Aegis Secure Key 3.0 Cryptographic Module

Certificate details

Certificate ID	#5517
Status	active
Validation dates	09.09.2026
Sunset date	08-09-2031
Standard	FIPS 140-3
Security level	3
Type	Hardware
Embodiment	MultiChipStand
Caveat	When utilizing a Trusted Channel as specified in the Security Policy
Exceptions	Operational environment: N/A Non-invasive security: N/A Mitigation of other attacks: N/A
Description	The Apricorn Aegis Secure Key 3.0 is a hardware encrypted USB 3.1 memory key. Its software free design allows interface to any host that supports USB and mass storage. Authentication is performed via the embedded keypad and all critical security parameters (PINs, encryption keys, etc) never leave the device boundary for improved security. The device supports 1 administrator and 1 user and offers a variety of features including programmable brute force, recovery PINs, 8- 16 digit PINs, auto lock, read only modes, and is compatible with Apricorn’s Aegis Configurator
Vendor	Apricorn http://apricorn.com
Lab	AEGISOLVE, Inc.
Algorithms	AES-CBCA5907 AES-ECBA7346 AES-XTS Testing Revision 2.0A7346 ECDSA KeyGen (FIPS186-5)A6008 ECDSA KeyVer (FIPS186-5)A6008 Hash DRBGA5943 HMAC-SHA2-256A7825 KAS-ECC-SSC Sp800-56Ar3A6008 KDA OneStep SP800-56Cr2A7826 SHA2-256A7824
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES-, AES, AES-256, CAST, HMAC

Asymmetric Algorithms

ECDH, ECDSA, ECC, Diffie-Hellman, DH

Schemes

MAC, Key Agreement

Randomness

DRBG, RBG

Elliptic Curves

P-256, curve P-256

Block cipher modes

ECB, CBC, XTS

Trusted Execution Environments

PSP, SSC

Security level

Level 3, level 3

Certification process

out of scope, supports an Approved mode of operation, therefore a noncompliant configuration is not possible and out of scope for this validation

Standards

FIPS 140-3, FIPS186-5, FIPS 186-5, FIPS 198-1, FIPS 180-4, FIPS 140, SP 800-38A, SP 800-38E, SP 800-90A, SP 800-56A, SP 800-56C

Creation date	D:20260903083718-04'00'
Modification date	D:20260903083718-04'00'
Pages	40
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

06.10.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 3': 2}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'DRBG 256': 1, 'DRBG 1024': 1}, '__update__': {'SHA2-256': 22}}}}, 'certification_process': {'__update__': {'OutOfScope': {'__insert__': {'supports an Approved mode of operation, therefore a noncompliant configuration is not possible and out of scope for this validation': 1}, '__delete__': ['supports an Approved mode of operation, therefore a noncompliant configuration is not possible and out of scope for this validation. ### 11.2 Administrator Guidance Upon receipt of the module an operator must']}}}} data.
05.10.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 3': 1}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA2-256': 23}, '__delete__': ['DRBG 256', 'DRBG 1024']}}}, 'certification_process': {'__update__': {'OutOfScope': {'__insert__': {'supports an Approved mode of operation, therefore a noncompliant configuration is not possible and out of scope for this validation. ### 11.2 Administrator Guidance Upon receipt of the module an operator must': 1}, '__delete__': ['supports an Approved mode of operation, therefore a noncompliant configuration is not possible and out of scope for this validation']}}}} data.
24.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 3': 2}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'DRBG 256': 1, 'DRBG 1024': 1}, '__update__': {'SHA2-256': 22}}}}, 'certification_process': {'__update__': {'OutOfScope': {'__insert__': {'supports an Approved mode of operation, therefore a noncompliant configuration is not possible and out of scope for this validation': 1}, '__delete__': ['supports an Approved mode of operation, therefore a noncompliant configuration is not possible and out of scope for this validation. ### 11.2 Administrator Guidance Upon receipt of the module an operator must']}}}} data.

The is_br1_format property was set to True.

