IBM® NVMe FlashCore™ Module 3

Certificate details

Certificate ID	#5088
Status	active
Validation dates	03.11.2025
Sunset date	02-11-2030
Standard	FIPS 140-3
Security level	2
Type	Hardware
Embodiment	Multi-Chip Embedded
Caveat	When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No operator authentication is enforced for executing security services that were unlocked by an authenticated service
Exceptions	Operational environment: N/A Non-invasive security: N/A Mitigation of other attacks: N/A
Description	The IBM(R) NVMe FlashCore(TM) Module 3 is a NVMe-connected self-encrypting non-volatile storage module.
Version (Hardware)	03GH930 with TEL part number: 03JN363, 03GH932 with TEL part number: 03JN363, 03GH934 with TEL part number: 03JN363, 03GH936 with TEL part number: 03JN363
Version (Firmware)	3.1.5.99
Vendor	IBM(R) Corporation http://www.ibm.com
Lab	Leidos Accredited Testing & Evaluation (AT&E) Lab
Algorithms	AES-CBCA6888 AES-ECBAES 5897 AES-KWA6888 AES-KWPA6888 AES-XTS Testing Revision 2.0A2687 AES-XTSAES 5897 Conditioning Component AES-CBC-MAC SP800-90BA6888 Hash DRBGA6888 HMAC-SHA2-256A6888 KDF SP800-108A6888 KTS-IFCA6888 RSA KeyGen (FIPS186-4)A6888 SHA2-256A6888 SHA2-512A6888 SHA3-384A2686
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES, AES-, CAST, HMAC

Asymmetric Algorithms

RSA 4096, RSA-4096

Hash functions

SHA-512, SHA3-384, SHA3

Randomness

DRBG, RBG

Block cipher modes

ECB, CBC, XTS

Trusted Execution Environments

SSC

Security level

Level 2, level 2

Side-channel analysis

Cold boot, cold boot

Standards

FIPS 140-3, FIPS PUB 140-3, FIPS 197, FIPS 202, FIPS 198-1, FIPS 186-4, FIPS 180-4, FIPS PUB 202, SP 800-56B, SP 800-38E, SP 800-38A, SP 800-38F, SP 800-108, SP 800-90B, SP 800-63B, ISO/IEC 24759

Creation date	D:20251028112421-05'00'
Modification date	D:20251028112421-05'00'
Pages	38

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

21.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['AES-KWPA6888', 'RSA KeyGen (FIPS186-4)A6888', 'KDF SP800-108A6888', 'AES-CBCA6888', 'Hash DRBGA6888', 'AES-XTSAES 5897', 'SHA2-512A6888', 'KTS-IFCA6888', 'AES-ECBAES 5897', 'HMAC-SHA2-256A6888', 'AES-KWA6888', 'SHA3-384A2686', 'AES-XTS Testing Revision 2.0A2687', 'SHA2-256A6888', 'Conditioning Component AES-CBC-MAC SP800-90BA6888']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#A2686', '#A1883', '#A6888', '#A2687', '#5897']}}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__delete__': ['Level 1']}}}, 'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA2-256': 47, 'SHA2- 256': 7}, '__delete__': ['DRBG 592']}}}, 'randomness': {'__update__': {'PRNG': {'__update__': {'DRBG': 189}}}}, 'cipher_mode': {'__update__': {'XTS': {'__update__': {'XTS': 4}}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#A2686', '#A1883', '#A6888', '#A2687', '#5897']} values added.

The state was updated.

The policy property was updated, with the {'txt_hash': '3b06d7e63a5474848bdc62cb81ef265ceee6e47d53fac698259591d74de0d1ac', 'json_hash': '9db5c88ae7ce1ebb98d1c3f11fbdd70fe1797378d687abcf23a147a6cc3cbbcb'} data.
20.06.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/November 2025_181225_1202.pdf.
15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
10.11.2025

