{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "34ff3bb3732ca543", "cert_id": 5522, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Micron\u00ae MSA11-P5 Controller Sub Chip Security Subsystem", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-09-14", "validation_type": "Initial", "lab": "Lightship Security, Inc."}], "vendor_url": "http://www.micron.com", "vendor": "Micron Technology, Inc.", "certificate_pdf_url": null, "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 2, "caveat": "No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs", "exceptions": ["Operational environment: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "SingleChip", "description": "Micron\u00ae MSA11-P5 Controller Sub Chip Security provides cryptographic functionality to SSD controllers.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-09-13", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 2": 4, "Level 3": 1, "Level 0": 3}}, "fips_certlike": {"Certlike": {"HMAC-SHA2": 4, "SHA2-384": 14, "SHA2-512": 3, "SHA384": 1, "SHA-384": 4, "SHA2": 2, "RSA 3072": 1, "AES-128": 2, "AES-256": 15, "AES 256": 2, "AES 128": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-128": 2, "AES-256": 15, "AES": 41}, "CAST": {"CAST": 42}}, "constructions": {"MAC": {"HMAC": 24}}}, "asymmetric_crypto": {"RSA": {"RSA 3072": 1}, "ECC": {"ECDSA": {"ECDSA": 39}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA2": {"SHA384": 1, "SHA-384": 4, "SHA2": 2}}}, "crypto_scheme": {"MAC": {"MAC": 4}, "KA": {"Key Agreement": 2}}, "crypto_protocol": {}, "randomness": {"PRNG": {"DRBG": 10}, "RNG": {"RNG": 10, "RBG": 2}}, "cipher_mode": {"GCM": {"GCM": 4}, "XTS": {"XTS": 3}}, "ecc_curve": {"NIST": {"P-384": 20}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {"FI": {"Fault induction": 8}}, "device_model": {}, "tee_name": {"AMD": {"PSP": 10}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 11, "FIPS PUB 140-3": 2, "FIPS186-5": 21, "FIPS 186-5": 6, "FIPS 198-1": 2, "FIPS 180-4": 4, "FIPS140-3": 2}, "NIST": {"SP 800-38A": 4, "SP 800-38D": 2, "SP 800-38F": 2, "SP 800-38E": 2, "SP 800-90B": 1, "SP 800-90A": 1, "SP 800-108": 1, "SP 800-56B": 1}, "ISO": {"ISO/IEC 19790": 2, "ISO/IEC 24759": 2}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 950930, "pdf_is_encrypted": false, "pdf_number_of_pages": 61, "/Author": "Hawes, David J. (Fed)", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260908160040-04'00'", "/ModDate": "D:20260908160040-04'00'", "/Producer": "Microsoft\u00ae Word for Microsoft 365", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=11640"]}}, "module_algorithms": {"_type": "Set", "elements": ["KTS-IFCA6150", "ECDSA KeyGen (FIPS186-5)A6142", "AES-ECBC1278", "Counter DRBGC1278", "Conditioning Component Block Cipher Derivation Function SP800-90BA2272", "HMAC-SHA2-384A6151", "AES-KWA6149", "ECDSA SigGen (FIPS186-5)A6142", "KDF SP800-108A6148", "SHA2-384A6145", "AES-XTS Testing Revision 2.0A6146", "SHA2-512A6145", "SHA2-512/256A6145", "AES-GCMA6144", "RSA SigVer (FIPS186-5)A6147", "AES-CTRC1278", "HMAC-SHA2-512/256A6151", "ECDSA SigVer (FIPS186-5)A6142", "ECDSA KeyVer (FIPS186-5)A6142"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A6144", "#A6146", "#A6145", "#A6150", "#A6148", "#A6143", "#A6142", "#A2272", "#A6151", "#C1278", "#A6149", "#A6147"]}, "is_br1_format": true, "br1_deviations": 1, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "2"}, {"section": "2", "title": "Cryptographic module specification", "level": "2"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "2"}, {"section": "4", "title": "Roles, services, and authentication", "level": "2"}, {"section": "5", "title": "Software/Firmware security", "level": "2"}, {"section": "6", "title": "Operational environment", "level": "N/A"}, {"section": "7", "title": "Physical security", "level": "2"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "2"}, {"section": "10", "title": "Self-tests", "level": "2"}, {"section": "11", "title": "Life-cycle