{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "5078bca8d0b0f7f9", "cert_id": 5517, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Aegis Secure Key 3.0 Cryptographic Module", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-09-09", "validation_type": "Initial", "lab": "AEGISOLVE, Inc."}], "vendor_url": "http://apricorn.com", "vendor": "Apricorn", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2026_071026_0710.pdf", "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 3, "caveat": "When utilizing a Trusted Channel as specified in the Security Policy", "exceptions": ["Operational environment: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "The Apricorn Aegis Secure Key 3.0 is a hardware encrypted USB 3.1 memory key. Its software free design allows interface to any host that supports USB and mass storage. Authentication is performed via the embedded keypad and all critical security parameters (PINs, encryption keys, etc) never leave the device boundary for improved security. The device supports 1 administrator and 1 user and offers a variety of features including programmable brute force, recovery PINs, 8- 16 digit PINs, auto lock, read only modes, and is compatible with Apricorn\u2019s Aegis Configurator", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-09-08", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 3": 2, "level 3": 1}}, "fips_certlike": {"Certlike": {"SHA2-256": 22, "AES-256": 4, "DRBG 256": 1, "DRBG 1024": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-": 3, "AES": 19, "AES-256": 4}, "CAST": {"CAST": 18}}, "constructions": {"MAC": {"HMAC": 17}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 22}, "ECDSA": {"ECDSA": 5}, "ECC": {"ECC": 4}}, "FF": {"DH": {"Diffie-Hellman": 1, "DH": 6}}}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {"MAC": {"MAC": 7}, "KA": {"Key Agreement": 2}}, "crypto_protocol": {}, "randomness": {"PRNG": {"DRBG": 31}, "RNG": {"RBG": 4}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 5}, "XTS": {"XTS": 1}}, "ecc_curve": {"NIST": {"P-256": 23, "curve P-256": 1}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 2}, "IBM": {"SSC": 4}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 5, "FIPS186-5": 5, "FIPS 186-5": 2, "FIPS 198-1": 1, "FIPS 180-4": 1, "FIPS 140": 2}, "NIST": {"SP 800-38A": 1, "SP 800-38E": 1, "SP 800-90A": 4, "SP 800-56A": 4, "SP 800-56C": 2}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 1, "supports an Approved mode of operation, therefore a noncompliant configuration is not possible and out of scope for this validation": 1}}}, "policy_metadata": {"pdf_file_size_bytes": 743585, "pdf_is_encrypted": false, "pdf_number_of_pages": 40, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260903083718-04'00'", "/ModDate": "D:20260903083718-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://apricorn.com/aegis-secure-key-3"]}}, "module_algorithms": {"_type": "Set", "elements": ["KDA OneStep SP800-56Cr2A7826", "HMAC-SHA2-256A7825", "ECDSA KeyVer (FIPS186-5)A6008", "SHA2-256A7824", "AES-XTS Testing Revision 2.0A7346", "AES-CBCA5907", "Hash DRBGA5943", "AES-ECBA7346", "ECDSA KeyGen (FIPS186-5)A6008", "KAS-ECC-SSC Sp800-56Ar3A6008"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A7824", "#A7825", "#A7826", "#A5943", "#A7346", "#A6008", "#A5907", "#46"]}, "is_br1_format": true, "br1_deviations": 0, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "3"}, {"section": "2", "title": "Cryptographic module specification", "level": "3"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "3"}, {"section": "4", "title": "Roles, services, and authentication", "level": "3"}, {"section": "5", "title": "Software/Firmware security", "level": "3"}, {"section": "6", "title": "Operational environment", "level": "N/A"}, {"section": "7", "title": "Physical security", "level": "3"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "3"}, {"section": "10", "title": "Self-tests", "level": "3"}, {"section": "11", "title": "Life-cycle assurance", "level": "3"}, {"section": "12", "title": "Mitigation of other attacks", "level": "N/A"}, {"section": "", "title": "Overall