This page was not yet optimized for use on mobile devices.
Motorola Solutions Advanced Crypto Engine (MACE) HSM - Security Level 2
Certificate details
| Certificate ID | #5492 |
|---|---|
| Status | active |
| Validation dates | 17.08.2026 |
| Sunset date | 16-08-2031 |
| Standard | FIPS 140-3 |
| Security level | 2 |
| Type | Hardware |
| Embodiment | SingleChip |
| Caveat | When installed, initialized and configured as specified in Section 11 of the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy |
| Exceptions |
|
| Description | The MACE HSM is a single-chip cryptographic module to meet FIPS 140-3 Level-2 physical security requirements. The Module provides encryption and decryption services for secure key management, and secure voice/data traffic. |
| Vendor | Motorola Solutions, Inc. http://www.motorolasolutions.com |
| Lab | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES256, AES128, AES-128, AES-256, AES-, AES-192, CAST, HMACAsymmetric Algorithms
RSA-2048, ECDH, ECDSA, ECC, DHE, Diffie-Hellman, DHHash functions
SHA-256, SHA2Schemes
MAC, Key AgreementProtocols
SSL, TLS v1.3, TLS1.3, TLS 1.3, TLS, IPsecRandomness
DRBG, RNG, RBGElliptic Curves
P-384Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCMTrusted Execution Environments
PSPSecurity level
Level 2, level 2, Level 3Standards
FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS186-5, FIPS 186-5, FIPS 180-4, FIPS140-3, SP 800-38A, SP 800-38D, SP 800-38F, SP 800-90A, SP 800-56A, SP 800-135, RFC 8446, RFC 7714, RFC3686, RFC3711, RFC5288, RFC5869, RFC5246, RFC6188, RFC7714, RFC8446, ISO/IEC 19790, ISO/IEC 24759Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5492,
"dgst": "7cabc7e02461a788",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"#A2533",
"KDF SRTPA2534",
"#817",
"#A2534",
"AES-KWA2527",
"#A2535",
"#A5253",
"AES-CTRA5275",
"AES-ECBA5275",
"#A6379",
"ECDSA SigVer (FIPS186-4)A2532",
"#A6378",
"#A6380",
"#A5273",
"KAS-ECC Sp800-56Ar3A2533",
"TLS v1.3 KDFA2535",
"AES-GCMA5275",
"#A2527",
"#A5274",
"#A5275",
"ECDSA KeyGen (FIPS186-4)A2532",
"#5438",
"HMAC-SHA2-384A6378",
"AES-CFB8A5273",
"AES-OFBA5275",
"SHA2-256SHS 817",
"Counter DRBGA6380",
"RSA SigVer (FIPS186-5)A5253",
"ECDSA SigGen (FIPS186-4)A2532",
"AES-GMACA5275",
"SHA2-384A6379",
"AES-CBCA5275",
"#A2532"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"2"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 1,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A5273",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A5274",
"properties": "Direction - Decrypt, Encrypt Key Length - 128",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A5275",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A5273",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A5274",
"properties": "Direction - Decrypt, Encrypt Key Length - 128 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A5275",
"properties": "Direction - Decrypt, Encrypt Key Length - 256 Payload Length - Payload Length: 8-128",
"reference": "SP 800-38A"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": ""
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A5273",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A5274",
"properties": "Direction - Decrypt, Encrypt Key Length - 128",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A5275",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A5273",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 256 Tag Length - 128 IV Length - IV Length: 96 Payload Length - Payload Length: 256-512 Increment 128 AAD Length - AAD Length: 256-512 Increment 128",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A5274",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128 Tag Length - 128 IV Length - IV Length: 96 Payload Length - Payload Length: 256-512 Increment 128 AAD Length - AAD Length: 256-512 Increment 128",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A5275",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 256 Tag Length - 128 IV Length - IV Length: 96 Payload Length - Payload Length: 256-512 Increment 128 AAD Length - AAD Length: 256-512 Increment 128",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A5273",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 256 Tag Length - 128 IV Length - IV Length: 96",
"reference": "SP 800-38D"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "AAD Length - AAD Length: 256-512 Increment 128",
"reference": ""
