This page was not yet optimized for use on mobile devices.
AMD Pensando PenTrust Security Module
Certificate details
| Certificate ID | #4819 |
|---|---|
| Status | active |
| Validation dates | 01.10.2024 |
| Sunset date | 30-09-2029 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software-Hybrid |
| Embodiment | Single Chip |
| Caveat | None |
| Exceptions |
|
| Description | This module provides strong security services to applications running on the AMD Pensando DPU 2.0 |
| Vendor | Advanced Micro Devices, Inc. (AMD) http://www.amd.com |
| Lab | AEGISOLVE, Inc. |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-, CASTAsymmetric Algorithms
RSA2048, ECDSASchemes
MACRandomness
RBGElliptic Curves
P-384, Curve P-384Block cipher modes
ECB, CBC, CTR, GCMTrusted Execution Environments
PSPSecurity level
Level 1Standards
FIPS 140-3, FIPS186-4, FIPS 186-4, FIPS 180-4, SP 800-38A, SP 800-38D, SP 800-140F, PKCS 1, X.509Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4819,
"dgst": "7527ba85bdc16eaa",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"AES-GCMA4453",
"AES-ECBA4453",
"SHA2-512A4453",
"AES-CTRA4453",
"SHA2-256A4453",
"#A4453",
"SHA2-384A4453",
"ECDSA SigVer (FIPS186-4)A4453",
"AES-GMACA4453",
"AES-CBCA4453",
"RSA SigVer (FIPS186-4)A4453"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 2,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A4453",
"properties": "Direction - Decrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4453",
"properties": "Direction - Decrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4453",
"properties": "Direction - Decrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4453",
"properties": "Direction - Decrypt IV Generation - External Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4453",
"properties": "Direction - Decrypt IV Generation - External Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4453",
"properties": "Component - No Curve - P-384 Hash Algorithm - SHA2-384",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4453",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4453",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4453",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4453",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 180-4"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "SHA2-256 SHA2- 384 SHA2-512",
"indicator": "",
"inputs": "DataIn size, DataIn",
"name": "HASH",
"outputs": "Digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Secure Hash"
},
{
"description": "SHA2-256 SHA2- 384 SHA2-512",
"indicator": "",
"inputs": "DataIn size, DataIn",
"name": "HASH_FIRST",
"outputs": "StateOut",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Secure Hash"
},
{
"description": "SHA2-256 SHA2- 384 SHA2-512",
"indicator": "",
"inputs": "DataIn size, StateIn, DataIn",
"name": "HASH_UPD",
"outputs": "StateOut",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Secure Hash"
},
{
"description": "SHA2-256 SHA2- 384 SHA2-512",
"indicator": "",
"inputs": "DataIn size, StateIn, DataIn",
"name": "HASH_FINISH",
"outputs": "DataIn size, StateIn, DataIn",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Secure Hash"
},
{
"description": "RSA: algorithms RSA2048 /SHA2- 256 and RSA4096/SHA2- 512, Padding PKCS and PSS ECDSA: Curve P-384, Hash",
"indicator": "",
"inputs": "Algorithm : RSA or ECDSA, Padding type, Hash algorithm , Key Size,",
"name": "VERIFY",
"outputs": "Success or Failure",
"rolesSspAccess": "Crypto Officer - API RSA Key: W,E,Z - API ECDSA Key:",
"secFunImpl": "Digital Signature"
},
{
"description": "Algorithm SHA2- 384",
"indicator": "",
"inputs": "Message Size, Public Key, Message , Signature",
"name": "",
"outputs": "",
"rolesSspAccess": "W,E,Z - SM Public Key: E",
"secFunImpl": ""
},
{
"description": "Returns the module version information. This is the show module version service required by FIPS 140-3.",
"indicator": "",
"inputs": "DMA pointer to store result",
"name": "FIPS_GET_MO DULE_VERSIO N",
"outputs": "Data containin g the version informati on for the module",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": ""
},
{
"description": "Zeroises long lived SSPs",
"indicator": "",
"inputs": "",
"name": "CMD_FIPS_ZE ROIZE",
"outputs": "",
"rolesSspAccess": "Crypto Officer - CM Public Key: Z - SM Public Key: Z",
"secFunImpl": ""
},
{