The br1_tables property was set to {'_type': 'sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables', 'security_levels': {'section': 1, 'subsection': 2, 'found': True, 'entries': [{'section': '1', 'title': 'General', 'level': '3'}, {'section': '2', 'title': 'Cryptographic module specification', 'level': '3'}, {'section': '3', 'title': 'Cryptographic module interfaces', 'level': '3'}, {'section': '4', 'title': 'Roles, services, and authentication', 'level': '3'}, {'section': '5', 'title': 'Software/Firmware security', 'level': '3'}, {'section': '6', 'title': 'Operational environment', 'level': 'N/A'}, {'section': '7', 'title': 'Physical security', 'level': '3'}, {'section': '8', 'title': 'Non-invasive security', 'level': 'N/A'}, {'section': '9', 'title': 'Sensitive security parameter management', 'level': '3'}, {'section': '10', 'title': 'Self-tests', 'level': '3'}, {'section': '11', 'title': 'Life-cycle assurance', 'level': '3'}, {'section': '12', 'title': 'Mitigation of other attacks', 'level': 'N/A'}, {'section': '', 'title': 'Overall Level', 'level': '3'}]}, 'tested_module_id_hw': {'section': 2, 'subsection': 2, 'found': True, 'entries': [{'modelPartNum': 'ASK3-16GB', 'hwVersion': 'Rev. 0.1', 'fwVersion': '1.0.6', 'processors': 'AFSC-Q01 06- 0108', 'features': '16GB'}, {'modelPartNum': 'ASK3-30GB', 'hwVersion': 'Rev. 0.1', 'fwVersion': '1.0.6', 'processors': 'AFSC-Q01 06- 0108', 'features': '30GB'}, {'modelPartNum': 'ASK3-60GB', 'hwVersion': 'Rev. 0.1', 'fwVersion': '1.0.6', 'processors': 'AFSC-Q01 06- 0108', 'features': '60GB'}, {'modelPartNum': 'ASK3-120GB', 'hwVersion': 'Rev. 0.1', 'fwVersion': '1.0.6', 'processors': 'AFSC-Q01 06- 0108', 'features': '120GB'}, {'modelPartNum': 'ASK3-240GB', 'hwVersion': 'Rev. 0.1', 'fwVersion': '1.0.6', 'processors': 'AFSC-Q01 06- 0108', 'features': '240GB'}, {'modelPartNum': 'ASK3-480GB', 'hwVersion': 'Rev. 0.1', 'fwVersion': '1.0.6', 'processors': 'AFSC-Q01 06- 0108', 'features': '480GB'}, {'modelPartNum': 'ASK3-1TB', 'hwVersion': 'Rev. 0.1', 'fwVersion': '1.0.6', 'processors': 'AFSC-Q01 06- 0108', 'features': '1TB'}, {'modelPartNum': 'ASK3-2TB', 'hwVersion': 'Rev. 0.1', 'fwVersion': '1.0.6', 'processors': 'AFSC-Q01 06- 0108', 'features': '2TB'}, {'modelPartNum': 'ASK3-4TB', 'hwVersion': 'Rev. 0.1', 'fwVersion': '1.0.6', 'processors': 'AFSC-Q01 06- 0108', 'features': '4TB'}]}, 'tested_module_id_sw_fw_hy': {'section': 2, 'subsection': 2, 'found': False, 'entries': []}, 'tested_module_id_hw_hy': {'section': 2, 'subsection': 2, 'found': False, 'entries': []}, 'tested_op_env_sw_fw_hy': {'section': 2, 'subsection': 2, 'found': False, 'entries': []}, 'vendor_affirmed_op_env_sw_fw_hy': {'section': 2, 'subsection': 2, 'found': False, 'entries': []}, 'modes_of_operation': {'section': 2, 'subsection': 4, 'found': False, 'entries': []}, 'approved_algorithms': {'section': 2, 'subsection': 5, 'found': True, 'entries': [{'algorithm': 'AES-CBC, AES- ECB', 'cavpCertName': 'A5907, A7346', 'properties': 'Direction - Decrypt, Encrypt Key Length - 256', 'reference': 'SP 800-38A'}, {'algorithm': 'AES-XTS Testing Revision 2.0', 'cavpCertName': 'A7346', 'properties': 'Direction - Decrypt, Encrypt Key Length - 256 Payload Length - Payload Length: 128-65536 Increment 128 Tweak Mode - Number Data Unit Length - Data Unit Length: 128- 4096 Increment 128 Data Unit Length Matches Payload Length - No', 'reference': 'SP 800-38E'}, {'algorithm': 'ECDSA KeyGen (FIPS186-5)', 'cavpCertName': 'A6008', 'properties': 'Curve - P-256 Secret Generation Mode - testing candidates', 'reference': 'FIPS 186-5'}, {'algorithm': 'ECDSA KeyVer (FIPS186-5)', 'cavpCertName': 'A6008', 'properties': 'Curve - P-256', 'reference': 'FIPS 186-5'}, {'algorithm': 'Hash DRBG', 'cavpCertName': 'A5943', 'properties': 'Prediction Resistance - No Supports Reseed - No Mode - SHA2-256 Entropy Input - Entropy Input: 1024 Nonce - Nonce: 0 Personalization String Length - Personalization String Length: 0, 0', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': '', 'cavpCertName': '', 'properties': 'Additional Input - Additional Input: 0, 0 Returned Bits - 256', 'reference': ''}, {'algorithm': 'HMAC-SHA2-256', 'cavpCertName': 'A7825', 'properties': 'MAC - MAC: 256 Key Length - Key Length: 256 Message Length - Message Length: 64-1536 Increment 8', 'reference': 'FIPS 198-1'}, {'algorithm': 'KAS-ECC-SSC Sp800-56Ar3', 'cavpCertName': 'A6008', 'properties': 'Domain Parameter Generation Methods - P- 256 Scheme - ephemeralUnified - KAS Role - responder', 'reference': 'SP 800-56A Rev. 3'}, {'algorithm': 'KDA OneStep SP800-56Cr2', 'cavpCertName': 'A7826', 'properties': 'Auxiliary Function Methods - Auxiliary Function Name - SHA2-256 MAC Salting Methods - default Fixed Info Pattern - algorithmId||uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 512 Shared Secret Length - Shared Secret Length: 256', 'reference': 'SP 800-56C Rev. 2'}, {'algorithm': 'SHA2-256', 'cavpCertName': 'A7824', 'properties': 'Message Length - Message Length: 64-2048 Increment 8', 'reference': 'FIPS 180-4'}]}, 'vendor_affirmed_algos': {'section': 2, 'subsection': 5, 'found': True, 'entries': [{'name': 'CKG AES', 'algoPropList': 'AES:Symmetric', 'implName': 'N/A', 'reference': 'SP800-133r2 Section 6.3 approved method 1'}, {'name': 'CKG DRBG', 'algoPropList': 'AES:Symmetric ECC-CDH Private Key:Asymmetric', 'implName': 'N/A', 'reference': 'SP800-133r2 Section 4 example 1'}]}, 'non_approved_allowed_algos': {'section': 2, 'subsection': 5, 'found': False, 'entries': []}, 'non_approved_allowed_NSC': {'section': 2, 'subsection': 5, 'found': False, 'entries': []}, 'non_approved_not_allowed': {'section': 2, 'subsection': 5, 'found': False, 'entries': []}, 'ports_interfaces': {'section': 3, 'subsection': 1, 'found': True, 'entries': [{'physicalPort': 'Universal Serial Bus (USB) Connector', 'logicalInterface': 'Data Input Data Output Control Input Status Output Power', 'data': 'Data Stored on the devices hard drive/memory Encrypted data packets from the configurator service during module initialization Status output for module identifier'}, {'physicalPort': 'Physical Keypad', 'logicalInterface': 'Data Input Control Input', 'data': 'Keypad is used to enter PINs for device authentication, and allows crypto officer to change settings'}, {'physicalPort': 'Status LEDs', 'logicalInterface': 'Status Output', 'data': 'LEDs used to communicate module state, settings, and module information'}]}, 'authentication_methods': {'section': 4, 'subsection': 1, 'found': True, 'entries': [{'name': 'PIN Code Verification', 'description': 'A minimum eight- digit PIN is used, with each digit selected from ten (10) possible characters. There are 10^8 (one hundred million) possible PIN combinations', 'mechanism': 'Known Secret', 'strength': 'The probability of a random attempt to authenticate to the module is 1/100,000,000', 'perMinute': 'The probability of multiple consecutive attempts to authenticate to the module during a one- minute period is 20/100,000,000'}, {'name': 'Configurator EC Diffie- Hellman', 'description': 'The modules support ECC- CDH public-key based authentication mechanism using a minimum of curve P-256', 'mechanism': 'ECDSA KeyVer (FIPS186-5) (A6008)', 'strength': 'Since P-256 curve is used, the probability that a random attempt to authenticate to the module is 1/(2^128) which is much less than 1/1,000,000.', 'perMinute': 'One authentication attempt is allowed before a User reset must be performed which takes approximately 30 seconds to complete the procedure, therefore there could be ~2 attempts per minute. Given this, the probability of multiple'}, {'name': '', 'description': '', 'mechanism': '', 'strength': '', 'perMinute': 'consecutive attempts to authenticate to the module during a one- minute period is 2/(2^128) which is much less than 1/100,000.'