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A5274",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128 Tag Length - 128 IV Length - IV Length: 96 AAD Length - AAD Length: 256-512 Increment 128",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A5275",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 256 Tag Length - 128 IV Length - IV Length: 96 AAD Length - AAD Length: 256-512 Increment 128",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A2527",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 256 Payload Length - Payload Length: 128-256 Increment 64",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A5273",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A5274",
"properties": "Direction - Decrypt, Encrypt Key Length - 128",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A5275",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A6380",
"properties": "Prediction Resistance - No Supports Reseed - No Mode - AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0 Entropy Input - Entropy Input: 256-1024 Increment 128 Nonce - Nonce: 128-512 Increment 128 Personalization String Length - Personalization String Length: 0 Returned Bits - 128",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A2532",
"properties": "Curve - P-384 Secret Generation Mode - Extra Bits",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A2532",
"properties": "Component - No Curve - P-384 Hash Algorithm - SHA2-384",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A2532",
"properties": "Component - No Curve - P-384 Hash Algorithm - SHA2-384",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A6378",
"properties": "MAC - MAC: 384 Key Length - Key Length: 256",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC Sp800-56Ar3",
"cavpCertName": "A2533",
"properties": "Domain Parameter Generation Methods - P- 384 Function - Key Pair Generation, Partial Validation iutId - A1B2C3D4E5 Scheme - ephemeralUnified - KAS Role - Initiator, Responder KDF Methods - oneStepKdf - Auxiliary Function Methods - Auxiliary Function Name - SHA2-384 Fixed Info Pattern - algorithmId||l||uPartyInfo||vPartyInfo Fixed Info Encoding - Concatenation Key Length - 384",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDF SRTP (CVL)",
"cavpCertName": "A2534",
"properties": "AES Key Length - 128, 256 Supports Empty KDR - Yes KDR Exponents - 1",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "RSA SigVer (FIPS186-5)",
"cavpCertName": "A5253",
"properties": "Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048 Signature Type - pkcs1v1.5 Fixed Public Exponent - 010001 Public Exponent Mode - fixed",
"reference": "FIPS 186-5"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A6379",
"properties": "Message Length - Message Length: 256, 8- 2048 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "SHS 817",
"properties": "Message Length - Message Length: 0-51200 Increment 8 Supports Bit-Oriented Messages - No Supports Empty Message - Yes",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A6379",
"properties": "Message Length - Message Length: 384, 8- 2048 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "TLS v1.3 KDF (CVL)",
"cavpCertName": "A2535",
"properties": "HMAC Algorithm - SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE",
"reference": "SP 800-135 Rev. 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Provides a list of drop- in",
"indicator": "Approv ed mode",
"inputs": "Command In",
"name": "Algorithm List Query",
"outputs": "List of drop- in algorithms.",
"rolesSspAccess": "User",
"secFunImpl": "None"
},
{
"description": "algorithms available in the Module using AM2.",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "Success/fail ure status.",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Modify the current password used to identify and authenticat e the CO role using AM1.",
"indicator": "Approv ed mode indicato r and service status output",
"inputs": "Password",
"name": "Change CO Password (AM1)",
"outputs": "Updated the CO password. Success/fail ure status.",
"rolesSspAccess": "Crypto Officer - CO PWD (AM1): G,E,Z - PEK: E - PWD Hash: G,E,Z",
"secFunImpl": "A5273 Encryption A5273 Decryption Common- SHA2"
},
{
"description": "Modify the current password used to identify and authenticat e the User role using AM2.",
"indicator": "Approv ed mode",
"inputs": "Password",
"name": "Change User Password (AM2)",
"outputs": "Updated the User password. Success/fail ure status.",
"rolesSspAccess": "User - PEK: E - PWD Hash: G,E,Z - User PWD (AM2): G,E,Z",
