X - - - X X
X,
Z
-
Set common name - - - - - - - X - - - - - - -
Data store table Set - - - - - - - X - - - - - - -
Crypto Erase of a range - X
G,
X,
Z
X,
G
X,
G
X,
G
- X X X - X X
Z,
G,
X
G,
X,
Z
Read/Write User Data - - - - - - - - - - - - - X -
Zeroization - - - Z Z Z Z Z, Z Z Z Z Z Z -
PSID Revert X -
G,
X,
Z
X,
G,
Z
X,
G,
Z
X,
G,
Z
X
Z,
G,
X
Z,
G,
X
Z,
G,
X
- Z Z
Z,
G
G,
X,
Z
Unauthenticated Services
Power Cycle
(Self-Test)
- - -
X,
G,
Z
X,
G,
Z
X,
G,
Z
X X X X X - - X -
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 20 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Service
CSPs
CO
Password
User
Password
DRBG-EI
DRBG
V
DRBG
Key
DRBG
seed_material
HRK
PSP_HMAC_KEY
MEK_KEK
TPER_SALT_KEK
KS_HMAC_KEY
TPER_KEK
SUM_KEK
i
MEK
j
AUTH_KEY
m
Hot reset - - - - - - - - - - - - - - -
Warm reset - - - - - - - X - - - - - - -
Show Status - - - - - - - - - - - - - - -
Read FIPS Compliance - - - - - - - - - - - - - - -
Block SID Authentication - - - - - - - - - - - - - - -
TCG Authentication
I,
X,
Z
I,
X,
Z
G,
X,
Z
X,
G
X,
G
X,
G
- X - X -
G,
X
X -
G,
X,
Z
Enable Zeroization Service - -
G,
X,
Z
X,
G
X,
G
X,
G
- - - - - - - - -
Get Random Number - -
G,
X,
Z
X,
G
X,
G
X,
G
- - - - - - - - -
Firmware update - - - - - - X - - - X - - - -
Telemetry logs - - - - - - - - - - - - - - -
Read/Write User Data - - - - - - - - - - - - - X -
Format / Namespace
Management
- -
G,
X,
Z
X,
G
X,
G
X,
G
- X X - - X X
Z,
G,
X
-
Sanitize - -
G,
X,
Z
X,
G
X,
G
X,
G
- X X - - - -
Z,
G,
X
-
Enable/Disable edrive
mode
- - - - - - - - - - - - - - -
Probe Silo specific
commands (edrive mode
only)
- - - - - - - - - - - - - - -
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 21 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
• G = Generate: The Module generates or derives the PSP.
• I = Input: The PSP is input into the Module.
• X = Execute: The Module reads and uses the PSP.
• - = Not accessed by the service.
Table 13: PSP Access within Services
PSPs
SALT
PSID
PIN
MSID
PIN
FW
Public
Key
Maker
Public
Key
Authenticated Services
Take ownership G, X - - - -
Activate OPAL G, X - - - -
Deactivate OPAL G, X - X - -
Admin Set PIN G, X - - - -
User Set PIN G, X - - - -
Enable/Disable User Set PIN - - - - -
Enable/Disable Admin SP authorities G, X - - - -
Enable/Disable Locking SP authorities G, X - - - -
Enable/Disable SUM G, X - - - -
Locking Range Configuration - - - - -
Lock/Unlock range - - - - -
Set common name - - - - -
Data store table Set - - - - -
Crypto Erase of a range G, X - - - -
Read/Write User Data - - - - -
Zeroization - - - - -
PSID Revert G, X - X - -
Unauthenticated Services
Power Cycle
(Self-Test)
- - - X -
Hot reset - - - - -
Warm reset - - - - -
Show Status - - - - -
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 22 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
PSPs
SALT
PSID
PIN
MSID
PIN
FW
Public
Key
Maker
Public
Key
Read FIPS Compliance - - - - -
Block SID Authentication - - - - -
TCG Authentication G, X I, X - - -
Enable Zeroization Service - - - - X
Get Random Number - - - - -
Firmware update - - - X -
Telemetry logs - - - - -
Read/Write User Data - - - - -
Format / Namespace Management - - - - -
Sanitize - - - - -
Enable/Disable edrive mode - - - - -
Probe Silo specific commands (edrive mode
only)
- - - - -
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 23 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Self-Tests
Each Time the Module is powered up, tests are run to guarantee the proper functioning of the crypto
algorithms. Power on self-tests are available on demand by power cycling the Module.