assurance", "level": "2"}, {"section": "12", "title": "Mitigation of other attacks", "level": "N/A"}, {"section": "", "title": "Overall Level", "level": "2"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": true, "entries": [{"modelPartNum": "Micron\u00ae MSA11-P5 Controller Sub Chip Security Subsystem", "hwVersion": "0x0C87E5", "fwVersion": "Function ROM v4.0, Bootloader V4.0, Runtime SCCS v4.2, 4.3, 4.4, 5.0", "processors": "Micron\u00ae MSA11-P5", "features": "NVMe interface at the physical boundary"}]}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "modes_of_operation": {"section": 2, "subsection": 4, "found": true, "entries": [{"name": "NMO", "description": "Normal Mode of Operation. This is the only Approved mode of operation supported by the module", "type": "Approved", "statusIndicator": "fipsApprovedMode: 1"}]}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CTR", "cavpCertName": "C1278", "properties": "Direction - Encrypt Key Length - 128, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-ECB", "cavpCertName": "A6144", "properties": "Direction - Decrypt, Encrypt Key Length - 256", "reference": "SP 800-38A"}, {"algorithm": "AES-ECB", "cavpCertName": "A6146", "properties": "Direction - Decrypt, Encrypt Key Length - 256", "reference": "SP 800-38A"}, {"algorithm": "AES-ECB", "cavpCertName": "C1278", "properties": "Direction - Encrypt Key Length - 128, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-GCM", "cavpCertName": "A6144", "properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 256 Tag Length - 128 IV Length - IV Length: 96 Payload Length - Payload Length: 256-65536 Increment 128 AAD Length - AAD Length: 0", "reference": "SP 800-38D"}, {"algorithm": "AES-KW", "cavpCertName": "A6149", "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 256 Payload Length - Payload Length: 256-4096 Increment 64", "reference": "SP 800-38F"}, {"algorithm": "AES-XTS Testing Revision 2.0", "cavpCertName": "A6144", "properties": "Direction - Decrypt, Encrypt Key Length - 256 Payload Length - Payload Length: 4096-32896 Increment 128 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes", "reference": "SP 800-38E"}, {"algorithm": "AES-XTS Testing Revision 2.0", "cavpCertName": "A6146", "properties": "Direction - Decrypt, Encrypt Key Length - 256 Payload Length - Payload Length: 4096-32896 Increment 128 Tweak Mode - Number Data Unit Length Matches Payload Length - Yes", "reference": "SP 800-38E"}, {"algorithm": "Conditioning Component Block Cipher Derivation Function SP800-90B", "cavpCertName": "A2272", "properties": "Key Length - 128 Payload Length - Payload Length: 512", "reference": "SP 800-90B"}, {"algorithm": "Counter DRBG", "cavpCertName": "C1278", "properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - AES-128, AES-256 Derivation Function Enabled - No Additional Input - Additional Input: 0- 256, Additional Input: 0-384 Entropy Input - Entropy Input: 256, Entropy Input: 384", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "", "cavpCertName": "", "properties": "Nonce - Nonce: 0 Personalization String Length - Personalization String Length: 0-256, Personalization String Length: 0-384 Returned Bits - 512", "reference": ""}, {"algorithm": "ECDSA KeyGen (FIPS186-5)", "cavpCertName": "A6142", "properties": "Curve - P-384 Secret Generation Mode - extra bits", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA KeyVer (FIPS186- 5)", "cavpCertName": "A6142", "properties": "Curve - P-384", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigGen (FIPS186- 5)", "cavpCertName": "A6142", "properties": "Curve - P-384 Hash Algorithm - SHA2-384 Component - No", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigVer (FIPS186- 5)", "cavpCertName": "A6142", "properties": "Curve - P-384 Hash Algorithm - SHA2-384", "reference": "FIPS 186-5"}, {"algorithm": "HMAC-SHA2-384", "cavpCertName": "A6151", "properties": "MAC - MAC: 384 Key Length - Key Length: 384", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-512/256", "cavpCertName": "A6151", "properties": "MAC - MAC: 256 Key Length - Key Length:", "reference": "FIPS 198-1"}, {"algorithm": "KDF SP800-108", "cavpCertName": "A6148", "properties": "256 KDF Mode - Counter MAC Mode - HMAC-SHA2-384, HMAC-SHA2-512/256 Supported Lengths - Supported Lengths: 256-384 Increment 128 Fixed Data Order - Before Fixed Data Counter Length - 8 Supports Empty IV - No Requires Empty IV - No Custom Key In Length - 0", "reference": "SP 800-108 Rev. 1"}, {"algorithm": "KTS-IFC", "cavpCertName": "A6150", "properties": "IUT ID - 9550 Modulo - 3072, 4096 Key Generation Methods - rsakpg1- basic Fixed Public Exponent - 010001 Scheme - KTS-OAEP-basic - KAS Role - initiator Key Transport Method - Hash Algorithms - SHA2-384 Supports Null Associated Data - Yes Associated Data Pattern - Associated Data Encoding - concatenation Key Length - 256", "reference": "SP 800-56B Rev. 2"}, {"algorithm": "RSA SigVer (FIPS186-5)", "cavpCertName": "A6147", "properties": "Hash Pair - Hash Algorithm - SHA2-384 Modulo - 3072, 4096 Signature Type - pkcs1v1.5, pss", "reference": "FIPS 186-5"}, {"algorithm": "", "cavpCertName": "", "properties": "Mask Function - mgf1 Fixed Public Exponent - 010001 Public Exponent Mode - fixed", "reference": ""}, {"algorithm": "SHA2-384", "cavpCertName": "A6143", "properties": "Message Length - Message Length: 384, 8-65536 Increment 8 Large Message Sizes - 1", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-384", "cavpCertName": "A6145", "properties": "Message Length - Message Length: 384, 8-65536 Increment 8 Large Message Sizes - 1", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-512", "cavpCertName": "A6145", "properties": "Message Length - Message Length: 512, 8-65536 Increment 8 Large Message Sizes - 1", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-512/256", "cavpCertName": "A6145", "properties": "Message Length - Message Length: 256, 8-65536 Increment 8 Large Message Sizes - 1", "reference": "FIPS 180-4"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "CKG1", "algoPropList": "Key Type:Symmetric and Asymmetric", "implName": "N/A", "reference": "SP800-133rev2 Section 4 example 1 and IG D.H"}, {"name": "CKG - XTS", "algoPropList": "AES 256:Symmetric Key Generation", "implName": "N/A", "reference": "SP 800-133rev2 Section 6.3 and IG C.I"}]}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": false, "entries": []}, "ports_interfaces": {"section": 3, "subsection": 1, "found": true, "entries": [{"physicalPort": "AESE (encryption engine)", "logicalInterface": "Data Input Data Output Control Input Status Output", "data": "User Data"}, {"physicalPort": "AESD (decryption engine)", "logicalInterface": "Data Input Data Output Control Input Status Output", "data": "User Data"}, {"physicalPort": "Data", "logicalInterface": "Data Input Data Output", "data": "Module Service data"}, {"physicalPort": "Mbox (Mailbox)", "logicalInterface": "Data Input Data Output Control Input Status Output", "data": "Service info input/output"}, {"physicalPort": "Service request notification interrupt", "logicalInterface": "Control Input", "data": "None"}, {"physicalPort": "Power", "logicalInterface": "Power", "data": "None"}, {"physicalPort": "Reset", "logicalInterface": "Control Input", "data": "None"}]}, "authentication_methods": {"section": 4, "subsection": 1, "found": true, "entries": [{"name": "Controller authentication", "description": "This role is authenticated to the msg in interface with cryptographic signature generation", "mechanism": "RSA SigVer and ECDSA SigVer", "strength": "RSA 3072/4096 has a key strength of 128/150 bits. The probability of a successful verification from a single random attempt is at least 1/2^128. ECDSA P- 384 has a key strength of 192 bits. The probability of a successful verification from a single random attempt is at least 1/2^192. This effectively eliminates the possibility of determining the private key through exhaustive methods.", "perMinute": "The strength per minute is 5/2^128 for RSA and 5/2^192 for ECDSA. This controls the number of unsuccessful attempts before authentication is blocked until a system restart occurs."