Level", "level": "3"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": true, "entries": [{"modelPartNum": "ASK3-16GB", "hwVersion": "Rev. 0.1", "fwVersion": "1.0.6", "processors": "AFSC-Q01 06- 0108", "features": "16GB"}, {"modelPartNum": "ASK3-30GB", "hwVersion": "Rev. 0.1", "fwVersion": "1.0.6", "processors": "AFSC-Q01 06- 0108", "features": "30GB"}, {"modelPartNum": "ASK3-60GB", "hwVersion": "Rev. 0.1", "fwVersion": "1.0.6", "processors": "AFSC-Q01 06- 0108", "features": "60GB"}, {"modelPartNum": "ASK3-120GB", "hwVersion": "Rev. 0.1", "fwVersion": "1.0.6", "processors": "AFSC-Q01 06- 0108", "features": "120GB"}, {"modelPartNum": "ASK3-240GB", "hwVersion": "Rev. 0.1", "fwVersion": "1.0.6", "processors": "AFSC-Q01 06- 0108", "features": "240GB"}, {"modelPartNum": "ASK3-480GB", "hwVersion": "Rev. 0.1", "fwVersion": "1.0.6", "processors": "AFSC-Q01 06- 0108", "features": "480GB"}, {"modelPartNum": "ASK3-1TB", "hwVersion": "Rev. 0.1", "fwVersion": "1.0.6", "processors": "AFSC-Q01 06- 0108", "features": "1TB"}, {"modelPartNum": "ASK3-2TB", "hwVersion": "Rev. 0.1", "fwVersion": "1.0.6", "processors": "AFSC-Q01 06- 0108", "features": "2TB"}, {"modelPartNum": "ASK3-4TB", "hwVersion": "Rev. 0.1", "fwVersion": "1.0.6", "processors": "AFSC-Q01 06- 0108", "features": "4TB"}]}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "modes_of_operation": {"section": 2, "subsection": 4, "found": false, "entries": []}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CBC, AES- ECB", "cavpCertName": "A5907, A7346", "properties": "Direction - Decrypt, Encrypt Key Length - 256", "reference": "SP 800-38A"}, {"algorithm": "AES-XTS Testing Revision 2.0", "cavpCertName": "A7346", "properties": "Direction - Decrypt, Encrypt Key Length - 256 Payload Length - Payload Length: 128-65536 Increment 128 Tweak Mode - Number Data Unit Length - Data Unit Length: 128- 4096 Increment 128 Data Unit Length Matches Payload Length - No", "reference": "SP 800-38E"}, {"algorithm": "ECDSA KeyGen (FIPS186-5)", "cavpCertName": "A6008", "properties": "Curve - P-256 Secret Generation Mode - testing candidates", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA KeyVer (FIPS186-5)", "cavpCertName": "A6008", "properties": "Curve - P-256", "reference": "FIPS 186-5"}, {"algorithm": "Hash DRBG", "cavpCertName": "A5943", "properties": "Prediction Resistance - No Supports Reseed - No Mode - SHA2-256 Entropy Input - Entropy Input: 1024 Nonce - Nonce: 0 Personalization String Length - Personalization String Length: 0, 0", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "", "cavpCertName": "", "properties": "Additional Input - Additional Input: 0, 0 Returned Bits - 256", "reference": ""}, {"algorithm": "HMAC-SHA2-256", "cavpCertName": "A7825", "properties": "MAC - MAC: 256 Key Length - Key Length: 256 Message Length - Message Length: 64-1536 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "KAS-ECC-SSC Sp800-56Ar3", "cavpCertName": "A6008", "properties": "Domain Parameter Generation Methods - P- 256 Scheme - ephemeralUnified - KAS Role - responder", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "KDA OneStep SP800-56Cr2", "cavpCertName": "A7826", "properties": "Auxiliary Function Methods - Auxiliary Function Name - SHA2-256 MAC Salting Methods - default Fixed Info Pattern - algorithmId||uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 512 Shared Secret Length - Shared Secret Length: 256", "reference": "SP 800-56C Rev. 2"}, {"algorithm": "SHA2-256", "cavpCertName": "A7824", "properties": "Message Length - Message Length: 64-2048 Increment 8", "reference": "FIPS 180-4"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "CKG AES", "algoPropList": "AES:Symmetric", "implName": "N/A", "reference": "SP800-133r2 Section 6.3 approved method 1"}, {"name": "CKG DRBG", "algoPropList": "AES:Symmetric ECC-CDH Private Key:Asymmetric", "implName": "N/A", "reference": "SP800-133r2 Section 4 example 1"}]}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": false, "entries": []}, "ports_interfaces": {"section": 3, "subsection": 1, "found": true, "entries": [{"physicalPort": "Universal Serial Bus (USB) Connector", "logicalInterface": "Data