On power-on or reset, the Module performs self-tests as described in Table 14 below. All KATs must be
completed successfully prior to any other use of cryptography by the Module. If one of the KATs fails
during the ROM boot stage of the device, then the Module enters an internal error state. If the Module
has exited ROM boot stage, the Module enters SELF_TEST_ERROR state which can be retrieved by NVMe
Identify Controller command word at offset 4092, bit 0 will be 1. Power cycle is required to recover the
Module from self-test failure.
Table 14: Power-On Self-Tests
Test Target Description Failure Behavior
Firmware
Integrity
RSA 2048 and SHA-256 verification performed
over all firmware located in NAND storage on the
Aquarius controller.
Enters INTERNAL_STATE_ERROR
state.
The SSD will not enumerate,
PCI_DEVICE_ID value will be
0x0100
RSA (Cert.
#A914)
RSA PSS verify with 2048bit key is used for the
firmware integrity test.
Enters INTERNAL_STATE_ERROR
state.
The SSD will not enumerate,
PCI_DEVICE_ID value will be
0x0100 (This error would be found
during the firmware integrity self-
test.)
SHA RSA is used to verify the signature of the
firmware and a KAT of the underlying SHA-256
hashing function is not required. SHA-256 is
tested in the Firmware Integrity test.
Enters INTERNAL_STATE_ERROR
state.
The SSD will not enumerate,
PCI_DEVICE_ID value will be
0x0100 (This error would be found
during the firmware integrity self-
test.)
RSA (Cert.
#A912)
Only RSA PSS verify with 2048-bit key is
implemented in the module. This SigVer must be
tested separately from the one for Cert. #A914).
Enters INTERNAL_STATE_ERROR
state.
The SSD will not enumerate,
PCI_DEVICE_ID value will be
0x0100.
AES-XTS Performs encrypt and decrypt KATs using a 256-
bit key.
Enters SELF_TEST_ERROR state.
AES-ECB Encryption and Decryption KATs
Key size: 256 bits
Enters SELF_TEST_ERROR state.
AES-KW KATs: Both forward and inverse ciphers are
tested via encryption and decryption. See IG 9.4
Modes: KW
Key size: 256 bits
Enters SELF_TEST_ERROR state.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 24 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Test Target Description Failure Behavior
Note: This test covers AES-ECB as per IG 9.4, #4
(c).
HMAC Performs HMAC generate and verify KATs using a
256-bit key.
Enters SELF_TEST_ERROR state.
PBKDF Performs KAT using a known password and 256-
bit key.
Enters SELF_TEST_ERROR state.
DRBG Performs a fixed input KAT inclusive of the SP
800-90A instantiate, generate, and reseed health
tests.
Mode: AES CTR DRBG
Enters SELF_TEST_ERROR state.
ENT (P) Performs ENT (P) startup test. Generates noise
that will force RCT and APT on 1024 bits. The
tests are run on each block of consecutive 1024
raw samples.
Enters SELF_TEST_ERROR state.
Table 15: Conditional Self-Tests
Test Target Description Failure Behavior
ENT (P) The Module performs a Continuous Random
Number Generator Test (RCT and APT) for each
call to the ENT (P).
Enters SELF_TEST_ERROR state.
AES XTS Key
generation
An IG A.9 key comparison test is performed on
Key1 and Key2 for each generation.
Enters SELF_TEST_ERROR state.
Firmware
load Test
The Module performs a SHA-256 and RSA 2048
(Cert. #A912) signature verification on all firmware
loaded into the Module.
The Module returns invalid image
for download commit command
and the image is discarded. The
module transitions back to the
Unauthenticated Service
Processor state without entering
an error state.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 25 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Physical Security Policy
The Module meets commercial-grade specifications for power, temperature, reliability, and
shock/vibrations. The Module uses standard passivation techniques.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 26 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Operational Environment
The Module is designated as a non-modifiable operational environment under the FIPS 140-2 definitions.
The Module includes a firmware load service to support necessary updates. The Module will not load or
execute firmware which is not signed with SK hynix 2048-bit RSA Private Key. The mechanism available to
perform a firmware load is through NVMe Firmware Download and Commit command. New firmware
versions within the scope of this validation must be validated through the CMVP under FIPS 140-2. Any
other firmware loaded into this module is out of the scope of this validation and require a separate FIPS
140-2 validation.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 27 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Mitigation of Other Attacks Policy
The Module does not support the mitigation of other attacks outside the scope of FIPS 140-2.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 28 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Security Rules and Guidance
The Module design corresponds to the Module Security rules. This section documents the security rules
enforced by the Module and the Cryptographic Officer instructions that are necessary to implement in
order to maintain compliance with FIPS 140-2 security requirements.
8.1 Invariant Rules
The Module implementation also enforces the following security rules:
1. No additional interface or service is implemented by the Module which would provide access to
CSPs.