}]}, "roles": {"section": 4, "subsection": 2, "found": true, "entries": [{"name": "Controller Table 11: Roles", "type": "Role", "operatorType": "CO", "authMethodList": "Controller authentication"}]}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "Module Self- Test", "description": "Run KAT tests on all cryptographic algorithms and firmware integrity test", "indicator": "CCS", "inputs": "Power", "outputs": "Pass/Fail status", "secFunImpl": "KTS1 KTS2 KTS3 GCME GCMD RNG ENT SHS HMAC DPE DPD AuxE AuxD KDF RSAVer ECDSASigVer ECDSASigGen CKG", "rolesSspAccess": "Controller - DRBG-EI and seed: E - DRBG-State: G Unauthenticated - DRBG-EI and seed: E - DRBG-State: G"}, {"name": "Get Status", "description": "Get information about the operational state of the drive This includes Module identifier, hardware and firmware revision values.", "indicator": "CCS", "inputs": "Command", "outputs": "Command response with module status information", "secFunImpl": "None", "rolesSspAccess": "Controller"}, {"name": "KeyMgmt", "description": "Update and enforce authorization credential", "indicator": "CCS", "inputs": "Password and wrapped credentials", "outputs": "Status Indicator", "secFunImpl": "KTS1 KDF CKG", "rolesSspAccess": "Controller - AdminKey: G,R,W,E - AuthKDK: G,R,W,E - AuthKey: G,R,W,E - PrivateKey: G,R,W,E - RdsKey: R,W - TCGWrapKey: E"}, {"name": "Load Range Attributes", "description": "Load DEK into DPE for indicated range", "indicator": "CCS", "inputs": "Range and Key Info", "outputs": "Status Indicator", "secFunImpl": "KTS1", "rolesSspAccess": "Controller - AuthKey: E - PrivateKey: W,E - AdminKey: W,E - TCGWrapKey: E - RdsKey: W,E - DEK: W"}, {"name": "UpdateDEK", "description": "Generate Symmetric Module protected Key", "indicator": "CCS", "inputs": "Key Type", "outputs": "Status Indicator", "secFunImpl": "KTS1 RNG CKG", "rolesSspAccess": "Controller - AuthKey: E - AdminKey: W,E - PrivateKey: W,E - RdsKey: G,R,W,E - TCGWrapKey: E - DEK: G,R"}, {"name": "CSP-Export", "description": "Export module protected CSPs", "indicator": "CCS", "inputs": "CSP List", "outputs": "CSP List", "secFunImpl": "KTS1 RNG CKG KTS2", "rolesSspAccess": "Controller - TCGWrapKey: R,E - TCGHMACKey: R - OpenHMACKey: R - AdminKey: R,W"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- PrivateKey: R,W,E - RdsKey: R,W,E - DEK: R - AuthKDK: E - RootKeyWrapKey: R,E - RootMACKey: R,E - RootPublicMacKey: R - aworWrappingKey: E - KDeviceIDPrivate: R - KDKDK: R - fsaKey: G,R,E"}, {"name": "CSP-Import", "description": "Import module protected CSPs", "indicator": "CCS", "inputs": "CSP List", "outputs": "CSP List", "secFunImpl": "KTS1 KTS2", "rolesSspAccess": "Controller - RootMACKey: W,E - RootKeyWrapKey: W,E - RootPublicMacKey: W - TCGWrapKey: W - TCGHMACKey: W - OpenHMACKey: W - KDeviceIDPrivate: W - aworWrappingKey: E - RdsKey: W - KDeviceIDPublic: W - fsaKey: W,E - KDKDK: W"}, {"name": "User Write/Read", "description": "Encryption / Decryption of user data to / from a user data range", "indicator": "CCS", "inputs": "Data packet", "outputs": "Data Packet", "secFunImpl": "DPE DPD", "rolesSspAccess": "Controller - DEK: E"}, {"name": "SUP Generate", "description": "KTS-IFC wrap an internally generated random", "indicator": "CCS", "inputs": "None", "outputs": "Encrypted password context Status", "secFunImpl": "KTS3 RNG KDF", "rolesSspAccess": "Controller - AuthKDK: G,E - AuthKey: G,E - TCGWrapKey: E - KDeviceWrappingPub: E - SUP Seed: R"}, {"name": "SUP Authenticate", "description": "Unwrap SUP blob using KBKDF derived key", "indicator": "CCS", "inputs": "Password", "outputs": "Authentication result", "secFunImpl": "KDF", "rolesSspAccess": "Controller - AuthKDK: E - AuthKey: E - TCGWrapKey: E"}, {"name": "Random", "description": "Returns