Input Data Output Control Input Status Output Power", "data": "Data Stored on the devices hard drive/memory Encrypted data packets from the configurator service during module initialization Status output for module identifier"}, {"physicalPort": "Physical Keypad", "logicalInterface": "Data Input Control Input", "data": "Keypad is used to enter PINs for device authentication, and allows crypto officer to change settings"}, {"physicalPort": "Status LEDs", "logicalInterface": "Status Output", "data": "LEDs used to communicate module state, settings, and module information"}]}, "authentication_methods": {"section": 4, "subsection": 1, "found": true, "entries": [{"name": "PIN Code Verification", "description": "A minimum eight- digit PIN is used, with each digit selected from ten (10) possible characters. There are 10^8 (one hundred million) possible PIN combinations", "mechanism": "Known Secret", "strength": "The probability of a random attempt to authenticate to the module is 1/100,000,000", "perMinute": "The probability of multiple consecutive attempts to authenticate to the module during a one- minute period is 20/100,000,000"}, {"name": "Configurator EC Diffie- Hellman", "description": "The modules support ECC- CDH public-key based authentication mechanism using a minimum of curve P-256", "mechanism": "ECDSA KeyVer (FIPS186-5) (A6008)", "strength": "Since P-256 curve is used, the probability that a random attempt to authenticate to the module is 1/(2^128) which is much less than 1/1,000,000.", "perMinute": "One authentication attempt is allowed before a User reset must be performed which takes approximately 30 seconds to complete the procedure, therefore there could be ~2 attempts per minute. Given this, the probability of multiple"}, {"name": "", "description": "", "mechanism": "", "strength": "", "perMinute": "consecutive attempts to authenticate to the module during a one- minute period is 2/(2^128) which is much less than 1/100,000."}]}, "roles": {"section": 4, "subsection": 2, "found": true, "entries": [{"name": "User", "type": "Identity", "operatorType": "User", "authMethodList": "PIN Code Verification"}, {"name": "Admin", "type": "Identity", "operatorType": "Crypto Officer", "authMethodList": "PIN Code Verification Configurator EC Diffie-Hellman"}, {"name": "Unauthenticated", "type": "Identity", "operatorType": "Unauthenticated", "authMethodList": "None"}]}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "Unlock", "description": "Authenticates the operator to the module", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "Password Hash", "rolesSspAccess": "Admin - AES Encryption Key: E - Admin PIN: W,E,Z - Hashed Admin PIN: E User - AES Encryption Key: E - User PIN: W,E,Z"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- Hashed User PIN: E"}, {"name": "Lock", "description": "Locks the module to prevent any access", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Admin User"}, {"name": "Write Data", "description": "Write user data/files on the disk storage area", "indicator": "Global Indicator", "inputs": "Plaintext Data", "outputs": "None", "secFunImpl": "Block Cipher", "rolesSspAccess": "Admin - AES Encryption Key: E User - AES Encryption Key: E"}, {"name": "Read Data", "description": "Read user data/files on the disk storage area", "indicator": "Global Indicator", "inputs": "None", "outputs": "Plaintex t Data", "secFunImpl": "Block Cipher", "rolesSspAccess": "Admin - AES Encryption Key: E User - AES Encryption Key: E"}, {"name": "Establish User PINs", "description": "Create Admin or User PIN", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "Password Hash", "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: G,W User - User PIN: W,E,Z - Hashed User PIN: G,W"}, {"name": "Change PINs", "description": "Change Admin or User PIN", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "Password Hash", "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: G,W,E User - User PIN: W,E,Z - Hashed User PIN: G,W,E"}, {"name": "Set Self- Destruct", "description": "Enable or Disable Self-", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Admin - Self-Destruct