}]}, 'roles': {'section': 4, 'subsection': 2, 'found': True, 'entries': [{'name': 'User', 'type': 'Identity', 'operatorType': 'User', 'authMethodList': 'PIN Code Verification'}, {'name': 'Admin', 'type': 'Identity', 'operatorType': 'Crypto Officer', 'authMethodList': 'PIN Code Verification Configurator EC Diffie-Hellman'}, {'name': 'Unauthenticated', 'type': 'Identity', 'operatorType': 'Unauthenticated', 'authMethodList': 'None'}]}, 'approved_services': {'section': 4, 'subsection': 3, 'found': True, 'entries': [{'name': 'Unlock', 'description': 'Authenticates the operator to the module', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'Password Hash', 'rolesSspAccess': 'Admin - AES Encryption Key: E - Admin PIN: W,E,Z - Hashed Admin PIN: E User - AES Encryption Key: E - User PIN: W,E,Z'}, {'name': '', 'description': '', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': '', 'rolesSspAccess': '- Hashed User PIN: E'}, {'name': 'Lock', 'description': 'Locks the module to prevent any access', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'None', 'rolesSspAccess': 'Admin User'}, {'name': 'Write Data', 'description': 'Write user data/files on the disk storage area', 'indicator': 'Global Indicator', 'inputs': 'Plaintext Data', 'outputs': 'None', 'secFunImpl': 'Block Cipher', 'rolesSspAccess': 'Admin - AES Encryption Key: E User - AES Encryption Key: E'}, {'name': 'Read Data', 'description': 'Read user data/files on the disk storage area', 'indicator': 'Global Indicator', 'inputs': 'None', 'outputs': 'Plaintex t Data', 'secFunImpl': 'Block Cipher', 'rolesSspAccess': 'Admin - AES Encryption Key: E User - AES Encryption Key: E'}, {'name': 'Establish User PINs', 'description': 'Create Admin or User PIN', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'Password Hash', 'rolesSspAccess': 'Admin - Admin PIN: W,E,Z - Hashed Admin PIN: G,W User - User PIN: W,E,Z - Hashed User PIN: G,W'}, {'name': 'Change PINs', 'description': 'Change Admin or User PIN', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'Password Hash', 'rolesSspAccess': 'Admin - Admin PIN: W,E,Z - Hashed Admin PIN: G,W,E User - User PIN: W,E,Z - Hashed User PIN: G,W,E'}, {'name': 'Set Self- Destruct', 'description': 'Enable or Disable Self-', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'None', 'rolesSspAccess': 'Admin - Self-Destruct PIN: Z'}, {'name': '', 'description': 'Destruct feature', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': '', 'rolesSspAccess': '- Admin PIN: W,E,Z - Hashed Admin PIN: E - Hashed Self- Destruct PIN: Z'}, {'name': 'Self- Destruct PIN', 'description': 'Create self destruct PIN (Self destruct must be enabled)', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'Password Hash', 'rolesSspAccess': 'Admin - Self-Destruct PIN: G,W,E,Z - Admin PIN: W,E,Z - Hashed Admin PIN: E - Hashed Self- Destruct PIN: G,W User - Self-Destruct PIN: W,E,Z - Hashed Self- Destruct PIN: G,W'}, {'name': 'Self- Destruct', 'description': 'Use self- destruct PIN to zeroize user data/files on disk storage area', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'Block Cipher Password Hash', 'rolesSspAccess': 'Admin - Self-Destruct PIN: W,E,Z - AES Encryption Key: W - Hashed Self- Destruct PIN: E,Z - Hashed Admin PIN: W - Hashed Recovery PIN: Z - Hashed User PIN: Z User - Self-Destruct PIN: W,E,Z - Hashed Self- Destruct PIN: Z - Hashed Admin PIN: W - AES'}, {'name': '', 'description': '', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': '', 'rolesSspAccess': 'Encryption Key: W - Hashed Recovery PIN: Z - Hashed User PIN: Z'}, {'name': 'Delete All User PINs', 'description': 'Deletes all user and recovery PINs. Only Admin PIN remains', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'Password Hash', 'rolesSspAccess': 'Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E - Hashed User PIN: Z - Hashed Recovery PIN: Z - Hashed Self- Destruct PIN: Z'}, {'name': 'Set Unattende d Auto Lock', 'description': 'Sets a timer to automatically lock the device after a period of inactivity', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'None', 'rolesSspAccess': 'Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E'}, {'name': 'Set Read Only', 'description': 'Set the drive to read only mode', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'None', 'rolesSspAccess': 'Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E User - User PIN: W,E,Z - Hashed User PIN: E'}, {'name': 'Set Lock Override', 'description': 'Setting to prevent device from locking during a system reboot', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'None', 'rolesSspAccess': 'Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E'}, {'name': 'Create Recovery PINs', 'description': 'Create PINs that can be used for a user recovery if a user PIN is forgotten', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'Password Hash', 'rolesSspAccess': 'Admin - Recovery PIN: W,Z - Admin PIN: W,E,Z - Hashed Admin PIN: E'}, {'name': '', 'description': '', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': '', 'rolesSspAccess': '- Hashed Recovery PIN: G,W'}, {'name': 'Use Recovery PIN', 'description': 'Use a recovery PIN to allow user to set new PIN', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'Password Hash', 'rolesSspAccess': 'Admin - Recovery PIN: W,E,Z - Hashed Recovery PIN: Z - User PIN: G,W,E User - Recovery PIN: W,E,Z - Hashed Recovery PIN: Z - User PIN: G,W,E - Hashed User PIN: W'}, {'name': 'Setup Forced Enrollment', 'description': 'Puts device in a mode for user to create a PIN before use', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'None', 'rolesSspAccess': 'Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E'}, {'name': 'Set Minimum PIN Length', 'description': 'Set required minimum PIN length for new PINs', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'None', 'rolesSspAccess': 'Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E'}, {'name': 'Set LED Flicker', 'description': 'Set device so LEDs flicker when buttons are pressed', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'None', 'rolesSspAccess': 'Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E'}, {'name': 'Configurat or', 'description': 'Allows automated setup of device PINs and features', 'indicator': 'Global