This page was not yet optimized for use on mobile devices.
Google Tensor 5th Gen UFS Inline Storage Encryption Engine
Certificate details
| Certificate ID | #5288 |
|---|---|
| Status | active |
| Validation dates | 22.05.2026 |
| Sunset date | 21-05-2031 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Firmware-Hybrid |
| Embodiment | MultiChipEmbed |
| Caveat | No assurance of minimum security of SSPs (e.g. keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Description | The Google Tensor 5th Gen UFS Inline Storage Encryption Engine provides File-Based Encryption as part of the Google Tensor 5th Gen SoC's suite of services. |
| Vendor | Google LLC http://www.google.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-, CAST, HMACSchemes
MACRandomness
RBGBlock cipher modes
XTSTrusted Execution Environments
Trusty, TEESecurity level
Level 1Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5288,
"dgst": "61f5643dedd8af70",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"HMAC-SHA2-256A7009",
"#A7008",
"#A7009",
"AES-XTS Testing Revision 2.0A7008"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A7008",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38E"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A7009",
"properties": "Key Length - Key Length: 256",
"reference": "FIPS 198-1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Write AES key to hardware registers. Provided by fips-kdn and UFS ISE",
"indicator": "Implicit (Successful completion of service)",
"inputs": "AES-XTS key",
"name": "Set Key",
"outputs": "None",
"rolesSspAccess": "Crypto Officer - AES- XTS key: W",
"secFunImpl": "None"
},
{
"description": "Symmetric Encryption for storage applications. Provided by UFS ISE",
"indicator": "Implicit (Successful completion of service)",
"inputs": "Plaintext",
"name": "Symmetric Encryption",
"outputs": "Ciphertext",
"rolesSspAccess": "Crypto Officer - AES- XTS key: E",
"secFunImpl": "Symmetric Encryption"
},
{
"description": "Symmetric Decryption for storage applications. Provided by UFS ISE",
"indicator": "Implicit (Successful completion of service)",
"inputs": "Ciphertext",
"name": "Symmetric Decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES- XTS key: E",
"secFunImpl": "Symmetric Decryption"
},
{
"description": "Return the module status. Provided by fips-kdn",
"indicator": "None",
"inputs": "None",
"name": "Show Status",
"outputs": "Module status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Return the module name and version information.",
"indicator": "None",
"inputs": "None",
"name": "Show Version",
"outputs": "Module version",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Provided by fips-kdn and UFS ISE",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Perform the CASTs and integrity test. Provided by fips-kdn and UFS ISE",
"indicator": "None",
"inputs": "None",
"name": "Self-Test",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Symmetric Encryption Symmetric Decryption MAC for Integrity Test"
},
{
"description": "Zeroize all unprotected SSPs. Provided by fips-kdn and UFS ISE",
"indicator": "None",
"inputs": "None",
"name": "Zeroization",
"outputs": "None",
"rolesSspAccess": "Crypto Officer - AES- XTS key: Z",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A7008) - Encryption",
"condition": "Test runs at power on",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "512-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A7008) - Decryption",
"condition": "Test runs at power on",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "512-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A7009)",
"condition": "Before integrity test",
"details": "MAC",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "CAST failure Integrity test failure AES-XTS key check error (both halves are equal)",
"description": "Error occurred in fips-kdn firmware",
"indicator": "Module stops functioning and responds to all service requests with status indicating the module is in error state.",
"name": "Firmware Error",
"recoveryMethod": "Reboot module"
},
{
"conditions": "CAST failure",
"description": "Error occurred in UFS ISE hardware",
"indicator": "Module stops functioning. Error Status register is high.",
"name": "Hardware Error",
"recoveryMethod": "Reboot module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [
{
"inspectFreq": "No actions are required to maintain the physical security of the module",
"inspectGuidance": "No actions are required to maintain the physical security of the module",
"mechanism": "Opaque sealing coat"
}
],
"found": true,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered after pre-operational self- tests have passed",
"name": "Approved Mode",
"statusIndicator": "Successful completion of service",