2. Data output is inhibited during self-tests, Key generation, Zeroization and in error states.
3. Data output is logically disconnected while the Module is performing key generation and
zeroization.
4. All the CSPs are zeroized by the zeroization service. Only the Maker role can call the zeroization
service.
5. The module does not support manual key entry.
6. The module does not output plaintext CSPs or intermediate key values.
7. Status information does not contain CSPs or sensitive data that if misused could lead to a
compromise of the module.
8. The Module does not support a bypass capability.
9. The Module shall provide four (4) distinct operator roles: Cryptographic Officer, User, Maker, and
PSID
10. The Module shall clear previous authentication on power cycle.
11. When the Module has not been placed in a valid role, the operator shall not have access to any
cryptographic services.
12. The operator shall be capable of commanding the Module to perform the power up self-tests by
power cycling or resetting the Module.
13. Power on self-tests do not require any operator action.
14. The Module does not support the update of the serial number and vendor ID.
15. The Module does not support concurrent operators.
8.2 Cryptographic Officer Initialization
The Module is shipped from the factory in an approved mode of operation (uninitialized mode). The keys
generated during manufacturing are used to encrypt/decrypt the user data. The shipping container
protecting the Module or set of Modules in transit should be verified for evidence of tampering.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 29 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
8.2.1 Verifying the Module is in an approved mode of operation
To verify that a module is in the Approved mode of operation the operator will perform the
Read FIPS Compliance by issuing TCG IF-RECV command with Protocol Id 0 and ComID 2. Refer [SFSC]
spec.
For example, the sample of data below is returned from the module:
----------------FIPS 140 compliance descriptor------------------------
COMPLIANCE DESCRIPTOR INFORMATION LENGTH -> 528
COMPLIANCE DESCRIPTOR DESCRIPTOR TYPE -> 1
COMPLIANCE DESCRIPTOR DESCRIPTOR LENGTH -> 520
COMPLIANCE DESCRIPTOR RELATED STANDARD -> FIPS 140-2
COMPLIANCE DESCRIPTOR OVERALL SECURITY LEVEL -> Level-1
COMPLIANCE DESCRIPTOR HARDWARE VERSION -> HFS960GDE0X098N
COMPLIANCE DESCRIPTOR VERSION ->41081A10
COMPLIANCE DESCRIPTOR MODULE NAME -> SK hynix PE8110 M.2 22110D NVMe TCG Opal
SSC SED
----------------------------------------------------------------------
8.2.2 Initialize the Module
The CO should initialize the Module by taking the following steps:
1. Take Ownership - Set Admin SP SID password to a value other than MSID.
2. Activate Opal with Single User Mode.
3. Set WriteLockEnabled and ReadLockEnabled column of all valid Locking ranges.
4. Set PINs for all authorities (Admins and Users) that are enabled.
5. PIN length at least 0 bytes or more but 32 byte length is recommended.
6. Power cycle the Module.
7. Verify the module is in initialized mode by checking the
• LockingEnabled bit of the TCG Level 0 Discovery Locking Feature Descriptor is set to 1.
• WriteLockEnabled and ReadLockEnabled columns of all valid Locking ranges in the Locking
Table are set to True.
8.3 Un-Initialize the Module
The TCG Revert or Revert SP Methods may be invoked by an authenticated role to affect a transition
into the uninitialized mode of operation. The PSID Revert may be done by the PSID role to affect a
transition into the uninitialized mode of operation. This is analogous to restoring the module to the
factory default state.
8.4 Firmware Update
A firmware update loads a firmware image. All firmware loaded into the module is authenticated with
RSA signature verification over the entire firmware image. Loaded firmware only executes if the firmware
load test is successful. The version of the loaded firmware must be listed on the Module’s FIPS certificate
to remain in an Approved Mode.
The firmware update process could be performed with and without the reset, for the first one the host:
1. Issues NVM Firmware Image Download command [NVMe, 5.12].
2. Issues NVM Firmware Commit command [NVMe, 5.11].
3. Performs a Reset.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 30 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Reset causes the loaded firmware to be activated. For the firmware update without the reset, the host:
1. Issues NVM Firmware Image Download command.
2. Issues NVM Firmware Commit command with Commit Action set to 3.
Following the Commit Action, the NVMe controller completes the firmware commit by activating the
loaded firmware.