Indicator', 'inputs': 'Encrypted payloads sent from the configurat or service', 'outputs': 'ECC- CDH Public Key', 'secFunImpl': 'DRBG Function Password Hash KTS CKG DRBG KAS', 'rolesSspAccess': 'Admin - User PIN: W,E,Z - Hashed User PIN: G,W - Admin PIN: W,E,Z - Hashed Admin PIN: G,W - Recovery'}, {'name': '', 'description': '', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': '', 'rolesSspAccess': 'PIN: W,E,Z - Hashed Recovery PIN: G,W - Self-Destruct PIN: W,E,Z - Hashed Self- Destruct PIN: G,W - AES-CBC Decryption Key: G,E,Z - ECDH Public Key: G,R,Z - ECDH Private Key: G,E,Z - ECDH Shared Secret "Z": G,E,Z - SP 800- 56Cr2 KDF Internal State: G,E,Z - Host EC DH Public Key: W,E - Module HMAC MAC: G,W,E,Z - Host HMAC MAC: W,E,Z - HMAC Shared Key: G,W,E,Z'}, {'name': 'Show Version', 'description': 'Diagnostics Mode - Unauthenticate d service to check module version and test functionality of all keypad buttons', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'None', 'rolesSspAccess': 'Unauthenticate d'}, {'name': 'Show Status', 'description': 'LED indication for the status of the module', 'indicator': 'Global Indicator', 'inputs': 'None', 'outputs': 'None', 'secFunImpl': 'None', 'rolesSspAccess': 'User Admin'}, {'name': '', 'description': '', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': '', 'rolesSspAccess': 'Unauthenticate d'}, {'name': 'Set Brute Force Attempts', 'description': 'Sets the number of failed unlock attempts before module zeroizes', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'None', 'rolesSspAccess': 'Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E'}, {'name': 'On- Demand Self Tests', 'description': 'Perform module self- tests on demand', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'None', 'rolesSspAccess': 'Unauthenticate d'}, {'name': 'User Reset (FIPS Zeroize)', 'description': 'Zeroize Service', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'CKG AES DRBG Function Entropy Source - ESV CKG DRBG KAS', 'rolesSspAccess': 'Admin - AES Encryption Key: G,W,Z - Hashed User PIN: Z - Hashed Admin PIN: Z - Hashed Recovery PIN: Z - Hashed Self- Destruct PIN: Z - HASH-DRBG Internal State: G,E,Z - ECDH Private Key: G,W,Z - SP 800- 56Cr2 KDF Internal State: Z - HASH DRBG Seed: G,E,Z - Entropy Input: G,E,Z User - AES Encryption Key: G,W,Z - Hashed User PIN: Z - Hashed'}, {'name': 'Name', 'description': 'Description', 'indicator': 'Indicato r', 'inputs': 'Inputs', 'outputs': 'Output s', 'secFunImpl': 'Security Function', 'rolesSspAccess': 'SSP Access'}, {'name': '', 'description': '', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': 's', 'rolesSspAccess': 'Admin PIN: Z - Hashed Recovery PIN: Z - Hashed Self- Destruct PIN: Z - HASH-DRBG Internal State: G,E,Z - ECDH Private Key: G,E,Z - SP 800- 56Cr2 KDF Internal State: Z - HASH DRBG Seed: G,E,Z - Entropy Input: G,E,Z Unauthenticate d - AES Encryption Key: G,W,Z - Hashed User PIN: Z - Hashed Admin PIN: Z - Hashed Recovery PIN: Z - Hashed Self- Destruct PIN: Z - HASH-DRBG Internal State: G,E,Z - ECDH Private Key: G,W,Z - SP 800- 56Cr2 KDF Internal State: Z - HASH DRBG Seed: G,E,Z'}, {'name': '', 'description': '', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': '', 'rolesSspAccess': '- Entropy Input: G,E,Z'}, {'name': 'Provision Lock', 'description': 'Changes module function so zeroize can only be called by Admin', 'indicator': 'Global Indicator', 'inputs': 'Keypad', 'outputs': 'None', 'secFunImpl': 'None', 'rolesSspAccess': 'Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E'}]}, 'non_approved_services': {'section': 4, 'subsection': 4, 'found': False, 'entries': []}, 'mechanisms_actions': {'section': 7, 'subsection': 1, 'found': True, 'entries': [{'mechanism': 'Hard, opaque, tamper-evident, production-grade epoxy coating and metal enclosure', 'inspectFreq': 'In accordance with the Administrator role organizational security policy or every 3 months.', 'inspectGuidance': 'Inspect the cryptographic boundary for scratches, gouges, scrapes, deformations, and any other suspicious signs of malice and tampering. If any evidence of tampering exists, the Administrator role is required to cease use of the cryptographic module immediately.'}]}, 'storage_areas': {'section': 9, 'subsection': 1, 'found': True, 'entries': [{'name': 'RAM', 'description': 'Random Access Memory', 'persistance': 'Dynamic'}, {'name': 'EEPROM', 'description': 'Electrically Erasable Programmable Read Only Memory', 'persistance': 'Static'}]}, 'ssp_io_methods': {'section': 9, 'subsection': 2, 'found': True, 'entries': [{'name': 'PINs - Keypad', 'source': 'EXT: Trusted Channel', 'dest': 'INT', 'format': 'Plaintext', 'distribution': 'Manual', 'entry': 'Direct', 'sfiAlgo': 'Password Hash'}, {'name': 'PINs - Configurator', 'source': 'EXT: Configurato r Service', 'dest': 'INT', 'format': 'Encrypte d', 'distribution': 'Automated', 'entry': 'Electroni c', 'sfiAlgo': 'KTS'}, {'name': 'Public Key', 'source': 'INT', 'dest': 'EXT: Configurato r Service', 'format': 'Plaintext', 'distribution': 'Automated', 'entry': 'Electroni c', 'sfiAlgo': 'KAS'}, {'name': 'Host HMAC Authenticatio n Tag', 'source': 'EXT: Configurato r Service', 'dest': 'INT', 'format': 'Encrypte d', 'distribution': 'Automated', 'entry': 'Electroni c', 'sfiAlgo': 'KTS'}]}, 'ssp_zeroization_methods': {'section': 9, 'subsection': 3, 'found': True, 'entries': [{'method': 'User Reset (FIPS Zeroize)', 'description': 'CO/User issues Reset command', 'rationale': 'The zeroization command will erase all SSPs stored in storage areas', 'operatorId': 'User reset service'}, {'method': 'Self-Destruct', 'description': 'Self Destruct service', 'rationale': 'Self-Destruct shall zeroize the module', 'operatorId': 'Self-Destruct Service'}, {'method': 'Delete all user PINs', 'description': 'Delete all user PINs service', 'rationale': 'Deleted PINs are no longer be accessible and are overwritten with zeros', 'operatorId': 'Delete all User PINs service'}, {'method': 'Change PIN', 'description': 'Change PIN service', 'rationale': 'PIN is overwritten with new PIN', 'operatorId': 'Change PIN Service'}, {'method': 'Configurator', 'description': 'Public Key, HMAC Shared Key and HMAC MAC Destruction', 'rationale': 'Temporary keys used for HMAC and ECDH shall be zeroized when no longer needed', 'operatorId': 'Initialize Module'}, {'method': 'After Use', 'description': 'Temporary Stored RAM values for Plaintext PINs', 'rationale': 'Plaintext PINs are only used to create hash values and verify against hashed PIN values', 'operatorId': 'N/A'}]}, 'self_tests': {'section': 10, 'subsection': 1, 'found': True, 'entries': [{'algorithmOrTest': '16-Bit FW Integrity Tests', 'testProps': 'CRC-16', 'testMethod': 'KAT', 'type': 'SW/FW Integrity', 'indicator': 'Global Indicator', 'details': 'Verify'}]}, 'cond_self_tests': {'section': 10, 'subsection': 2, 'found': True, 'entries': [{'algorithmOrTest': 'SHA2-256', 'testProps': 'SHA2-256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Global Indicator', 'details': 'Verify', 'condition': 'Power