"type": "Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API calls to firmware",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "Keys",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "Module name and version",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "Return codes from firmware API",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
},
{
"data": "Control signals for hardware",
"logicalInterface": "Control Input",
"physicalPort": "Command Queue"
},
{
"data": "Input data to be encrypted/decrypted",
"logicalInterface": "Data Input",
"physicalPort": "Command Queue"
},
{
"data": "Output data that has been encrypted/decrypted",
"logicalInterface": "Data Output",
"physicalPort": "Command Queue"
},
{
"data": "Module error status",
"logicalInterface": "Status Output",
"physicalPort": "Error Status Register"
},
{
"data": "N/A",
"logicalInterface": "Power",
"physicalPort": "Power Pin"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "Crypto Officer",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "1",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC-SHA2-256",
"details": "N/A",
"indicator": "Module becomes",
"testMethod": "MAC tag",
"testProps": "SHA2-",
"type": "SW/FW"
},
{
"algorithmOrTest": "(A7009)",
"details": "",
"indicator": "operational",
"testMethod": "verification",
"testProps": "256",
"type": "Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "RAM",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API Input Parameters",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Registers and RAM quickly lose their stored values upon power-off.",
"method": "Module Reset",
"operatorId": "By power- cycling the module",
"rationale": "Volatile memory in registers requires constant power to maintain state so all state is immediately lost upon power-off. RAM used by the module is overwritten within nanoseconds when power is removed."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Registers used explicitly for key storage within UFS ISE which are inaccessible outside hardware.",
"name": "Key Registers",
"persistance": "Dynamic"
},
{
"description": "Temporary storage for SSPs used by the module as part of service execution.",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Google Tensor 5th Gen + Flash THGJFJT1E45BATP",
"hypervisorHostOs": "N/A",
"operatingSystem": "Trusty",
"paa_pai": "No",
"processors": "Google Tensor 5th Gen",
"version": "13544274"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {},
"certification_process": {},
"cipher_mode": {
"XTS": {
"XTS": 7
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {
"MAC": {
"MAC": 7
}
},
"device_model": {},
"ecc_curve": {},
"eval_facility": {
"atsec": {
"atsec": 26
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"SHA2-256": 1
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 7,
"FIPS 198-1": 2,
"FIPS PUB 140-3": 2
},
"NIST": {
"SP 800-38E": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 4,
"AES-": 6
},
"CAST": {
"CAST": 9
}
},
"constructions": {
"MAC": {
"HMAC": 1
}
}
},
"tee_name": {
"other": {
"TEE": 2,
"Trusty": 3
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"HMAC-SHA2-256A7009",
"AES-XTS Testing Revision 2.0A7008"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A7008",
"#A7009"
]
},
"policy_metadata": {
"/Author": "Jeremy Wesevich",
"/CreationDate": "D:20260521143143-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260521143143-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 498755,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://doi.org/10.6028/NIST.SP.800-38E",
"https://doi.org/10.6028/NIST.FIPS.198-1",
"https://doi.org/10.6028/NIST.FIPS.140-3",
"https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 26
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "0751cd2762e12bc38516854fc5a413822c6830d880d1e67740347b33da084ba4",
"source_hash": "88927eb432b9f1ba31392075975249e40de067f5957e0b748790728821322bc6",
"txt_hash": "a5e86377a5baa8688c4b6cc3bd4b7f3ecfb5c9ed9bff4d31f171208230e3d111"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "No assurance of minimum security of SSPs (e.g. keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/May 2026_030626_0716.pdf",
"date_sunset": "2031-05-21",
"description": "The Google Tensor 5th Gen UFS Inline Storage Encryption Engine provides File-Based Encryption as part of the Google Tensor 5th Gen SoC\u0027s suite of services.",
"embodiment": "MultiChipEmbed",
"exceptions": [
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Google Tensor 5th Gen UFS Inline Storage Encryption Engine",
"module_type": "Firmware-Hybrid",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-05-22",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Google LLC",
"vendor_url": "http://www.google.com"
}
}