PIN: Z"}, {"name": "", "description": "Destruct feature", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- Admin PIN: W,E,Z - Hashed Admin PIN: E - Hashed Self- Destruct PIN: Z"}, {"name": "Self- Destruct PIN", "description": "Create self destruct PIN (Self destruct must be enabled)", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "Password Hash", "rolesSspAccess": "Admin - Self-Destruct PIN: G,W,E,Z - Admin PIN: W,E,Z - Hashed Admin PIN: E - Hashed Self- Destruct PIN: G,W User - Self-Destruct PIN: W,E,Z - Hashed Self- Destruct PIN: G,W"}, {"name": "Self- Destruct", "description": "Use self- destruct PIN to zeroize user data/files on disk storage area", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "Block Cipher Password Hash", "rolesSspAccess": "Admin - Self-Destruct PIN: W,E,Z - AES Encryption Key: W - Hashed Self- Destruct PIN: E,Z - Hashed Admin PIN: W - Hashed Recovery PIN: Z - Hashed User PIN: Z User - Self-Destruct PIN: W,E,Z - Hashed Self- Destruct PIN: Z - Hashed Admin PIN: W - AES"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Encryption Key: W - Hashed Recovery PIN: Z - Hashed User PIN: Z"}, {"name": "Delete All User PINs", "description": "Deletes all user and recovery PINs. Only Admin PIN remains", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "Password Hash", "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E - Hashed User PIN: Z - Hashed Recovery PIN: Z - Hashed Self- Destruct PIN: Z"}, {"name": "Set Unattende d Auto Lock", "description": "Sets a timer to automatically lock the device after a period of inactivity", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E"}, {"name": "Set Read Only", "description": "Set the drive to read only mode", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E User - User PIN: W,E,Z - Hashed User PIN: E"}, {"name": "Set Lock Override", "description": "Setting to prevent device from locking during a system reboot", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E"}, {"name": "Create Recovery PINs", "description": "Create PINs that can be used for a user recovery if a user PIN is forgotten", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "Password Hash", "rolesSspAccess": "Admin - Recovery PIN: W,Z - Admin PIN: W,E,Z - Hashed Admin PIN: E"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- Hashed Recovery PIN: G,W"}, {"name": "Use Recovery PIN", "description": "Use a recovery PIN to allow user to set new PIN", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "Password Hash", "rolesSspAccess": "Admin - Recovery PIN: W,E,Z - Hashed Recovery PIN: Z - User PIN: G,W,E User - Recovery PIN: W,E,Z - Hashed Recovery PIN: Z - User PIN: G,W,E - Hashed User PIN: W"}, {"name": "Setup Forced Enrollment", "description": "Puts device in a mode for user to create a PIN before use", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E"}, {"name": "Set Minimum PIN Length", "description": "Set required minimum PIN length for new PINs", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E"}, {"name": "Set LED Flicker", "description": "Set device so LEDs flicker when buttons are pressed", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E"}, {"name": "Configurat or", "description": "Allows automated setup of device PINs and features", "indicator": "Global Indicator", "inputs": "Encrypted payloads sent from the configurat or service", "outputs": "ECC- CDH Public Key", "secFunImpl": "DRBG Function Password Hash KTS CKG DRBG KAS", "rolesSspAccess": "Admin - User PIN: W,E,Z - Hashed User PIN: G,W - Admin PIN: W,E,Z - Hashed Admin PIN: G,W - Recovery"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "PIN: W,E,Z - Hashed Recovery PIN: G,W - Self-Destruct PIN: W,E,Z - Hashed Self- Destruct PIN: G,W - AES-CBC Decryption Key: G,E,Z - ECDH Public Key: G,R,Z - ECDH Private Key: G,E,Z - ECDH Shared Secret \"Z\": G,E,Z - SP 800- 56Cr2 KDF Internal State: G,E,Z - Host EC DH Public Key: W,E - Module HMAC MAC: G,W,E,Z - Host HMAC MAC: W,E,Z - HMAC Shared Key: G,W,E,Z"}, {"name": "Show Version", "description": "Diagnostics Mode - Unauthenticate d service to check module version and test functionality