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 31 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
References and Definitions
The following standards are referred to in this Security Policy
Table 16: References
Acronym Full Specification Name
[FIPS 140-2] NIST, Security Requirements for Cryptographic Modules, May 25, 2001
[Annex C] NIST, Annex C: Approved Random Number Generators for FIPS PUB 140-2, June 10, 2019
[FIPS 180-4] NIST, Secure Hash Standard, FIPS Publication 180-4, August 2015
[FIPS 186-4] NIST, Digital Signature Standard (DSS), FIPS Publication 186-4, July 2013
[FIPS 197] NIST, Advanced Encryption Standard (AES), FIPS Publication 197, November 26, 2001
[FIPS 198-1] NIST, The Keyed-Hash Message Authentication Code (HMAC), FIPS Publication 198-1, July 2008
[IG] NIST, Implementation Guidance for FIPS PUB 140-2 and the Cryptographic Module Validation
Program, last updated May 04, 2021
[NVMe] Standard spec available online https://nvmexpress.org/wp-content/uploads/NVM-Express-
1_3c-2018.05.24-Ratified.pdf Revision 1.3C May 24, 2018
[PKCS#1] PKCS #1 v2.1: RSA Cryptography Standard, RSA Laboratories, June 14, 2002
[SFSC] Information technology – Security Features for SCSI Commands (SFSC)
[38A] NIST Special Publication 800-38A, Recommendation for Block Cipher Modes of Operation,
December 2001
[SP800-38E] NIST Special Publication 800-38E, Recommendation for Block Cipher Modes of Operation: The
XTS-AES Mode for Confidentiality on Storage Devices, January 2010
[SP800-38F] NIST Special Publication 800-38F, Recommendation for Block Cipher Modes of Operation:
Methods for Key Wrapping, December 2012
[SP800-90A Rev1] National Institute of Standards and Technology, Recommendation for Random Number
Generation Using Deterministic Random Bit Generators, Special Publication 800-90A Revision
1, June 2015.
[SP800-90B] National Institute of Standards and Technology, Recommendation for the Entropy Sources
Used for Random Bit Generation, Special Publication 800-90B, January 2018.
[SP800-108] NIST Special Publication 800-108, Recommendation for Key Derivation Using Pseudorandom
Functions (Revised), October 2009
[SP800-132] NIST Special Publication 800-132, Recommendation for Password-Based Key Derivation,
December 2010
[SP800-133 Rev2] NIST Special Publication 800-133 Revision 2, Recommendation for Cryptographic Key
Generation, June 2020
[TCG Core] TCG Storage Architecture Core Specification, version 2.01 Revision 1.0, 5 August 2015
[TCG Opal] TCG Storage Security Subsystem Class: Opal Specification, Version 2.01 Revision 1.00, 5 August
2015
[TCG SIIS] TCG Storage Interface Interactions Specification (SIIS), Version .08, 14 August 2018
[TCG ADS] TCG Storage Opal SSC Feature Set: Additional Datastore Tables Specification, Version 1.00
Revision 1.00, 24 February 2012
SK hynix PE8110 M.2 22110D NVMe TCG Opal SSC SED FIPS 140-2 Security Policy
Copyright SK hynix Inc. 2023 Version 1.4 Page 32 of 32
SK hynix Public Material – May be reproduced only in its original entirety (without revision).
Acronym Full Specification Name
[TCG SUM] TCG Storage Opal SSC Feature Set: Single User Mode Specification, Version 1.00 Revision 2.00,
5 August 2015
[TCG PSID] TCG Storage Opal SSC Feature Set: PSID, Version 1.00 Revision 1.00, 5 August 2015
[TCG Block SID] TCG Storage Feature Set: Block SID Authentication, Version 1.00 Final, Revision 1.00, 5 August
2015
[IEEE 1667] IEEE Std 1667-2018 – IEEE Standard for Discovery, Authentication, and Authorization in Host
Attachments of Storage Devices, February 2018
Table 17: Acronyms and Definitions
Acronym Definition
AES Advanced Encryption Standard
APT Adaptive Proportion Test
CO Cryptographic Officer
CSP Critical Security Parameter, see [FIPS 140-2]
DRBG Deterministic Random Bit Generator
ECB Electronic Code Book mode of AES Encryption/Decryption
ENT (P) Entropy – Physical validated entropy source
KAT Known Answer Test
PBKDF Password Based Key Derivation Function
LBA Logical Block Address
MSID Manufactured Security Identifier
MEK Media Encryption Key
NVMe Non-Volatile Memory express
PBKDF Password Based Key Derivation Function
PCIe Peripheral Component Interconnect Express
PSP Public Security Parameter
PIN Personal Identification Number (or Password)
PSID Physical Security Identifier
RCT Repetitive Count Test
RSA Rivest Shamir Adleman
SHA Secure Hash Algorithm
SED Self-Encrypting Drive
SID Security Identifier
SSD Solid-state Drive
SSC Security Subsystem Class
TCG Trusted Computing Group
UID Unique Identifier
XTS XEX Tweakable Block Cipher with Cipher text Stealing