"description": "Used for the A72 to signal to PenTrust that boot is successful",
"indicator": "",
"inputs": "",
"name": "BOOT_SUCCES S",
"outputs": "",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": ""
},
{
"description": "Reads the boot status from PenTrust. Includes which PenTrust image (0 or 1) was loaded, and which A72 image (0 or 1) was loaded",
"indicator": "",
"inputs": "",
"name": "DIAG_GET_STA TUS",
"outputs": "FaultStat us, Boot status info",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": ""
},
{
"description": "Used to read out the public key material for SM Public Key or CM Public Key",
"indicator": "",
"inputs": "",
"name": "DIAG_READPU BKEYBOOT",
"outputs": "Key (public key of system authentic ation algorithm type)",
"rolesSspAccess": "Crypto Officer - CM Public Key: R - SM Public Key: R",
"secFunImpl": ""
},
{
"description": "Used to read out the PenTrust serial number",
"indicator": "",
"inputs": "",
"name": "DIAG_SERIAL_ NUMBER",
"outputs": "Serial number (128-bit)",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": ""
},
{
"description": "Sets an internal PenTrust flag that will make it re-evaluate which image to boot at the next reset",
"indicator": "",
"inputs": "",
"name": "DIAG_SET_UP GRADE_FLAG",
"outputs": "",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": ""
},
{
"description": "Used to revoke the CM Public Key or SM Public Key stored by the consuming application in GPC hardware outside the boundary",
"indicator": "",
"inputs": "Key index (select which key is being revoked), Certificat e from manufact urer, Signature of the comman d (based on system authentic ation algorithm",
"name": "REVOKE_PUB_ KEY_BOOT",
"outputs": "",
"rolesSspAccess": "Crypto Officer - CM Public Key: E - SM Public Key: E",
"secFunImpl": ""
},
{
"description": "AES 128/192/256 decrypt in GCM and GMAC modes, GMAC generation and verification",
"indicator": "",
"inputs": "Key metadata , AAD size, Ciphertex t size, Key, IV, AAD, Ciphertex t, MAC",
"name": "GCM_DECR",
"outputs": "Plaintext, MAC",
"rolesSspAccess": "Crypto Officer - API AES Key: W,E,Z",
"secFunImpl": "Authentic ated Block Cipher"
},
{
"description": "AES 128/192/256 decrypt in ECB, CBC, CTR",
"indicator": "",
"inputs": "Key metadata , Ciphertex t size, Key, IV or",
"name": "DECRYPT",
"outputs": "Plaintext, Context",
"rolesSspAccess": "Crypto Officer - API AES Key: W,E,Z",
"secFunImpl": "Block Cipher"
},
{
"description": "",
"indicator": "",
"inputs": "context, Ciphertex t",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Reads and outputs the X.509 chip certificate (binary blob) which is outside of the boundary and not an SSP. This is a helper function.",
"indicator": "",
"inputs": "",
"name": "READ_CHIP_C ERT",
"outputs": "Chip Certificat e",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": ""
},
{
"description": "This is the Show Status service required by FIPS 140-3. The service is provided by the module`s API and will automatically report status of the module during Self-Tests and the Error State. See Section 10 for more information.",
"indicator": "",
"inputs": "",
"name": "SHOW_STATU S",
"outputs": "See Section 10 for more informati on",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": ""
},
{
"description": "This is the Self- Tests service required by FIPS 140-3. The service is provided automatically by the module upon power-cycle, reset, or reboot. All Self-Tests are executed by the module during power-on.",
"indicator": "",
"inputs": "",
"name": "SELF_TEST",
"outputs": "See Section 10 for more informati on",
"rolesSspAccess": "Crypto Officer - CM Public Key: E - SW image authentic ation public key: E",
"secFunImpl": ""
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "SHA2-256",
"condition": "Before first use",
"details": "Hash",
"indicator": "KATS: algorithm_name DONE or KATS: algorithm_name FAILED",
"testMethod": "KAT",
"testProps": "256 bits hash",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512",
"condition": "Before first use",
"details": "Hash",
"indicator": "KATS: algorithm_name DONE or KATS: algorithm_name FAILED",
"testMethod": "KAT",
"testProps": "512 bits hash",
"type": "CAST"
},
{
"algorithmOrTest": "RSA- PKCSPSS- 2048",
"condition": "Before first use",
"details": "Verify",
"indicator": "KATS: algorithm_name DONE or KATS: algorithm_name FAILED",
"testMethod": "KAT",