a 256-bit random number", "indicator": "CCS", "inputs": "Size", "outputs": "DRBG output", "secFunImpl": "RNG", "rolesSspAccess": "Controller - DRBG-State: G,E - DRBG-EI and seed: E"}, {"name": "HMAC", "description": "Generate an HMAC over the prescribed content", "indicator": "CCS", "inputs": "Data location", "outputs": "Calculated HMAC", "secFunImpl": "HMAC", "rolesSspAccess": "Controller - OpenHMACKey: E - TCGHMACKey: E - RootPublicMacKey: E - aworHMACKey: E"}, {"name": "Attestation", "description": "Device cryptographic identity and attestation", "indicator": "CCS", "inputs": "Index", "outputs": "Status Indicator", "secFunImpl": "RNG SHS ECDSASigVer ECDSASigGen ECDSA- KeyGen", "rolesSspAccess": "Controller - KDeviceIDPrivate: G,E - KDeviceIDPublic: G,R,E - KAliasPrivate: G,E - KAliasPublic: G,R,E - UDS: G,E,Z - DRBG-State: E"}, {"name": "Zeroize", "description": "Destroys all keys. Must be performed", "indicator": "CCS", "inputs": "None", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Controller - RootKDK: Z"}, {"name": "", "description": "under the direct control of the operator", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- RootMACKey: Z - RootPublicMacKey: Z - DRBG-EI and seed: Z - DRBG-State: Z - TCGWrapKey: Z - TCGHMACKey: Z - OpenHMACKey: Z - Password: Z - AuthKDK: Z - AuthKey: Z - AdminKey: Z - PrivateKey: Z - RdsKey: Z - DEK: Z - SUP Seed: Z - CDI: Z - DeviceIDWrapKey: Z - KDeviceIDPrivate: Z - KAliasPrivate: Z - KDKDK: Z - KDataDecryption: Z - aworWrappingKey: Z - aworHMACKey: Z - KProduct: Z - KBootloader: Z - KFWModuleVerify: Z - KFWControllerVerify: Z - KAuthPub: Z - KDeviceWrappingPub:"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Z - KManifestPub: Z - fsaKey: - RootKeyWrapKey: Z"}, {"name": "Module Deprovision", "description": "Deprovision the device, zeroize all SSPs", "indicator": "CCS", "inputs": "None", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Controller - RootKDK: Z - RootMACKey: Z - TCGWrapKey: Z - TCGHMACKey: Z - OpenHMACKey: Z - CDI: Z - DeviceIDWrapKey: Z - KDeviceIDPrivate: Z - KAliasPrivate: Z - KDeviceIDPublic: Z - KAliasPublic: Z - KDKDK: Z - KDataDecryption: Z - aworWrappingKey: Z - aworHMACKey: Z - KProduct: Z - KBootloader: Z - KFWModuleVerify: Z - KFWControllerVerify: Z - KAuthPub: Z - KDeviceWrappingPub: Z - KManifestPub: Z - RootKeyWrapKey: Z - RootPublicMacKey:"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Z - UDS: Z"}, {"name": "Factory Auth", "description": "Authentication for factory-restricted services", "indicator": "CCS", "inputs": "Authorization signature", "outputs": "Random Value", "secFunImpl": "RNG RSAVer", "rolesSspAccess": "Controller - KAuthPub: E"}, {"name": "Firmware Signature Check", "description": "Verify firmware image signature", "indicator": "CCS", "inputs": "Firmware Image Location", "outputs": "Status Indicator", "secFunImpl": "RSAVer ECDSASigVer", "rolesSspAccess": "Controller - KFWModuleVerify: E - KFWControllerVerify: E - KProduct: E - KBootloader: E"}, {"name": "Image Decrypt", "description": "Decrypt image", "indicator": "CCS", "inputs": "Firmware Image Location", "outputs": "Status Indicator", "secFunImpl": "GCMD", "rolesSspAccess": "Controller - KDKDK: E - KDataDecryption: E"}, {"name": "Image Encrypt", "description": "Encrypt image", "indicator": "CCS", "inputs": "Firmware Image Location", "outputs": "Status Indicator", "secFunImpl": "GCME", "rolesSspAccess": "Controller - KDKDK: E - KDataDecryption: E"}, {"name": "Manifest Load", "description": "Verify and load trusted set of PKS", "indicator": "CCS", "inputs": "Manifest Location", "outputs": "Status", "secFunImpl": "RSAVer ECDSASigVer", "rolesSspAccess": "Controller - KManifestPub: E - KManifestPub_ROM: E"}, {"name": "RawCrypto", "description": "Raw cryptographic algorithm service with no assurance of security", "indicator": "CCS", "inputs": "Cryptographic algorithm and parameter", "outputs": "Status Indicator and result", "secFunImpl": "None", "rolesSspAccess": "Controller"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": false, "entries": []}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": true, "entries": [{"mechanism": "IC packaging", "inspectFreq": "On initial receipt of the device and yearly afterwards", "inspectGuidance": "Inspect for evidence of prying or removal of the chip packaging. If tampering is suspected, then the device containing the IC should be removed from service and the site administrator should be contacted. See Example below."