AMD ASP Cryptographic CoProcessor ("Phoenix")

Certificate details

Certificate ID #4723
Status active
Validation dates 11.07.2024
Sunset date 10-07-2029
Standard FIPS 140-3
Security level 1
Type Firmware-Hybrid
Embodiment Single Chip
Caveat None
Exceptions
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description The module is present in these Ryzen PRO 7000 series models (OPNs): 7840U(100-000000970, 100-000000961), 7940HS(100-000000967, 100-000000958), 7840HS(100-000000968, 100-000000959), 7640HS(100-000000969, 100-000000960), 7540U(100-000000971, 100-000000962), 7640U(100-000001111, 100-000001108), 8700G(100-000001238), 8600G(100-000001239), 8700GE(100-000001240), 8600GE(100-000001241), 8840U(100-000001317, 100-000001377), 8640U(100-000001318, 100-000001378), 8840HS(100-000001353, 100-000001381, 100-000001316, 100-000001387), 8940HS(100-000001314, 100-000001386), 8640HS(100-000001354, 100-000001382, 100-000001315, 100-000001388)
Vendor Advanced Micro Devices (AMD) http://www.amd.com
Lab atsec information security corporation
Algorithms
  • RSA SigVer (FIPS186-4)A4201
  • SHA2-384A4201
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
CAST
Randomness
RBG

Trusted Execution Environments
PSP
Vendor
Microsoft

Security level
level 1

Author Hawes, David J. (Fed)
Creation date D:20240610094744-04'00'
Modification date D:20240610094754-04'00'
Pages 18
Creator Acrobat PDFMaker 24 for Word
Producer Adobe PDF Library 24.2.207