up & Authenticate'}, {'algorithmOrTest': 'Hash_DRBG', 'testProps': 'SHA2-256; SP 800-90A Section 11.3 health tests for Instantiate and Generate functions', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Global Indicator', 'details': 'Verify', 'condition': 'Power up & Authenticate'}, {'algorithmOrTest': 'ECDH PCT', 'testProps': 'Module Key Pair', 'testMethod': 'PCT', 'type': 'PCT', 'indicator': 'Global Indicator', 'details': 'Verify', 'condition': 'Configurator Service'}, {'algorithmOrTest': 'HMAC- SHA2-256', 'testProps': 'HMAC- SHA2-256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Global Indicator', 'details': 'Verify', 'condition': 'Power up & Authenticate'}, {'algorithmOrTest': 'AES-256 CBC Encrypt', 'testProps': '256-bit', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Global Indicator', 'details': 'Encrypt', 'condition': 'Power up & Authenticate'}, {'algorithmOrTest': 'AES-256 CBC Decrypt', 'testProps': '256-bit', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Global Indicator', 'details': 'Decrypt', 'condition': 'Power up & Authenticate'}, {'algorithmOrTest': 'ECDH', 'testProps': 'P-256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Global Indicator', 'details': 'Verify', 'condition': 'Power up'}, {'algorithmOrTest': 'One Step KDF', 'testProps': 'SHA2-256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Global Indicator', 'details': 'N/A', 'condition': 'Power up'}, {'algorithmOrTest': '90B RCT & APT Health tests', 'testProps': '1024-bit', 'testMethod': 'APT/RCT', 'type': 'Critical Function', 'indicator': 'Global Indicator', 'details': 'Health- Test with sub- elements', 'condition': 'Power up & Authenticate'}, {'algorithmOrTest': 'XTS-AES 256 Encrypt', 'testProps': '256-bit', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Global Indicator', 'details': 'Encrypt', 'condition': 'Power up & Authenticate'}, {'algorithmOrTest': 'XTS-AES 256 Decrypt', 'testProps': '256-bit', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Global Indicator', 'details': 'Decrypt', 'condition': 'Power up & Authenticate'}, {'algorithmOrTest': 'Partial Key Validation 1', 'testProps': 'Module Public Key P-256', 'testMethod': 'PCT', 'type': 'PCT', 'indicator': 'Global Indicator', 'details': 'Verify', 'condition': 'Power up'}, {'algorithmOrTest': 'Partial Key Validation 2', 'testProps': 'Host Public Key P-256', 'testMethod': 'PCT', 'type': 'PCT', 'indicator': 'Global Indicator', 'details': 'Verify', 'condition': 'Power up'}, {'algorithmOrTest': 'XTS-AES Key Compare', 'testProps': '256-bit', 'testMethod': 'Comparison', 'type': 'Critical Function', 'indicator': 'Global Indicator', 'details': 'Verify', 'condition': 'Zeroization'}, {'algorithmOrTest': 'Manual PIN Entry', 'testProps': 'N/A', 'testMethod': 'Duplicate Key Entry', 'type': 'Manual Entry', 'indicator': 'Global Indicator', 'details': 'Requires PINs be entered twice', 'condition': 'Establishing PINs'}]}, 'error_states': {'section': 10, 'subsection': 4, 'found': True, 'entries': [{'name': 'WDT Reset', 'description': 'Watch Dog Timer Reset - Communication error', 'conditions': 'Power up Authenticate', 'recoveryMethod': 'On-Demand Self- Tests or Device Reset (zeroization)', 'indicator': 'RED LED Blinks 3 times followed by BLUE LED Blink'}, {'name': 'Configurator', 'description': 'Configurator Service Failure', 'conditions': 'Power up', 'recoveryMethod': 'On-Demand Self- Tests or Device Reset (zeroization)', 'indicator': 'RED LED Blinks 4 times followed by BLUE LED Blink'}, {'name': 'FW Integrity', 'description': 'Computed Checksum does not match stored checksum', 'conditions': 'Power up Authenticate', 'recoveryMethod': 'On-Demand Self- Tests or Device Reset (zeroization)', 'indicator': 'RED LED Blinks 5 times followed by BLUE LED Blink'}, {'name': 'SHA2-256 KAT', 'description': 'SHA2-256 KAT failure', 'conditions': 'Power up Authenticate', 'recoveryMethod': 'On-Demand Self- Tests or Device Reset (zeroization)', 'indicator': 'RED LED Blinks 6 times followed by BLUE LED Blink'}, {'name': 'HASH-DRBG KAT', 'description': 'HASH-DRBG KAT failure', 'conditions': 'Power up Authenticate', 'recoveryMethod': 'On-Demand Self- Tests or Device Reset (zeroization)', 'indicator': 'RED LED Blinks 7 times followed by BLUE LED Blink'}, {'name': 'XTS-AES 256 Self-test', 'description': 'XTS-AES 256 Self- test failure', 'conditions': 'Power up Authenticate', 'recoveryMethod': 'On-Demand Self- Tests or Device Reset (zeroization)', 'indicator': 'RED LED Blinks 8 times followed by BLUE LED Blink'}, {'name': 'AES-256-CBC KAT', 'description': 'AES-256-CBC KAT failure', 'conditions': 'Power up Authenticate', 'recoveryMethod': 'On-Demand Self- Tests or Device Reset (zeroization)', 'indicator': 'RED LED Blinks 9 times followed by BLUE LED Blink'}, {'name': 'KAS or KDF KAT', 'description': 'KAS or KDF KAT failure', 'conditions': 'Power up Authenticate', 'recoveryMethod': 'On-Demand Self- Tests or Device Reset (zeroization)', 'indicator': 'RED LED Blinks 10 times followed by BLUE LED Blink'}, {'name': 'ECC Public Key Generation', 'description': 'Failed to Generate Public Key', 'conditions': 'Power up', 'recoveryMethod': 'On-Demand Self- Tests or Device Reset (zeroization)', 'indicator': 'RED LED Blinks 11 times followed by BLUE LED Blink'}, {'name': 'HMAC-SHA2- 256 KAT', 'description': 'HMAC-SHA2-256 KAT failure', 'conditions': 'Power up Authenticate', 'recoveryMethod': 'On-Demand Self- Tests or Device Reset (zeroization)', 'indicator': 'RED LED Blinks 12 times followed by BLUE LED Blink'}, {'name': 'SP800-90B Health Test', 'description': 'SP800-90B health test failure', 'conditions': 'Power up Authenticate', 'recoveryMethod': 'On-Demand Self- Tests or Device Reset (zeroization)', 'indicator': 'RED LED Blinks 13 times followed by BLUE LED Blink'}, {'name': 'Key Comparison', 'description': 'XTS-AES Key Comparison failure', 'conditions': 'Power up Authenticate', 'recoveryMethod': 'On-Demand Self- Tests or Device Reset (zeroization)', 'indicator': 'RED LED Blinks 16 times followed by BLUE LED Blink'}, {'name': 'EEPROM Load', 'description': 'Failed to load XTS- AES key during unlock', 'conditions': 'Power up Authenticate', 'recoveryMethod': 'On-Demand Self- Tests or Device Reset (zeroization)', 'indicator': 'RED LED Blinks 20 times followed by BLUE LED Blink'}]}}.
23.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'is_br1_format': False, 'br1_deviations': 0, 'br1_tables': None}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 3': 1}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA2-256': 23}, '__delete__': ['DRBG 256', 'DRBG 1024']}}}, 'certification_process': {'__update__': {'OutOfScope': {'__insert__': {'supports an Approved mode of operation, therefore a noncompliant configuration is not possible and out of scope for this validation. ### 11.2 Administrator Guidance Upon receipt of the module an operator must': 1}, '__delete__': ['supports an Approved mode of operation, therefore a noncompliant configuration is not possible and out of scope for this validation']}}}} data.
21.09.2026