}]}, "storage_areas": {"section": 9, "subsection": 1, "found": true, "entries": [{"name": "Sub Chip security sub system RAM (S1)", "description": "Stored in volatile memory (RAM).", "persistance": "Dynamic"}, {"name": "Sub Chip security sub system e-Fuse (S2)", "description": "Stored in e-fuse in Plaintext", "persistance": "Static"}, {"name": "Sub Chip security sub system register (S3)", "description": "Stored in register in Plaintext", "persistance": "Dynamic"}]}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "Input in Plaintext(IO1)", "source": "Outside the module boundary in ASIC Internal SRAM", "dest": "Sub Chip security sub system RAM (S1)", "format": "Plaintext", "distribution": "N/A", "entry": "N/A", "sfiAlgo": ""}, {"name": "Input using SP800-38F AES key Transport (IO2)", "source": "Outside the module boundary in ASIC Internal SRAM", "dest": "Sub Chip security sub system RAM (S1)", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "KTS1"}, {"name": "Input using SP800-38D AES key Transport (IO3)", "source": "Outside the module boundary in ASIC Internal SRAM", "dest": "Sub Chip security sub system RAM (S1)", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "KTS2"}, {"name": "Output using SP800-38F Key Transport (IO4)", "source": "Sub Chip security sub system RAM (S1)", "dest": "Outside the module boundary in ASIC Internal SRAM", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "KTS1"}, {"name": "Output using SP800-38D AES key Transport (IO5)", "source": "Sub Chip security sub system RAM (S1)", "dest": "Outside the module boundary in ASIC Internal SRAM", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "KTS2"}, {"name": "Output encapsulated by RSA (IO6)", "source": "Sub Chip security sub system RAM (S1)", "dest": "Outside the module boundary in ASIC Internal SRAM", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "KTS3"}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "Z1", "description": "Zeroized by Module power cycle or hard reset.", "rationale": "When module is reset, all data stored in volatile module memory (RAM) will be lost", "operatorId": "Implicit"}, {"method": "Z2", "description": "Zeroized by the zeroization service by overwriting with a fixed pattern of zeros.", "rationale": "Each SSP is overwritten with a fixed value of 1s or 0s", "operatorId": "Explicit"}]}, "self_tests": {"section": 10, "subsection": 1, "found": true, "entries": [{"algorithmOrTest": "Bootloader Firmware integrity test", "testProps": "RSA SigVer PKCS1_v1.5 or PSS (FIPS186-5) (A6147) or ECDSA SigVer (FIPS186-5) (A6142)", "testMethod": "KAT", "type": "SW/FW Integrity", "indicator": "Success or Failure Code", "details": "Executed on the whole firmware stored in the Module - See 10.6 - Additional Information"}, {"algorithmOrTest": "Module run time firmware integrity test", "testProps": "RSA SigVer PKCS1_v1.5 or PSS (FIPS186-5) (A6147) or ECDSA SigVer (FIPS186-5) (A6142)", "testMethod": "KAT", "type": "SW/FW Integrity", "indicator": "Success or Failure Code", "details": "Executed on the whole firmware stored in the Module - See 10.6 - Additional Information"}]}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "AES-GCM Encrypt", "testProps": "AES-256 Encrypt", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "(Auxiliary) AES-256 GCM Encrypt KAT", "condition": "At boot up"}, {"algorithmOrTest": "AES-GCM Decrypt", "testProps": "AES-256 