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5088,
  "dgst": "33c22ac26695fd27",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#A6888",
        "#A2687",
        "KTS-IFCA6888",
        "AES-XTS Testing Revision 2.0A2687",
        "SHA2-256A6888",
        "SHA2-512A6888",
        "#A2686",
        "#5897",
        "AES-KWPA6888",
        "RSA KeyGen (FIPS186-4)A6888",
        "KDF SP800-108A6888",
        "AES-CBCA6888",
        "#A1883",
        "AES-KWA6888",
        "AES-XTSAES 5897",
        "Conditioning Component AES-CBC-MAC SP800-90BA6888",
        "SHA3-384A2686",
        "AES-ECBAES 5897",
        "HMAC-SHA2-256A6888",
        "Hash DRBGA6888"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "3.1.5.99"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "RSA": {
          "RSA 4096": 2,
          "RSA-4096": 3
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "ECB": {
          "ECB": 4
        },
        "XTS": {
          "XTS": 4
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#5897": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "#AES": 1,
          "AES #5897": 2,
          "RSA 4096": 2,
          "SHA-512": 1,
          "SHA2- 256": 7,
          "SHA2-256": 47,
          "SHA2-512": 3,
          "SHA3": 2,
          "SHA3- 384": 1,
          "SHA3-384": 9
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 2": 1,
          "level 2": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA-512": 1
          },
          "SHA3": {
            "SHA3": 2,
            "SHA3-384": 9
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 189
        },
        "RNG": {
          "RBG": 1
        }
      },
      "side_channel_analysis": {
        "other": {
          "Cold boot": 1,
          "cold boot": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 15,
          "FIPS 180-4": 2,
          "FIPS 186-4": 3,
          "FIPS 197": 4,
          "FIPS 198-1": 1,
          "FIPS 202": 2,
          "FIPS PUB 140-3": 2,
          "FIPS PUB 202": 1
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "SP 800-108": 1,
          "SP 800-38A": 1,
          "SP 800-38E": 2,
          "SP 800-38F": 3,
          "SP 800-56B": 1,
          "SP 800-63B": 1,
          "SP 800-90B": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 13,
            "AES-": 4
          },
          "CAST": {
            "CAST": 18
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 2
          }
        }
      },
      "tee_name": {
        "IBM": {
          "SSC": 9
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES-XTS Testing Revision 2.0A2687",
        "SHA2-256A6888",
        "SHA2-512A6888",
        "Conditioning Component AES-CBC-MAC SP800-90BA6888",
        "KTS-IFCA6888",
        "SHA3-384A2686",
        "KDF SP800-108A6888",
        "AES-CBCA6888",
        "AES-KWA6888",
        "AES-ECBAES 5897",
        "Hash DRBGA6888",
        "AES-XTSAES 5897",
        "AES-KWPA6888",
        "HMAC-SHA2-256A6888",
        "RSA KeyGen (FIPS186-4)A6888"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A6888",
        "#A2687",
        "#A1883",
        "#A2686",
        "#5897"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20251028112421-05\u002700\u0027",
      "/ModDate": "D:20251028112421-05\u002700\u0027",
      "pdf_file_size_bytes": 1692645,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "mailto:[email protected]",
          "mailto:[email protected]"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 38
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "9db5c88ae7ce1ebb98d1c3f11fbdd70fe1797378d687abcf23a147a6cc3cbbcb",
      "source_hash": "f5d2e8cbe2607d8aae867c21209b7110a24bfa638046705da21509c7ef8a6e43",
      "txt_hash": "3b06d7e63a5474848bdc62cb81ef265ceee6e47d53fac698259591d74de0d1ac"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No operator authentication is enforced for executing security services that were unlocked by an authenticated service",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/November 2025_181225_1202.pdf",
    "date_sunset": "2030-11-02",
    "description": "The IBM(R) NVMe FlashCore(TM) Module 3 is a NVMe-connected self-encrypting non-volatile storage module.",
    "embodiment": "Multi-Chip Embedded",
    "exceptions": [
      "Operational environment: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": "3.1.5.99",
    "historical_reason": null,
    "hw_versions": "03GH930 with TEL part number: 03JN363, 03GH932 with TEL part number: 03JN363, 03GH934 with TEL part number: 03JN363, 03GH936 with TEL part number: 03JN363",
    "level": 2,
    "mentioned_certs": {},
    "module_name": "IBM\u00ae NVMe FlashCore\u2122 Module 3",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-11-03",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Initial"
      }
    ],
    "vendor": "IBM(R) Corporation",
    "vendor_url": "http://www.ibm.com"
  }
}

Sections

IBM® NVMe FlashCore™ Module 3

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Randomness

Block cipher modes

Trusted Execution Environments

Security level

Side-channel analysis

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

IBM® NVMe FlashCore™ Module 3

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Randomness

Block cipher modes

Device

Trusted Execution Environments

Security

Security level

Side-channel analysis

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data