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5517,
  "dgst": "5078bca8d0b0f7f9",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#A7346",
        "AES-CBCA5907",
        "AES-ECBA7346",
        "ECDSA KeyVer (FIPS186-5)A6008",
        "#A7826",
        "#A7824",
        "#46",
        "#A5907",
        "ECDSA KeyGen (FIPS186-5)A6008",
        "#A7825",
        "HMAC-SHA2-256A7825",
        "KAS-ECC-SSC Sp800-56Ar3A6008",
        "Hash DRBGA5943",
        "KDA OneStep SP800-56Cr2A7826",
        "#A6008",
        "AES-XTS Testing Revision 2.0A7346",
        "SHA2-256A7824",
        "#A5943"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "3.0"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC, AES- ECB",
            "cavpCertName": "A5907, A7346",
            "properties": "Direction - Decrypt, Encrypt Key Length - 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A7346",
            "properties": "Direction - Decrypt, Encrypt Key Length - 256 Payload Length - Payload Length: 128-65536 Increment 128 Tweak Mode - Number Data Unit Length - Data Unit Length: 128- 4096 Increment 128 Data Unit Length Matches Payload Length - No",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "ECDSA KeyGen (FIPS186-5)",
            "cavpCertName": "A6008",
            "properties": "Curve - P-256 Secret Generation Mode - testing candidates",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA KeyVer (FIPS186-5)",
            "cavpCertName": "A6008",
            "properties": "Curve - P-256",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A5943",
            "properties": "Prediction Resistance - No Supports Reseed - No Mode - SHA2-256 Entropy Input - Entropy Input: 1024 Nonce - Nonce: 0 Personalization String Length - Personalization String Length: 0, 0",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "",
            "cavpCertName": "",
            "properties": "Additional Input - Additional Input: 0, 0 Returned Bits - 256",
            "reference": ""
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A7825",
            "properties": "MAC - MAC: 256 Key Length - Key Length: 256 Message Length - Message Length: 64-1536 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-ECC-SSC Sp800-56Ar3",
            "cavpCertName": "A6008",
            "properties": "Domain Parameter Generation Methods - P- 256 Scheme - ephemeralUnified - KAS Role - responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KDA OneStep SP800-56Cr2",
            "cavpCertName": "A7826",
            "properties": "Auxiliary Function Methods - Auxiliary Function Name - SHA2-256 MAC Salting Methods - default Fixed Info Pattern - algorithmId||uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 512 Shared Secret Length - Shared Secret Length: 256",
            "reference": "SP 800-56C Rev. 2"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A7824",
            "properties": "Message Length - Message Length: 64-2048 Increment 8",
            "reference": "FIPS 180-4"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Authenticates the operator to the module",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Unlock",
            "outputs": "None",
            "rolesSspAccess": "Admin - AES Encryption Key: E - Admin PIN: W,E,Z - Hashed Admin PIN: E User - AES Encryption Key: E - User PIN: W,E,Z",
            "secFunImpl": "Password Hash"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- Hashed User PIN: E",
            "secFunImpl": ""
          },
          {
            "description": "Locks the module to prevent any access",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Lock",
            "outputs": "None",
            "rolesSspAccess": "Admin User",
            "secFunImpl": "None"
          },
          {
            "description": "Write user data/files on the disk storage area",
            "indicator": "Global Indicator",
            "inputs": "Plaintext Data",
            "name": "Write Data",
            "outputs": "None",
            "rolesSspAccess": "Admin - AES Encryption Key: E User - AES Encryption Key: E",
            "secFunImpl": "Block Cipher"
          },
          {
            "description": "Read user data/files on the disk storage area",
            "indicator": "Global Indicator",
            "inputs": "None",
            "name": "Read Data",
            "outputs": "Plaintex t Data",
            "rolesSspAccess": "Admin - AES Encryption Key: E User - AES Encryption Key: E",
            "secFunImpl": "Block Cipher"
          },
          {
            "description": "Create Admin or User PIN",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Establish User PINs",
            "outputs": "None",
            "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: G,W User - User PIN: W,E,Z - Hashed User PIN: G,W",
            "secFunImpl": "Password Hash"
          },
          {
            "description": "Change Admin or User PIN",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Change PINs",
            "outputs": "None",
            "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: G,W,E User - User PIN: W,E,Z - Hashed User PIN: G,W,E",
            "secFunImpl": "Password Hash"
          },
          {
            "description": "Enable or Disable Self-",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Set Self- Destruct",
            "outputs": "None",
            "rolesSspAccess": "Admin - Self-Destruct PIN: Z",
            "secFunImpl": "None"
          },
          {
            "description": "Destruct feature",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- Admin PIN: W,E,Z - Hashed Admin PIN: E - Hashed Self- Destruct PIN: Z",
            "secFunImpl": ""
          },
          {
            "description": "Create self destruct PIN (Self destruct must be enabled)",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Self- Destruct PIN",
            "outputs": "None",
            "rolesSspAccess": "Admin - Self-Destruct PIN: G,W,E,Z - Admin PIN: W,E,Z - Hashed Admin PIN: E - Hashed Self- Destruct PIN: G,W User - Self-Destruct PIN: W,E,Z - Hashed Self- Destruct PIN: G,W",
            "secFunImpl": "Password Hash"
          },
          {
            "description": "Use self- destruct PIN to zeroize user data/files on disk storage area",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Self- Destruct",
            "outputs": "None",
            "rolesSspAccess": "Admin - Self-Destruct PIN: W,E,Z - AES Encryption Key: W - Hashed Self- Destruct PIN: E,Z - Hashed Admin PIN: W - Hashed Recovery PIN: Z - Hashed User PIN: Z User - Self-Destruct PIN: W,E,Z - Hashed Self- Destruct PIN: Z - Hashed Admin PIN: W - AES",
            "secFunImpl": "Block Cipher Password Hash"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Encryption Key: W - Hashed Recovery PIN: Z - Hashed User PIN: Z",
            "secFunImpl": ""
          },
          {
            "description": "Deletes all user and recovery PINs. Only Admin PIN remains",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Delete All User PINs",
            "outputs": "None",
            "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E - Hashed User PIN: Z - Hashed Recovery PIN: Z - Hashed Self- Destruct PIN: Z",
            "secFunImpl": "Password Hash"
          },
          {
            "description": "Sets a timer to automatically lock the device after a period of inactivity",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Set Unattende d Auto Lock",
            "outputs": "None",
            "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E",
            "secFunImpl": "None"
          },
          {
            "description": "Set the drive to read only mode",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Set Read Only",
            "outputs": "None",
            "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E User - User PIN: W,E,Z - Hashed User PIN: E",
            "secFunImpl": "None"
          },
          {
            "description": "Setting to prevent device from locking during a system reboot",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Set Lock Override",
            "outputs": "None",
            "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E",
            "secFunImpl": "None"
          },
          {
            "description": "Create PINs that can be used for a user recovery if a user PIN is forgotten",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Create Recovery PINs",
            "outputs": "None",
            "rolesSspAccess": "Admin - Recovery PIN: W,Z - Admin PIN: W,E,Z - Hashed Admin PIN: E",
            "secFunImpl": "Password Hash"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- Hashed Recovery PIN: G,W",
            "secFunImpl": ""
          },
          {
            "description": "Use a recovery PIN to allow user to set new PIN",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Use Recovery PIN",
            "outputs": "None",
            "rolesSspAccess": "Admin - Recovery PIN: W,E,Z - Hashed Recovery PIN: Z - User PIN: G,W,E User - Recovery PIN: W,E,Z - Hashed Recovery PIN: Z - User PIN: G,W,E - Hashed User PIN: W",
            "secFunImpl": "Password Hash"
          },
          {
            "description": "Puts device in a mode for user to create a PIN before use",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Setup Forced Enrollment",
            "outputs": "None",
            "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E",
            "secFunImpl": "None"
          },
          {
            "description": "Set required minimum PIN length for new PINs",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Set Minimum PIN Length",
            "outputs": "None",
            "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E",
            "secFunImpl": "None"
          },
          {
            "description": "Set device so LEDs flicker when buttons are pressed",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Set LED Flicker",
            "outputs": "None",
            "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E",
            "secFunImpl": "None"
          },
          {
            "description": "Allows automated setup of device PINs and features",
            "indicator": "Global Indicator",
            "inputs": "Encrypted payloads sent from the configurat or service",
            "name": "Configurat or",
            "outputs": "ECC- CDH Public Key",
            "rolesSspAccess": "Admin - User PIN: W,E,Z - Hashed User PIN: G,W - Admin PIN: W,E,Z - Hashed Admin PIN: G,W - Recovery",
            "secFunImpl": "DRBG Function Password Hash KTS CKG DRBG KAS"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "PIN: W,E,Z - Hashed Recovery PIN: G,W - Self-Destruct PIN: W,E,Z - Hashed Self- Destruct PIN: G,W - AES-CBC Decryption Key: G,E,Z - ECDH Public Key: G,R,Z - ECDH Private Key: G,E,Z - ECDH Shared Secret \"Z\": G,E,Z - SP 800- 56Cr2 KDF Internal State: G,E,Z - Host EC DH Public Key: W,E - Module HMAC MAC: G,W,E,Z - Host HMAC MAC: W,E,Z - HMAC Shared Key: G,W,E,Z",
            "secFunImpl": ""
          },
          {
            "description": "Diagnostics Mode - Unauthenticate d service to check module version and test functionality of all keypad buttons",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Show Version",
            "outputs": "None",
            "rolesSspAccess": "Unauthenticate d",
            "secFunImpl": "None"
          },
          {
            "description": "LED indication for the status of the module",
            "indicator": "Global Indicator",
            "inputs": "None",
            "name": "Show Status",
            "outputs": "None",
            "rolesSspAccess": "User Admin",
            "secFunImpl": "None"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Unauthenticate d",
            "secFunImpl": ""
          },
          {
            "description": "Sets the number of failed unlock attempts before module zeroizes",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Set Brute Force Attempts",
            "outputs": "None",
            "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E",
            "secFunImpl": "None"
          },
          {
            "description": "Perform module self- tests on demand",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "On- Demand Self Tests",
            "outputs": "None",
            "rolesSspAccess": "Unauthenticate d",
            "secFunImpl": "None"
          },
          {