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4723,
  "dgst": "5837b4e1cfa199e6",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "RSA SigVer (FIPS186-4)A4201",
        "#A4201",
        "SHA2-384A4201"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "RSA SigVer (FIPS186-4)",
            "cavpCertName": "A4201",
            "properties": "Signature Type - PKCSPSS Modulo - 4096",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A4201",
            "properties": "Message Length - Message Length: 0- 65536 Increment 8",
            "reference": "FIPS 180-4"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Verify a digital signature",
            "indicator": "1",
            "inputs": "Message, public key, signature",
            "name": "Digital Signature Verification",
            "outputs": "Pass/fail",
            "rolesSspAccess": "Crypto Officer - RSA public key: W,E",
            "secFunImpl": "Digital Signature Verification"
          },
          {
            "description": "Return the module",
            "indicator": "None",
            "inputs": "None",
            "name": "Show Version",
            "outputs": "Module version",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "version information",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "",
            "secFunImpl": ""
          },
          {
            "description": "Return the module status",
            "indicator": "None",
            "inputs": "None",
            "name": "Show Status",
            "outputs": "Module status",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "Initiate on- demand self- tests by reset",
            "indicator": "None",
            "inputs": "None",
            "name": "Self-test",
            "outputs": "Pass/fail",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "Digital Signature Verification Message Digest"
          },
          {
            "description": "Zeroize all SSPs",
            "indicator": "None",
            "inputs": "None",
            "name": "Zeroization",
            "outputs": "None",
            "rolesSspAccess": "Crypto Officer - RSA public key: Z",
            "secFunImpl": "None"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "SHA2-384 (A4201)",
            "condition": "Module initialization (before integrity test)",
            "details": "Message digest",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "32-bit message",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-4) (A4201)",
            "condition": "Module initialization (before integrity test)",
            "details": "Signature verification",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "PSS using 4096-bit key with SHA2- 384",
            "type": "CAST"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "SHA2-384 CAST error RSA CAST error Integrity test error",
            "description": "Module immediately stops executing",
            "indicator": "Error code (AA0000FB, AA0000FC, or AA0000FD)",
            "name": "Error",
            "recoveryMethod": "Resetting the module"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "Whenever the module is operational",
            "name": "Approved mode",
            "statusIndicator": "The module always operates in the approved mode",
            "type": "Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "API input parameters for data",
            "logicalInterface": "Data Input",
            "physicalPort": "SRAM"
          },
          {
            "data": "API output parameters for data",
            "logicalInterface": "Data Output",
            "physicalPort": "SRAM"
          },
          {
            "data": "API function calls, API input parameters for control",
            "logicalInterface": "Control Input",
            "physicalPort": "SRAM"
          },
          {
            "data": "API return codes, status values",
            "logicalInterface": "Status Output",
            "physicalPort": "SRAM"
          },
          {
            "data": "Power",
            "logicalInterface": "Power",
            "physicalPort": "Power port"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer",
            "operatorType": "CO",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [],
        "found": false,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "SHA2-384 (A4201)",
            "details": "Performed on fips_module.bin",
            "indicator": "Module is operational",
            "testMethod": "Message digest",
            "testProps": "N/A",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "SRAM",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "API input parameters",
            "sfiAlgo": "",
            "source": "Operator residing on TOEPP"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "De-allocates the volatile memory used to store SSPs",
            "method": "Remove power from the SoC",
            "operatorId": "By removing power",
            "rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Temporary storage for SSPs used by the module as part of service execution",
            "name": "SRAM",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [
          {
            "features": "",
            "integrityTest": "SHA2-384",
            "packageFileName": "fips_module.bin",
            "swFwVersion": "bc0d0443FIPS001"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "AMD Ryzen PRO 7640HS (100- 000000960)",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "N/A",
            "paa_pai": "No",
            "processors": "AMD Ryzen PRO 7640HS (100- 000000960)",
            "version": "bc0d0346FIPS001"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "atsec": {
          "atsec": 20
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "SHA2- 384": 1,
          "SHA2-384": 13
        }
      },
      "fips_security_level": {
        "Level": {
          "level 1": 1
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 20,
          "FIPS 180-4": 1,
          "FIPS 186-4": 3,
          "FIPS 186-5": 1,
          "FIPS186-4": 4
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "CAST": {
            "CAST": 6
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 1
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 1
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "RSA SigVer (FIPS186-4)A4201",
        "SHA2-384A4201"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A4201"
      ]
    },
    "policy_metadata": {
      "/Author": "Hawes, David J. (Fed)",
      "/Comments": "",
      "/Company": "",
      "/CreationDate": "D:20240610094744-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 24 for Word",
      "/Keywords": "",
      "/ModDate": "D:20240610094754-04\u002700\u0027",
      "/Producer": "Adobe PDF Library 24.2.207",
      "/SourceModified": "",
      "/Subject": "",
      "/Title": "",
      "pdf_file_size_bytes": 506572,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.amd.com/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 18
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "dd4d56ab6c3045ea4ae723456d28126297dbcdc89d4d7b6fab9719cdf29e0121",
      "source_hash": "2a9b171fb6e97d19e8b2603bc1cd0444540a776a9f954688416ca009187221ba",
      "txt_hash": "74e2e0d099c4b343cc99b4e62888d1d8e6d551c5ac50f653199ee795a244184e"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "None",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2024_010824_1146.pdf",
    "date_sunset": "2029-07-10",
    "description": "The module is present in these Ryzen PRO 7000 series models (OPNs): 7840U(100-000000970, 100-000000961), 7940HS(100-000000967, 100-000000958), 7840HS(100-000000968, 100-000000959), 7640HS(100-000000969, 100-000000960), 7540U(100-000000971, 100-000000962), 7640U(100-000001111, 100-000001108), 8700G(100-000001238), 8600G(100-000001239), 8700GE(100-000001240), 8600GE(100-000001241), 8840U(100-000001317, 100-000001377), 8640U(100-000001318, 100-000001378), 8840HS(100-000001353, 100-000001381, 100-000001316, 100-000001387), 8940HS(100-000001314, 100-000001386), 8640HS(100-000001354, 100-000001382, 100-000001315, 100-000001388)",
    "embodiment": "Single Chip",
    "exceptions": [
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "AMD ASP Cryptographic CoProcessor (\"Phoenix\")",
    "module_type": "Firmware-Hybrid",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-07-11",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Advanced Micro Devices (AMD)",
    "vendor_url": "http://www.amd.com"
  }
}