of all keypad buttons", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Unauthenticate d"}, {"name": "Show Status", "description": "LED indication for the status of the module", "indicator": "Global Indicator", "inputs": "None", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "User Admin"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Unauthenticate d"}, {"name": "Set Brute Force Attempts", "description": "Sets the number of failed unlock attempts before module zeroizes", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E"}, {"name": "On- Demand Self Tests", "description": "Perform module self- tests on demand", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Unauthenticate d"}, {"name": "User Reset (FIPS Zeroize)", "description": "Zeroize Service", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "CKG AES DRBG Function Entropy Source - ESV CKG DRBG KAS", "rolesSspAccess": "Admin - AES Encryption Key: G,W,Z - Hashed User PIN: Z - Hashed Admin PIN: Z - Hashed Recovery PIN: Z - Hashed Self- Destruct PIN: Z - HASH-DRBG Internal State: G,E,Z - ECDH Private Key: G,W,Z - SP 800- 56Cr2 KDF Internal State: Z - HASH DRBG Seed: G,E,Z - Entropy Input: G,E,Z User - AES Encryption Key: G,W,Z - Hashed User PIN: Z - Hashed"}, {"name": "Name", "description": "Description", "indicator": "Indicato r", "inputs": "Inputs", "outputs": "Output s", "secFunImpl": "Security Function", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "s", "rolesSspAccess": "Admin PIN: Z - Hashed Recovery PIN: Z - Hashed Self- Destruct PIN: Z - HASH-DRBG Internal State: G,E,Z - ECDH Private Key: G,E,Z - SP 800- 56Cr2 KDF Internal State: Z - HASH DRBG Seed: G,E,Z - Entropy Input: G,E,Z Unauthenticate d - AES Encryption Key: G,W,Z - Hashed User PIN: Z - Hashed Admin PIN: Z - Hashed Recovery PIN: Z - Hashed Self- Destruct PIN: Z - HASH-DRBG Internal State: G,E,Z - ECDH Private Key: G,W,Z - SP 800- 56Cr2 KDF Internal State: Z - HASH DRBG Seed: G,E,Z"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- Entropy Input: G,E,Z"}, {"name": "Provision Lock", "description": "Changes module function so zeroize can only be called by Admin", "indicator": "Global Indicator", "inputs": "Keypad", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Admin - Admin PIN: W,E,Z - Hashed Admin PIN: E"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": false, "entries": []}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": true, "entries": [{"mechanism": "Hard, opaque, tamper-evident, production-grade epoxy coating and metal enclosure", "inspectFreq": "In accordance with the Administrator role organizational security policy or every 3 months.", "inspectGuidance": "Inspect the cryptographic boundary for scratches, gouges, scrapes, deformations, and any other suspicious signs of malice and tampering. If any evidence of tampering exists, the Administrator role is required to cease use of the cryptographic module immediately."}]}, "storage_areas": {"section": 9, "subsection": 1, "found": true, "entries": [{"name": "RAM", "description": "Random Access Memory", "persistance": "Dynamic"}, {"name": "EEPROM", "description": "Electrically Erasable Programmable Read Only Memory", "persistance": "Static"}]}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "PINs - Keypad", "source": "EXT: Trusted Channel", "dest": "INT", "format": "Plaintext", "distribution": "Manual", "entry": "Direct", "sfiAlgo": "Password Hash"}, {"name": "PINs - Configurator", "source": "EXT: Configurato r Service", "dest": "INT", "format": "Encrypte d", "distribution": "Automated", "entry": "Electroni c", "sfiAlgo": "KTS"}, {"name": "Public Key", "source": "INT", "dest": "EXT: Configurato r Service", "format": "Plaintext", "distribution": "Automated", "entry": "Electroni c", "sfiAlgo": "KAS"}, {"name": "Host HMAC Authenticatio n Tag", "source": "EXT: Configurato r Service", "dest": "INT", "format": "Encrypte d", "distribution": "Automated", "entry": "Electroni c", "sfiAlgo": "KTS"}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "User Reset (FIPS Zeroize)", "description": "CO/User issues Reset command", "rationale": "The zeroization command