            "description": "Zeroize Service",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "User Reset (FIPS Zeroize)",
            "outputs": "None",
            "rolesSspAccess": "Admin - AES Encryption Key: G,W,Z - Hashed User PIN: Z - Hashed Admin PIN: Z - Hashed Recovery PIN: Z - Hashed Self- Destruct PIN: Z - HASH-DRBG Internal State: G,E,Z - ECDH Private Key: G,W,Z - SP 800- 56Cr2 KDF Internal State: Z - HASH DRBG Seed: G,E,Z - Entropy Input: G,E,Z User - AES Encryption Key: G,W,Z - Hashed User PIN: Z - Hashed",
            "secFunImpl": "CKG AES DRBG Function Entropy Source - ESV CKG DRBG KAS"
          },
          {
            "description": "Description",
            "indicator": "Indicato r",
            "inputs": "Inputs",
            "name": "Name",
            "outputs": "Output s",
            "rolesSspAccess": "SSP Access",
            "secFunImpl": "Security Function"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Admin PIN: Z - Hashed Recovery PIN: Z - Hashed Self- Destruct PIN: Z - HASH-DRBG Internal State: G,E,Z - ECDH Private Key: G,E,Z - SP 800- 56Cr2 KDF Internal State: Z - HASH DRBG Seed: G,E,Z - Entropy Input: G,E,Z Unauthenticate d - AES Encryption Key: G,W,Z - Hashed User PIN: Z - Hashed Admin PIN: Z - Hashed Recovery PIN: Z - Hashed Self- Destruct PIN: Z - HASH-DRBG Internal State: G,E,Z - ECDH Private Key: G,W,Z - SP 800- 56Cr2 KDF Internal State: Z - HASH DRBG Seed: G,E,Z",
            "secFunImpl": "s"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- Entropy Input: G,E,Z",
            "secFunImpl": ""
          },
          {
            "description": "Changes module function so zeroize can only be called by Admin",
            "indicator": "Global Indicator",
            "inputs": "Keypad",
            "name": "Provision Lock",
            "outputs": "None",
            "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E",
            "secFunImpl": "None"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [
          {
            "description": "A minimum eight- digit PIN is used, with each digit selected from ten (10) possible characters. There are 10^8 (one hundred million) possible PIN combinations",
            "mechanism": "Known Secret",
            "name": "PIN Code Verification",
            "perMinute": "The probability of multiple consecutive attempts to authenticate to the module during a one- minute period is 20/100,000,000",
            "strength": "The probability of a random attempt to authenticate to the module is 1/100,000,000"
          },
          {
            "description": "The modules support ECC- CDH public-key based authentication mechanism using a minimum of curve P-256",
            "mechanism": "ECDSA KeyVer (FIPS186-5) (A6008)",
            "name": "Configurator EC Diffie- Hellman",
            "perMinute": "One authentication attempt is allowed before a User reset must be performed which takes approximately 30 seconds to complete the procedure, therefore there could be ~2 attempts per minute. Given this, the probability of multiple",
            "strength": "Since P-256 curve is used, the probability that a random attempt to authenticate to the module is 1/(2^128) which is much less than 1/1,000,000."
          },
          {
            "description": "",
            "mechanism": "",
            "name": "",
            "perMinute": "consecutive attempts to authenticate to the module during a one- minute period is 2/(2^128) which is much less than 1/100,000.",
            "strength": ""
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "SHA2-256",
            "condition": "Power up \u0026 Authenticate",
            "details": "Verify",
            "indicator": "Global Indicator",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash_DRBG",
            "condition": "Power up \u0026 Authenticate",
            "details": "Verify",
            "indicator": "Global Indicator",
            "testMethod": "KAT",
            "testProps": "SHA2-256; SP 800-90A Section 11.3 health tests for Instantiate and Generate functions",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDH PCT",
            "condition": "Configurator Service",
            "details": "Verify",
            "indicator": "Global Indicator",
            "testMethod": "PCT",
            "testProps": "Module Key Pair",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-256",
            "condition": "Power up \u0026 Authenticate",
            "details": "Verify",
            "indicator": "Global Indicator",
            "testMethod": "KAT",
            "testProps": "HMAC- SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-256 CBC Encrypt",
            "condition": "Power up \u0026 Authenticate",
            "details": "Encrypt",
            "indicator": "Global Indicator",
            "testMethod": "KAT",
            "testProps": "256-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-256 CBC Decrypt",
            "condition": "Power up \u0026 Authenticate",
            "details": "Decrypt",
            "indicator": "Global Indicator",
            "testMethod": "KAT",
            "testProps": "256-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDH",
            "condition": "Power up",
            "details": "Verify",
            "indicator": "Global Indicator",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "One Step KDF",
            "condition": "Power up",
            "details": "N/A",
            "indicator": "Global Indicator",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "90B RCT \u0026 APT Health tests",
            "condition": "Power up \u0026 Authenticate",
            "details": "Health- Test with sub- elements",
            "indicator": "Global Indicator",
            "testMethod": "APT/RCT",
            "testProps": "1024-bit",
            "type": "Critical Function"
          },
          {
            "algorithmOrTest": "XTS-AES 256 Encrypt",
            "condition": "Power up \u0026 Authenticate",
            "details": "Encrypt",
            "indicator": "Global Indicator",
            "testMethod": "KAT",
            "testProps": "256-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "XTS-AES 256 Decrypt",
            "condition": "Power up \u0026 Authenticate",
            "details": "Decrypt",
            "indicator": "Global Indicator",
            "testMethod": "KAT",
            "testProps": "256-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Partial Key Validation 1",
            "condition": "Power up",
            "details": "Verify",
            "indicator": "Global Indicator",
            "testMethod": "PCT",
            "testProps": "Module Public Key P-256",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "Partial Key Validation 2",
            "condition": "Power up",
            "details": "Verify",
            "indicator": "Global Indicator",
            "testMethod": "PCT",
            "testProps": "Host Public Key P-256",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "XTS-AES Key Compare",
            "condition": "Zeroization",
            "details": "Verify",
            "indicator": "Global Indicator",
            "testMethod": "Comparison",
            "testProps": "256-bit",
            "type": "Critical Function"
          },
          {
            "algorithmOrTest": "Manual PIN Entry",
            "condition": "Establishing PINs",
            "details": "Requires PINs be entered twice",
            "indicator": "Global Indicator",
            "testMethod": "Duplicate Key Entry",
            "testProps": "N/A",
            "type": "Manual Entry"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "Power up Authenticate",
            "description": "Watch Dog Timer Reset - Communication error",
            "indicator": "RED LED Blinks 3 times followed by BLUE LED Blink",
            "name": "WDT Reset",
            "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)"
          },
          {
            "conditions": "Power up",
            "description": "Configurator Service Failure",
            "indicator": "RED LED Blinks 4 times followed by BLUE LED Blink",
            "name": "Configurator",
            "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)"
          },
          {
            "conditions": "Power up Authenticate",
            "description": "Computed Checksum does not match stored checksum",
            "indicator": "RED LED Blinks 5 times followed by BLUE LED Blink",
            "name": "FW Integrity",
            "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)"
          },
          {
            "conditions": "Power up Authenticate",
            "description": "SHA2-256 KAT failure",
            "indicator": "RED LED Blinks 6 times followed by BLUE LED Blink",
            "name": "SHA2-256 KAT",
            "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)"
          },
          {
            "conditions": "Power up Authenticate",
            "description": "HASH-DRBG KAT failure",
            "indicator": "RED LED Blinks 7 times followed by BLUE LED Blink",
            "name": "HASH-DRBG KAT",
            "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)"
          },
          {
            "conditions": "Power up Authenticate",
            "description": "XTS-AES 256 Self- test failure",
            "indicator": "RED LED Blinks 8 times followed by BLUE LED Blink",
            "name": "XTS-AES 256 Self-test",
            "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)"
          },
          {
            "conditions": "Power up Authenticate",
            "description": "AES-256-CBC KAT failure",
            "indicator": "RED LED Blinks 9 times followed by BLUE LED Blink",
            "name": "AES-256-CBC KAT",
            "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)"
          },
          {
            "conditions": "Power up Authenticate",
            "description": "KAS or KDF KAT failure",
            "indicator": "RED LED Blinks 10 times followed by BLUE LED Blink",
            "name": "KAS or KDF KAT",
            "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)"
          },
          {
            "conditions": "Power up",
            "description": "Failed to Generate Public Key",
            "indicator": "RED LED Blinks 11 times followed by BLUE LED Blink",
            "name": "ECC Public Key Generation",
            "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)"
          },
          {
            "conditions": "Power up Authenticate",
            "description": "HMAC-SHA2-256 KAT failure",
            "indicator": "RED LED Blinks 12 times followed by BLUE LED Blink",
            "name": "HMAC-SHA2- 256 KAT",
            "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)"
          },
          {
            "conditions": "Power up Authenticate",
            "description": "SP800-90B health test failure",
            "indicator": "RED LED Blinks 13 times followed by BLUE LED Blink",
            "name": "SP800-90B Health Test",
            "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)"
          },
          {
            "conditions": "Power up Authenticate",
            "description": "XTS-AES Key Comparison failure",
            "indicator": "RED LED Blinks 16 times followed by BLUE LED Blink",
            "name": "Key Comparison",
            "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)"
          },
          {
            "conditions": "Power up Authenticate",
            "description": "Failed to load XTS- AES key during unlock",
            "indicator": "RED LED Blinks 20 times followed by BLUE LED Blink",
            "name": "EEPROM Load",
            "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [
          {
            "inspectFreq": "In accordance with the Administrator role organizational security policy or every 3 months.",
            "inspectGuidance": "Inspect the cryptographic boundary for scratches, gouges, scrapes, deformations, and any other suspicious signs of malice and tampering. If any evidence of tampering exists, the Administrator role is required to cease use of the cryptographic module immediately.",
            "mechanism": "Hard, opaque, tamper-evident, production-grade epoxy coating and metal enclosure"
          }
        ],
        "found": true,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "Data Stored on the devices hard drive/memory Encrypted data packets from the configurator service during module initialization Status output for module identifier",