"testProps": "2048 bits key with SHA2- 256 and Signature Type PKCSPSS",
"type": "CAST"
},
{
"algorithmOrTest": "RSA-PKCS 1.5-2048",
"condition": "Before first use",
"details": "Verify",
"indicator": "KATS: algorithm_name DONE or KATS: algorithm_name FAILED",
"testMethod": "KAT",
"testProps": "2048 bits key with SHA2- 256 and Signature Type PKCS 1.5",
"type": "CAST"
},
{
"algorithmOrTest": "RSA- PKCSPSS- 4096",
"condition": "Before first use",
"details": "Verify",
"indicator": "KATS: algorithm_name DONE or KATS: algorithm_name FAILED",
"testMethod": "KAT",
"testProps": "4096 bits key with SHA2- 512 and Signature Type PKCSPSS",
"type": "CAST"
},
{
"algorithmOrTest": "RSA-PKCS 1.5-4096",
"condition": "Before first use",
"details": "Verify",
"indicator": "KATS: algorithm_name DONE or KATS: algorithm_name FAILED",
"testMethod": "KAT",
"testProps": "4096 bits key with SHA2- 512 and Signature Type PKCS 1.5",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA",
"condition": "Before first use",
"details": "Verify",
"indicator": "KATS: algorithm_name DONE or KATS: algorithm_name FAILED",
"testMethod": "KAT",
"testProps": "P-384 with SHA2-384",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM",
"condition": "Before first use",
"details": "Decrypt",
"indicator": "KATS: algorithm_name DONE or KATS: algorithm_name FAILED",
"testMethod": "KAT",
"testProps": "256 bit key size, GCM mode",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR",
"condition": "Before first use",
"details": "Decrypt",
"indicator": "KATS: algorithm_name DONE or KATS: algorithm_name FAILED",
"testMethod": "KAT",
"testProps": "128 bit key size, CTR mode",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC",
"condition": "Before first use",
"details": "Decrypt",
"indicator": "KATS: algorithm_name DONE or KATS: algorithm_name FAILED",
"testMethod": "KAT",
"testProps": "128 bit key size, CBC mode",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB",
"condition": "Before first use",
"details": "Decrypt",
"indicator": "KATS: algorithm_name DONE or KATS: algorithm_name FAILED",
"testMethod": "KAT",
"testProps": "256 bit key size, ECB mode",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Pre- Operational Self-Tests Conditional Self-Tests",
"description": "Module has failed a Self-Test. FIPS approved services are not provided by the module when it is in this state and data output is inhibited.",
"indicator": "Image self-test: FAILED or KATS: algorithm_name FAILED",
"name": "Error State",
"recoveryMethod": "Power cycle"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Invoke approved services of the module",
"name": "Approved mode of operation",
"statusIndicator": "Global Indicator as per FIPS 140-3 IG 2.4.C. Module only supports approved services.",
"type": "Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "All data being input or output to/from the module, control information and parameters passed via the module`s API, and status output returned from the API. All information travels through the module\u0027s API; with the module\u0027s process memory being physically in SRAM and executing on the platform\u0027s CPU. No information is transmitted by the module over a physical port on the platform.",
"logicalInterface": "Data Input Data Output Control Input Status Output",
"physicalPort": "Mailbox API"
},
{
"data": "Data input or output resulting from Mailbox API request.",
"logicalInterface": "Data Input Data Output",
"physicalPort": "DMA"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "ECDSA",
"details": "Verify",
"indicator": "Image self-test: Passed or Image self-test: FAILED",
"testMethod": "SW Integrity",
"testProps": "P-384 with SHA2-384",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "SRAM inside the boundary",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "API SSP input",
"sfiAlgo": "",
"source": "Entered via Mailbox API from outside the boundary"
},
{
"dest": "Outside the boundary via Mailbox API",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "PSP output",
"sfiAlgo": "",
"source": "SRAM inside the boundary"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Service available to the consuming application to Zeroise Long lived SSPs.",
"method": "CMD_FIPS_ZEROIZE",
"operatorId": "API",
"rationale": ""
},
{
"description": "In-line zeroisation performed automatically by the module upon completion of the service.",