will erase all SSPs stored in storage areas", "operatorId": "User reset service"}, {"method": "Self-Destruct", "description": "Self Destruct service", "rationale": "Self-Destruct shall zeroize the module", "operatorId": "Self-Destruct Service"}, {"method": "Delete all user PINs", "description": "Delete all user PINs service", "rationale": "Deleted PINs are no longer be accessible and are overwritten with zeros", "operatorId": "Delete all User PINs service"}, {"method": "Change PIN", "description": "Change PIN service", "rationale": "PIN is overwritten with new PIN", "operatorId": "Change PIN Service"}, {"method": "Configurator", "description": "Public Key, HMAC Shared Key and HMAC MAC Destruction", "rationale": "Temporary keys used for HMAC and ECDH shall be zeroized when no longer needed", "operatorId": "Initialize Module"}, {"method": "After Use", "description": "Temporary Stored RAM values for Plaintext PINs", "rationale": "Plaintext PINs are only used to create hash values and verify against hashed PIN values", "operatorId": "N/A"}]}, "self_tests": {"section": 10, "subsection": 1, "found": true, "entries": [{"algorithmOrTest": "16-Bit FW Integrity Tests", "testProps": "CRC-16", "testMethod": "KAT", "type": "SW/FW Integrity", "indicator": "Global Indicator", "details": "Verify"}]}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "SHA2-256", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Global Indicator", "details": "Verify", "condition": "Power up & Authenticate"}, {"algorithmOrTest": "Hash_DRBG", "testProps": "SHA2-256; SP 800-90A Section 11.3 health tests for Instantiate and Generate functions", "testMethod": "KAT", "type": "CAST", "indicator": "Global Indicator", "details": "Verify", "condition": "Power up & Authenticate"}, {"algorithmOrTest": "ECDH PCT", "testProps": "Module Key Pair", "testMethod": "PCT", "type": "PCT", "indicator": "Global Indicator", "details": "Verify", "condition": "Configurator Service"}, {"algorithmOrTest": "HMAC- SHA2-256", "testProps": "HMAC- SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Global Indicator", "details": "Verify", "condition": "Power up & Authenticate"}, {"algorithmOrTest": "AES-256 CBC Encrypt", "testProps": "256-bit", "testMethod": "KAT", "type": "CAST", "indicator": "Global Indicator", "details": "Encrypt", "condition": "Power up & Authenticate"}, {"algorithmOrTest": "AES-256 CBC Decrypt", "testProps": "256-bit", "testMethod": "KAT", "type": "CAST", "indicator": "Global Indicator", "details": "Decrypt", "condition": "Power up & Authenticate"}, {"algorithmOrTest": "ECDH", "testProps": "P-256", "testMethod": "KAT", "type": "CAST", "indicator": "Global Indicator", "details": "Verify", "condition": "Power up"}, {"algorithmOrTest": "One Step KDF", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Global Indicator", "details": "N/A", "condition": "Power up"}, {"algorithmOrTest": "90B RCT & APT Health tests", "testProps": "1024-bit", "testMethod": "APT/RCT", "type": "Critical Function", "indicator": "Global Indicator", "details": "Health- Test with sub- elements", "condition": "Power up & Authenticate"}, {"algorithmOrTest": "XTS-AES 256 Encrypt", "testProps": "256-bit", "testMethod": "KAT", "type": "CAST", "indicator": "Global Indicator", "details": "Encrypt", "condition": "Power up & Authenticate"}, {"algorithmOrTest": "XTS-AES 256 Decrypt", "testProps": "256-bit", "testMethod": "KAT", "type": "CAST", "indicator": "Global Indicator", "details": "Decrypt", "condition": "Power up & Authenticate"}, {"algorithmOrTest": "Partial Key Validation 1", "testProps": "Module Public Key P-256", "testMethod": "PCT", "type": "PCT", "indicator": "Global Indicator", "details": "Verify", "condition": "Power up"}, {"algorithmOrTest": "Partial Key Validation 2", "testProps": "Host Public Key P-256", "testMethod": "PCT", "type": "PCT", "indicator": "Global Indicator", "details": "Verify", "condition": "Power up"}, {"algorithmOrTest": "XTS-AES Key Compare", "testProps": "256-bit", "testMethod": "Comparison", "type": "Critical Function", "indicator": "Global Indicator", "details": "Verify", "condition": "Zeroization"}, {"algorithmOrTest": "Manual