            "logicalInterface": "Data Input Data Output Control Input Status Output Power",
            "physicalPort": "Universal Serial Bus (USB) Connector"
          },
          {
            "data": "Keypad is used to enter PINs for device authentication, and allows crypto officer to change settings",
            "logicalInterface": "Data Input Control Input",
            "physicalPort": "Physical Keypad"
          },
          {
            "data": "LEDs used to communicate module state, settings, and module information",
            "logicalInterface": "Status Output",
            "physicalPort": "Status LEDs"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "PIN Code Verification",
            "name": "User",
            "operatorType": "User",
            "type": "Identity"
          },
          {
            "authMethodList": "PIN Code Verification Configurator EC Diffie-Hellman",
            "name": "Admin",
            "operatorType": "Crypto Officer",
            "type": "Identity"
          },
          {
            "authMethodList": "None",
            "name": "Unauthenticated",
            "operatorType": "Unauthenticated",
            "type": "Identity"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "3",
            "section": "1",
            "title": "General"
          },
          {
            "level": "3",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "3",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "3",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "3",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "N/A",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "3",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "3",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "3",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "3",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "3",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "16-Bit FW Integrity Tests",
            "details": "Verify",
            "indicator": "Global Indicator",
            "testMethod": "KAT",
            "testProps": "CRC-16",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "INT",
            "distribution": "Manual",
            "entry": "Direct",
            "format": "Plaintext",
            "name": "PINs - Keypad",
            "sfiAlgo": "Password Hash",
            "source": "EXT: Trusted Channel"
          },
          {
            "dest": "INT",
            "distribution": "Automated",
            "entry": "Electroni c",
            "format": "Encrypte d",
            "name": "PINs - Configurator",
            "sfiAlgo": "KTS",
            "source": "EXT: Configurato r Service"
          },
          {
            "dest": "EXT: Configurato r Service",
            "distribution": "Automated",
            "entry": "Electroni c",
            "format": "Plaintext",
            "name": "Public Key",
            "sfiAlgo": "KAS",
            "source": "INT"
          },
          {
            "dest": "INT",
            "distribution": "Automated",
            "entry": "Electroni c",
            "format": "Encrypte d",
            "name": "Host HMAC Authenticatio n Tag",
            "sfiAlgo": "KTS",
            "source": "EXT: Configurato r Service"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "CO/User issues Reset command",
            "method": "User Reset (FIPS Zeroize)",
            "operatorId": "User reset service",
            "rationale": "The zeroization command will erase all SSPs stored in storage areas"
          },
          {
            "description": "Self Destruct service",
            "method": "Self-Destruct",
            "operatorId": "Self-Destruct Service",
            "rationale": "Self-Destruct shall zeroize the module"
          },
          {
            "description": "Delete all user PINs service",
            "method": "Delete all user PINs",
            "operatorId": "Delete all User PINs service",
            "rationale": "Deleted PINs are no longer be accessible and are overwritten with zeros"
          },
          {
            "description": "Change PIN service",
            "method": "Change PIN",
            "operatorId": "Change PIN Service",
            "rationale": "PIN is overwritten with new PIN"
          },
          {
            "description": "Public Key, HMAC Shared Key and HMAC MAC Destruction",
            "method": "Configurator",
            "operatorId": "Initialize Module",
            "rationale": "Temporary keys used for HMAC and ECDH shall be zeroized when no longer needed"
          },
          {
            "description": "Temporary Stored RAM values for Plaintext PINs",
            "method": "After Use",
            "operatorId": "N/A",
            "rationale": "Plaintext PINs are only used to create hash values and verify against hashed PIN values"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Random Access Memory",
            "name": "RAM",
            "persistance": "Dynamic"
          },
          {
            "description": "Electrically Erasable Programmable Read Only Memory",
            "name": "EEPROM",
            "persistance": "Static"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [
          {
            "features": "16GB",
            "fwVersion": "1.0.6",
            "hwVersion": "Rev. 0.1",
            "modelPartNum": "ASK3-16GB",
            "processors": "AFSC-Q01 06- 0108"
          },
          {
            "features": "30GB",
            "fwVersion": "1.0.6",
            "hwVersion": "Rev. 0.1",
            "modelPartNum": "ASK3-30GB",
            "processors": "AFSC-Q01 06- 0108"
          },
          {
            "features": "60GB",
            "fwVersion": "1.0.6",
            "hwVersion": "Rev. 0.1",
            "modelPartNum": "ASK3-60GB",
            "processors": "AFSC-Q01 06- 0108"
          },
          {
            "features": "120GB",
            "fwVersion": "1.0.6",
            "hwVersion": "Rev. 0.1",
            "modelPartNum": "ASK3-120GB",
            "processors": "AFSC-Q01 06- 0108"
          },
          {
            "features": "240GB",
            "fwVersion": "1.0.6",
            "hwVersion": "Rev. 0.1",
            "modelPartNum": "ASK3-240GB",
            "processors": "AFSC-Q01 06- 0108"
          },
          {
            "features": "480GB",
            "fwVersion": "1.0.6",
            "hwVersion": "Rev. 0.1",
            "modelPartNum": "ASK3-480GB",
            "processors": "AFSC-Q01 06- 0108"
          },
          {
            "features": "1TB",
            "fwVersion": "1.0.6",
            "hwVersion": "Rev. 0.1",
            "modelPartNum": "ASK3-1TB",
            "processors": "AFSC-Q01 06- 0108"
          },
          {
            "features": "2TB",
            "fwVersion": "1.0.6",
            "hwVersion": "Rev. 0.1",
            "modelPartNum": "ASK3-2TB",
            "processors": "AFSC-Q01 06- 0108"
          },
          {
            "features": "4TB",
            "fwVersion": "1.0.6",
            "hwVersion": "Rev. 0.1",
            "modelPartNum": "ASK3-4TB",
            "processors": "AFSC-Q01 06- 0108"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [
          {
            "algoPropList": "AES:Symmetric",
            "implName": "N/A",
            "name": "CKG AES",
            "reference": "SP800-133r2 Section 6.3 approved method 1"
          },
          {
            "algoPropList": "AES:Symmetric ECC-CDH Private Key:Asymmetric",
            "implName": "N/A",
            "name": "CKG DRBG",
            "reference": "SP800-133r2 Section 4 example 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 4
          },
          "ECDH": {
            "ECDH": 22
          },
          "ECDSA": {
            "ECDSA": 5
          }
        },
        "FF": {
          "DH": {
            "DH": 6,
            "Diffie-Hellman": 1
          }
        }
      },
      "certification_process": {
        "OutOfScope": {
          "out of scope": 1,
          "supports an Approved mode of operation, therefore a noncompliant configuration is not possible and out of scope for this validation": 1
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 5
        },
        "ECB": {
          "ECB": 1
        },
        "XTS": {
          "XTS": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2
        },
        "MAC": {
          "MAC": 7
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 23,
          "curve P-256": 1
        }
      },
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES-256": 4,
          "DRBG 1024": 1,
          "DRBG 256": 1,
          "SHA2-256": 22
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 3": 2,
          "level 3": 1
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 31
        },
        "RNG": {
          "RBG": 4
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140": 2,
          "FIPS 140-3": 5,
          "FIPS 180-4": 1,
          "FIPS 186-5": 2,
          "FIPS 198-1": 1,
          "FIPS186-5": 5
        },
        "NIST": {
          "SP 800-38A": 1,
          "SP 800-38E": 1,
          "SP 800-56A": 4,
          "SP 800-56C": 2,
          "SP 800-90A": 4
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 19,
            "AES-": 3,
            "AES-256": 4
          },
          "CAST": {
            "CAST": 18
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 17
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 2
        },
        "IBM": {
          "SSC": 4
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES-CBCA5907",
        "AES-ECBA7346",
        "ECDSA KeyVer (FIPS186-5)A6008",
        "ECDSA KeyGen (FIPS186-5)A6008",
        "HMAC-SHA2-256A7825",
        "KAS-ECC-SSC Sp800-56Ar3A6008",
        "Hash DRBGA5943",
        "KDA OneStep SP800-56Cr2A7826",
        "AES-XTS Testing Revision 2.0A7346",
        "SHA2-256A7824"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A7346",
        "#A7826",
        "#A7824",
        "#46",
        "#A5907",
        "#A7825",
        "#A6008",
        "#A5943"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20260903083718-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260903083718-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 743585,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://apricorn.com/aegis-secure-key-3"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 40
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "739904a2facf56c0b2b6a78e2ecf55825da72c0a00c5b84996aa9c1c6dd8371d",
      "source_hash": "3b5c7f493939033c40fe4c593cf1efc7148a5a0544fa39092ae109a43049f010",
      "txt_hash": "6fc05e9a3c7713e63a15444becf51ebba213af15498d784adb2e82d240def1cb"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When utilizing a Trusted Channel as specified in the Security Policy",
    "certificate_pdf_url": null,
    "date_sunset": "2031-09-08",
    "description": "The Apricorn Aegis Secure Key 3.0 is a hardware encrypted USB 3.1 memory key. Its software free design allows interface to any host that supports USB and mass storage. Authentication is performed via the embedded keypad and all critical security parameters (PINs, encryption keys, etc) never leave the device boundary for improved security. The device supports 1 administrator and 1 user and offers a variety of features including programmable brute force, recovery PINs, 8- 16 digit PINs, auto lock, read only modes, and is compatible with Apricorn\u2019s Aegis Configurator",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Operational environment: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 3,
    "mentioned_certs": {},
    "module_name": "Aegis Secure Key 3.0 Cryptographic Module",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-09-09",
        "lab": "AEGISOLVE, Inc.",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Apricorn",
    "vendor_url": "http://apricorn.com"
  }
}

Sections

Aegis Secure Key 3.0 Cryptographic Module

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Schemes

Randomness

Elliptic Curves

Block cipher modes

Trusted Execution Environments

Security level

Certification process

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

Aegis Secure Key 3.0 Cryptographic Module

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Schemes

Randomness

Elliptic Curves

Block cipher modes

Device

Trusted Execution Environments

Security

Security level

Certification process

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data