Decrypt", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "(Auxiliary) AES-256 GCM Decrypt KAT", "condition": "At boot up"}, {"algorithmOrTest": "AES-KW Encryption", "testProps": "AES-256 Encrypt", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "(Auxiliary) AES-256 KW Encrypt KAT", "condition": "At boot up"}, {"algorithmOrTest": "AES-KW Decryption", "testProps": "AES-256 Decrypt", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "(Auxiliary) AES-256 KW Decrypt KAT", "condition": "At boot up"}, {"algorithmOrTest": "AES-XTS DPE Encryption", "testProps": "AES-256 Encrypt", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "DPE 256-bit AES-XTS encryption KAT", "condition": "At boot up"}, {"algorithmOrTest": "AES-XTS DPE Decryption", "testProps": "AES-256 Decrypt", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "DPE 256-bit AES-XTS decryption KAT", "condition": "At boot up"}, {"algorithmOrTest": "AES-XTS Aux Encryption", "testProps": "AES-256 Encrypt", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "(Auxiliary) 256-bit AES-XTS encryption KAT", "condition": "At boot up"}, {"algorithmOrTest": "AES-XTS Aux Decryption", "testProps": "AES-256 Decrypt", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "(Auxiliary) 256-bit AES-XTS decryption KAT", "condition": "At boot up"}, {"algorithmOrTest": "Conditioning Component Block Cipher Derivation Function SP800- 90B (A2272)", "testProps": "AES 128", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "SP800-90B Conditioning Component (AES-128)", "condition": "At boot up"}, {"algorithmOrTest": "Counter DRBG (C1278)", "testProps": "Counter DRBG - AES 256", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "AES-256 CTR_DRBG KAT SP800-90A Health Tests. Instantiate, Reseed, Generate as a full test", "condition": "At boot up"}, {"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6142)", "testProps": "ECDSA P-384", "testMethod": "PCT", "type": "PCT", "indicator": "Success or Failure Code", "details": "A pairwise consistency check is performed on ECDSA private/public key on generation", "condition": "When a new ECDSA key pair is generated"}, {"algorithmOrTest": "ECDSA SigGen (FIPS186-5)", "testProps": "ECDSA P-384 Signature Generation", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "P-384 Signature Generation KAT with SHA-384", "condition": "At boot up"}, {"algorithmOrTest": "ECDSA SigVer (FIPS186-5)", "testProps": "ECDSA P-384 Signature Verification KAT", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "P-384 Signature Verification KAT with SHA-384", "condition": "At boot up before Pre-Operational firmware integrity test."}, {"algorithmOrTest": "HMAC-SHA2 ROM", "testProps": "HMAC SHA2-384", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "HMAC SHA2-384 KAT", "condition": "At boot up"}, {"algorithmOrTest": "KDF SP800-108", "testProps": "with HMAC-SHA2- 384", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "Counter mode KBKDF KAT. Inclusive of HMAC-SHA2- 384 KAT.", "condition": "At boot up"}, {"algorithmOrTest": "SHA2-384 FW", "testProps": "SHA2-384 Performed during boot before the pre- operational integrity checks (ROM)", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "SHA2-384 KAT for the Firmware SHA", "condition": "At boot up"}, {"algorithmOrTest": "SHA2 ROM", "testProps": "SHA2-512", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "SHA2-512 for the SHA engine", "condition": "At boot up"}, {"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6147)", "testProps": "3072 RSA PKCS#1_v1.5 Verification with SHA-384", "testMethod": "KAT", "type": "CAST", "indicator": "Success or Failure Code", "details": "3072 RSA PKCS#1_v1.5 Verification with SHA-384 KAT the Module only supports the public key operation for RSA Signature Verification and KTS-RSA Wrap", "condition": "At boot up before Pre-Operational firmware integrity test."