"method": "In-line zeroise",
"operatorId": "Automatic",
"rationale": ""
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Volatile in SRAM only",
"name": "SRAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [
{
"features": "",
"fwVersion": "",
"hwVersion": "version 01",
"modelPartNum": "AMD Pensando DPU 08- 0010-01",
"processors": "ARM Cortex M0 CPU with PAI"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [
{
"features": "",
"integrityTest": "ECDSA P-384 with SHA2-384 digital signature verification",
"packageFileName": "pentrustfw.img",
"swFwVersion": "5.0.0"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "AMD Pensando DPU 08- 0010-01, version 01",
"hypervisorHostOs": "",
"operatingSystem": "N/A",
"paa_pai": "Yes",
"processors": "ARM Cortex M0",
"version": "5.0.0"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDSA": {
"ECDSA": 21
}
},
"RSA": {
"RSA2048": 1
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 3
},
"CTR": {
"CTR": 3
},
"ECB": {
"ECB": 3
},
"GCM": {
"GCM": 4
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {
"MAC": {
"MAC": 2
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"Curve P-384": 1,
"P-384": 19
}
},
"eval_facility": {},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 1,
"AES 128/192/256": 2,
"AES-CBC 128": 1,
"AES-CTR 128": 1,
"AES-GCM 256": 1,
"PKCS 1": 7,
"RSA-PKCS 1": 4,
"RSA2048": 1,
"SHA2- 256": 2,
"SHA2- 384": 1,
"SHA2- 512": 2,
"SHA2-256": 9,
"SHA2-384": 7,
"SHA2-512": 8,
"SHA2-512 512": 1
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 34,
"FIPS 180-4": 3,
"FIPS 186-4": 2,
"FIPS186-4": 4
},
"NIST": {
"SP 800-140F": 1,
"SP 800-38A": 3,
"SP 800-38D": 2
},
"PKCS": {
"PKCS 1": 4
},
"X509": {
"X.509": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 6,
"AES-": 2
},
"CAST": {
"CAST": 22
}
}
},
"tee_name": {
"AMD": {
"PSP": 8
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"AES-GCMA4453",
"AES-ECBA4453",
"SHA2-512A4453",
"AES-CTRA4453",
"SHA2-256A4453",
"SHA2-384A4453",
"ECDSA SigVer (FIPS186-4)A4453",
"AES-GMACA4453",
"AES-CBCA4453",
"RSA SigVer (FIPS186-4)A4453"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A4453"
]
},
"policy_metadata": {
"/Author": "Hawes, David J. (Fed)",
"/ClassificationContentMarkingHeaderFontProps": "#0000ff,10,Arial",
"/ClassificationContentMarkingHeaderShapeIds": "42ee774f,4fde0ae3,6a65d955",
"/ClassificationContentMarkingHeaderText": "[AMD Official Use Only - General]",
"/Comments": "",
"/Company": "",
"/CreationDate": "D:20240927091803-04\u002700\u0027",
"/Creator": "Acrobat PDFMaker 24 for Word",
"/Keywords": "",
"/MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_ActionId": "736dab4f-eca9-4ba6-ab7b-2d8ee554a201",
"/MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_ContentBits": "1",
"/MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_Enabled": "true",
"/MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_Method": "Standard",
"/MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_Name": "General",
"/MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_SetDate": "2023-10-05T23:44:26Z",
"/MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_SiteId": "3dd8961f-e488-4e60-8e11-a82d994e183d",
"/ModDate": "D:20240927091821-04\u002700\u0027",
"/Producer": "Adobe PDF Library 24.3.144",
"/SourceModified": "",
"/Subject": "",
"/Title": "",
"pdf_file_size_bytes": 460470,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 24
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "081fb053dc0a40ae091b2ed36cd79d5fe3d9c1381a1e34a6e8295d02a716a305",
"source_hash": "4d8f047393aa2e263b5557481fbf62b2aaea213ad10b85deab0a74c5d361ea15",
"txt_hash": "26d8c16e3d880449ea52d1ce749f12087e98a23f51ae32b3ba18ae1d211df673"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "None",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/October 2024_041124_0733 (1).pdf",
"date_sunset": "2029-09-30",
"description": "This module provides strong security services to applications running on the AMD Pensando DPU 2.0",
"embodiment": "Single Chip",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "AMD Pensando PenTrust Security Module",
"module_type": "Software-Hybrid",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2024-10-01",
"lab": "AEGISOLVE, Inc.",
"validation_type": "Initial"
}
],
"vendor": "Advanced Micro Devices, Inc. (AMD)",
"vendor_url": "http://www.amd.com"
}
}