Samsung NVMe TCG Opal SSC SEDs PM9A3 Series

Certificate details

Certificate ID #4864
Status active
Validation dates 04.11.2024
Sunset date 03-11-2029
Standard FIPS 140-3
Security level 1
Type Hardware
Embodiment Multi-Chip Embedded
Caveat None
Exceptions
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description Samsung NVMe TCG Opal SSC SEDs PM9A3 Series are a high-performance Self-Encrypting SSDs supporting NVMe Interface that provides on-the-fly encryption/decryption of user data without performance loss. It implements AES256-XTS for user data encryption, RSA PSS 3072 for FW authentication, and Hash_DRBG for key generation.
Version (Hardware) MZ1L2960HCJR-00AMV[1], MZ1L21T9HCLS-00AMV[1], MZ1L23T8HBLA-00AMV[1], MZCL21T9HCJR-00AMV[2], MZCL23T8HCLS-00AMV[2], MZCL27T6HBLA-00AMV[2] and MZEL215THBLA-00AMV[3]
Version (Firmware) GDC76M4Q[1], GDC79M4Q[1], GDC62M4Q[2], GDC63M4Q[2], GDDB3M2Q[3] and GDDB4M2Q[3]
Vendor Samsung Electronics Co., Ltd. http://www.samsung.com
Lab Leidos Accredited Testing & Evaluation (AT&E) Lab
Algorithms
  • AES-ECBA1157
  • AES-XTSA1157
  • Hash DRBGA1153
  • RSA SigVer (FIPS186-4)A1155
  • SHA2-256A1158
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-256, HMAC
Asymmetric Algorithms
RSA-3072, ECC
Hash functions
SHA-256, PBKDF2
Randomness
DRBG
Block cipher modes
ECB, XTS

Trusted Execution Environments
SSC
Vendor
Samsung

Security level
Level 1, level 1

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

Feed
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4864,
  "dgst": "3446a7e3222db2ab",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES-XTSA1157",
        "#A1155",
        "#A1157",
        "#A1158",
        "SHA2-256A1158",
        "RSA SigVer (FIPS186-4)A1155",
        "AES-ECBA1157",
        "Hash DRBGA1153",
        "#A1153"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1",
        "3",
        "2"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 32,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          }
        },
        "RSA": {
          "RSA-3072": 2
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "ECB": {
          "ECB": 2
        },
        "XTS": {
          "XTS": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES-256": 2,
          "SHA- 256": 4,
          "SHA-256": 23,
          "SHA2-256": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "level 1": 1
        }
      },
      "hash_function": {
        "PBKDF": {
          "PBKDF2": 1
        },
        "SHA": {
          "SHA2": {
            "SHA-256": 23
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 46
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 28,
          "FIPS 180-4": 1,
          "FIPS 186-4": 1,
          "FIPS 197": 4
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "SP 800-133": 1,
          "SP 800-38A": 1,
          "SP 800-38C": 1,
          "SP 800-38E": 2,
          "SP 800-90A": 6,
          "SP 800-90B": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 6,
            "AES-256": 2
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 1
          }
        }
      },
      "tee_name": {
        "IBM": {
          "SSC": 4
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Samsung": {
          "Samsung": 26
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES-XTSA1157",
        "SHA2-256A1158",
        "RSA SigVer (FIPS186-4)A1155",
        "AES-ECBA1157",
        "Hash DRBGA1153"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A1155",
        "#A1158",
        "#A1157",
        "#A1153"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20241023074156-05\u002700\u0027",
      "/ModDate": "D:20241023074156-05\u002700\u0027",
      "pdf_file_size_bytes": 1026930,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 20
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "414ef8bd8c0f870d91ab6aa904f1d9161b9e0a34d417cc7cadec7310398ddee0",
      "source_hash": "31e3d939afd14e64fbd8930407d1bb83960e75ad6eba8c8d2646b05740f840a2",
      "txt_hash": "3e8fd4cf97281c297525412ff8bd71693553153933d78354e2c1f7bbc1aef230"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "None",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/November 2024_021224_0125.pdf",
    "date_sunset": "2029-11-03",
    "description": "Samsung NVMe TCG Opal SSC SEDs PM9A3 Series are a high-performance Self-Encrypting SSDs supporting NVMe Interface that provides on-the-fly encryption/decryption of user data without performance loss. It implements AES256-XTS for user data encryption, RSA PSS 3072 for FW authentication, and Hash_DRBG for key generation.",
    "embodiment": "Multi-Chip Embedded",
    "exceptions": [
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": "GDC76M4Q[1], GDC79M4Q[1], GDC62M4Q[2], GDC63M4Q[2], GDDB3M2Q[3] and GDDB4M2Q[3]",
    "historical_reason": null,
    "hw_versions": "MZ1L2960HCJR-00AMV[1], MZ1L21T9HCLS-00AMV[1], MZ1L23T8HBLA-00AMV[1], MZCL21T9HCJR-00AMV[2], MZCL23T8HCLS-00AMV[2], MZCL27T6HBLA-00AMV[2] and MZEL215THBLA-00AMV[3]",
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Samsung NVMe TCG Opal SSC SEDs PM9A3 Series",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-11-04",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Samsung Electronics Co., Ltd.",
    "vendor_url": "http://www.samsung.com"
  }
}