}, {"algorithmOrTest": "BootLoader Firmware Load test", "testProps": "RSA SigVer (FIPS186-5) (A6147), ECDSA SigVer (FIPS186-5) (A6142)", "testMethod": "KAT", "type": "SW/FW Load", "indicator": "Success or Failure Code", "details": "A 3072/ 4096-bit RSA or ECDSA P384 Signature Verification is executed on the bootloader copied into the Module. See 10.6 - Additional Information", "condition": "At boot up"}, {"algorithmOrTest": "Runtime Firmware Load test", "testProps": "RSA SigVer (FIPS186-5) (A6147), ECDSA SigVer (FIPS186-5) (A6142)", "testMethod": "KAT", "type": "SW/FW Load", "indicator": "Success or Failure Code", "details": "A 3072/ 4096-bit RSA or ECDSA P384 Signature Verification is executed on the SEE firmware copied into the Module. See 10.6 - Additional Information", "condition": "At boot up"}, {"algorithmOrTest": "Entropy 90B Start- up Repetition Count Test (RCT)", "testProps": "Repetition Count Test", "testMethod": "Fault induction", "type": "CAST", "indicator": "Success or Failure Code", "details": "As specified in [90B] RCT startup health tests", "condition": "At boot up"}, {"algorithmOrTest": "Entropy 90B Start- up Adaptive Proportion Test (APT)", "testProps": "Adaptive Proportion Test", "testMethod": "Fault induction", "type": "CAST", "indicator": "Success or Failure Code", "details": "As specified in [90B] APT startup health tests", "condition": "At boot up"}, {"algorithmOrTest": "Entropy 90B Continuous Repetition Count Test (RCT)", "testProps": "Repetition Count Test", "testMethod": "Fault induction", "type": "CAST", "indicator": "Success or Failure Code", "details": "As specified in [90B] RCT continuous health tests", "condition": "Continuous when entropy is requested"}, {"algorithmOrTest": "Entropy 90B Continuous Adaptive Proportion Test (APT)", "testProps": "Adaptive Proportion Test", "testMethod": "Fault induction", "type": "CAST", "indicator": "Success or Failure Code", "details": "As specified in [90B] APT continuous health tests", "condition": "Continuous when entropy is requested"}]}, "error_states": {"section": 10, "subsection": 4, "found": true, "entries": [{"name": "ES1", "description": "The ROM fails a KAT", "conditions": "Triggered by cryptographic KAT failure.", "recoveryMethod": "Reboot/Power cycle the module", "indicator": "A Cryptographic Self-test Failure status is indicated in response to any service request."}, {"name": "ES2", "description": "The Module fails the firmware load test or the Firmware Integrity test", "conditions": "Firmware load and integrity check fails when the firmware fails to verify", "recoveryMethod": "Reboot/Power cycle the module", "indicator": "The Module enters the ES2 error state and outputs a verification failure status in response to the firmware service."}, {"name": "ES3", "description": "The Module fails conditional self- test. Non-operational state. No services beside status services are allowed", "conditions": "Triggered by cryptographic self-test failure.", "recoveryMethod": "Reboot/Power cycle the module", "indicator": "The Module enters the ES3 error state and will output a self-test failure status to any service request"}]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["#A6144", "#A6146", "KTS-IFCA6150", "#A6150", "#A6148", "#A6143", "ECDSA KeyGen (FIPS186-5)A6142", "AES-ECBC1278", "Counter DRBGC1278", "#C1278", "Conditioning Component Block Cipher Derivation Function SP800-90BA2272", "#A6147", "HMAC-SHA2-384A6151", "AES-KWA6149", "ECDSA SigGen (FIPS186-5)A6142", "#A6145", "KDF SP800-108A6148", "#A6142", "SHA2-384A6145", "#A2272", "AES-XTS Testing Revision 2.0A6146", "#A6151", "SHA2-512A6145", "SHA2-512/256A6145", "AES-GCMA6144", "RSA SigVer (FIPS186-5)A6147", "AES-CTRC1278", "HMAC-SHA2-512/256A6151", "ECDSA SigVer (FIPS186-5)A6142", "ECDSA KeyVer (FIPS186-5)A6142", "#A6149"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "98c6d61c8f8bc403bb78584acf14abf76233012d0d8ecae6bfbf028ff7eec384", "txt_hash": "698be8e8639fbc7f83f36eda9359daa57be5ea00d1adb7db830690e6d1ee19f8", "json_hash": "ef270f9dcb9aca9ef72aeb2ae55427ec8c9f8612c346c8744f15cba59d9aa1ac"}}}