PIN Entry", "testProps": "N/A", "testMethod": "Duplicate Key Entry", "type": "Manual Entry", "indicator": "Global Indicator", "details": "Requires PINs be entered twice", "condition": "Establishing PINs"}]}, "error_states": {"section": 10, "subsection": 4, "found": true, "entries": [{"name": "WDT Reset", "description": "Watch Dog Timer Reset - Communication error", "conditions": "Power up Authenticate", "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)", "indicator": "RED LED Blinks 3 times followed by BLUE LED Blink"}, {"name": "Configurator", "description": "Configurator Service Failure", "conditions": "Power up", "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)", "indicator": "RED LED Blinks 4 times followed by BLUE LED Blink"}, {"name": "FW Integrity", "description": "Computed Checksum does not match stored checksum", "conditions": "Power up Authenticate", "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)", "indicator": "RED LED Blinks 5 times followed by BLUE LED Blink"}, {"name": "SHA2-256 KAT", "description": "SHA2-256 KAT failure", "conditions": "Power up Authenticate", "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)", "indicator": "RED LED Blinks 6 times followed by BLUE LED Blink"}, {"name": "HASH-DRBG KAT", "description": "HASH-DRBG KAT failure", "conditions": "Power up Authenticate", "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)", "indicator": "RED LED Blinks 7 times followed by BLUE LED Blink"}, {"name": "XTS-AES 256 Self-test", "description": "XTS-AES 256 Self- test failure", "conditions": "Power up Authenticate", "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)", "indicator": "RED LED Blinks 8 times followed by BLUE LED Blink"}, {"name": "AES-256-CBC KAT", "description": "AES-256-CBC KAT failure", "conditions": "Power up Authenticate", "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)", "indicator": "RED LED Blinks 9 times followed by BLUE LED Blink"}, {"name": "KAS or KDF KAT", "description": "KAS or KDF KAT failure", "conditions": "Power up Authenticate", "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)", "indicator": "RED LED Blinks 10 times followed by BLUE LED Blink"}, {"name": "ECC Public Key Generation", "description": "Failed to Generate Public Key", "conditions": "Power up", "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)", "indicator": "RED LED Blinks 11 times followed by BLUE LED Blink"}, {"name": "HMAC-SHA2- 256 KAT", "description": "HMAC-SHA2-256 KAT failure", "conditions": "Power up Authenticate", "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)", "indicator": "RED LED Blinks 12 times followed by BLUE LED Blink"}, {"name": "SP800-90B Health Test", "description": "SP800-90B health test failure", "conditions": "Power up Authenticate", "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)", "indicator": "RED LED Blinks 13 times followed by BLUE LED Blink"}, {"name": "Key Comparison", "description": "XTS-AES Key Comparison failure", "conditions": "Power up Authenticate", "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)", "indicator": "RED LED Blinks 16 times followed by BLUE LED Blink"}, {"name": "EEPROM Load", "description": "Failed to load XTS- AES key during unlock", "conditions": "Power up Authenticate", "recoveryMethod": "On-Demand Self- Tests or Device Reset (zeroization)", "indicator": "RED LED Blinks 20 times followed by BLUE LED Blink"}]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["#A7824", "KDA OneStep SP800-56Cr2A7826", "HMAC-SHA2-256A7825", "ECDSA KeyVer (FIPS186-5)A6008", "#A7825", "#A7826", "SHA2-256A7824", "AES-XTS Testing Revision 2.0A7346", "#A5943", "AES-CBCA5907", "#A7346", "Hash DRBGA5943", "#A6008", "#A5907", "AES-ECBA7346", "ECDSA KeyGen (FIPS186-5)A6008", "#46", "KAS-ECC-SSC Sp800-56Ar3A6008"]}, "extracted_versions": {"_type": "Set", "elements": ["3.0"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "3b5c7f493939033c40fe4c593cf1efc7148a5a0544fa39092ae109a43049f010", "txt_hash": "6fc05e9a3c7713e63a15444becf51ebba213af15498d784adb2e82d240def1cb", "json_hash": "739904a2facf56c0b2b6a78e2ecf55825da72c0a00c5b84996aa9c1c6dd8371d"}}}