"secFunImpl": "A5273 Encryption A5273 Decryption Common- SHA2"
},
{
"description": "Decrypt data using AM2.",
"indicator": "Approv ed mode",
"inputs": "Ciphertext",
"name": "Decrypt",
"outputs": "Plaintext. Success/fail ure status.",
"rolesSspAccess": "User - KDF-DK: E - KEK: E - KPK: E - TEK: E",
"secFunImpl": "A5275 Decryption A5275 Authenticat ed Decrypt A5274 Decryption A5274 Authenticat ed Decrypt A5273 Decryption A5273 Authenticat ed Decrypt KeyGen1"
},
{
"description": "Mark key for deletion using AM2.",
"indicator": "Approv ed mode",
"inputs": "Command In",
"name": "Delete Key",
"outputs": "Key is marked for deletion. Success/fail ure status.",
"rolesSspAccess": "User",
"secFunImpl": "None"
},
{
"description": "Encrypt data using AM2.",
"indicator": "Approv ed mode",
"inputs": "Plaintext",
"name": "Encrypt",
"outputs": "Ciphertext. Success/fail ure status.",
"rolesSspAccess": "User - DRBG- EI/Seed: E - DRBG- State: E",
"secFunImpl": "A5275 Encryption A5275 Authenticat ed Encrypt"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- KDF-DK: E - KEK: E - KPK: E - TEK: E",
"secFunImpl": "A5274 Encryption A5274 Authenticat ed Encrypt A5273 Encryption A5273 Authenticat ed Encrypt RNG"
},
{
"description": "Transfer keys out of the Module using AM2.",
"indicator": "Approv ed mode",
"inputs": "Command In",
"name": "Export Key",
"outputs": "Ciphertext. Success/fail ure status.",
"rolesSspAccess": "User - BKWK: E - KDF-DK: R - KEK: E - MEK: E - SRTP-MK: R - SRTP-MS: R - TEK: R,E",
"secFunImpl": "A5273 Encryption KTS1"
},
{
"description": "Transfer MEK out of the Module using AM1 \u0026 AM2.",
"indicator": "Approv ed mode",
"inputs": "Command In",
"name": "Export MEK",
"outputs": "Ciphertext. Success/fail ure status.",
"rolesSspAccess": "- TLS-MS: R Crypto Officer - DH-SS: E - MEK: R User - DH-SS: E - MEK: R",
"secFunImpl": "KTS1"
},
{
"description": "Exports the history of actions performed by the operators",
"indicator": "Approv ed mode",
"inputs": "Command In",
"name": "Extract Action Logs",
"outputs": "Error logs out. Success/Fail ure status.",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Provide the history of error events.",
"indicator": "Approv ed mode",
"inputs": "Command In",
"name": "Extract Error Logs",
"outputs": "Error logs out. Success/Fail ure status.",
"rolesSspAccess": "Crypto Officer User",
"secFunImpl": "None"
},
{
"description": "Generate Entropy for use inside the MACE HSM",
"indicator": "Approv ed mode",
"inputs": "Power On",
"name": "Generate Entropy",
"outputs": "DRBG Seed",
"rolesSspAccess": "Unauthentica ted - DRBG- EI/Seed: G - DRBG- nonce: G - DRBG- State: G",
"secFunImpl": "Entropy RNG"
},
{
"description": "Generate a hash of a block of data using AM2.",
"indicator": "Approv ed mode",
"inputs": "Data In.",
"name": "Generate Hash",
"outputs": "Hash. Success/fail ure status",
"rolesSspAccess": "User",
"secFunImpl": "Common- SHA2"
},
{
"description": "Generate symmetric [135] keys within the Module using AM2.",
"indicator": "Approv ed mode",
"inputs": "Command in",
"name": "Generate Key",
"outputs": "Key Stored inside Module. Success/fail ure status.",
"rolesSspAccess": "User - DRBG- nonce: E - DRBG- State: E - IDK: G,Z - IDK Block: E,Z - IDK ROM: E,Z - KDF-DK: G - KPK: G,Z - SRTP-MK: G,E - SRTP-MS: G,E - TLS-MS: E",
"secFunImpl": "KeyGen1 IDK-Gen KDF"
},
{
"description": "Generate a Message Authenticati on Code over a block of data using",
"indicator": "Approv ed mode",
"inputs": "Data to generate MAC",
"name": "Generate MAC",
"outputs": "Generated MAC. Success/fail ure status",
"rolesSspAccess": "User - KDF-DK: E - KEK: E - TEK: E",
"secFunImpl": "HMAC"
},
{
"description": "Generate MEK within the Module using AM1 \u0026 AM2.",
"indicator": "Approv ed mode",
"inputs": "Command in",
"name": "Generate MEK",
"outputs": "MEK Stored inside Module. Success/fail ure status.",
"rolesSspAccess": "Crypto Officer - DRBG- EI/Seed: E - DRBG- State: E - MEK: G User - DRBG- EI/Seed: E - DRBG- State: E - MEK: G",
"secFunImpl": "KeyGen1"
},
{
"description": "Generate a Random Number using AM2.",
"indicator": "Approv ed mode",
"inputs": "Command in.",
"name": "Generate Random Number",
"outputs": "Generated Random Number. Success/fail ure status.",
"rolesSspAccess": "User - DRBG- EI/Seed: E - DRBG- State: E",
"secFunImpl": "RNG"
},
{
"description": "Generate a signature using AM2.",
"indicator": "Approv ed mode",
"inputs": "Command In.",
"name": "Generate Signature",
"outputs": "Signature, Success/fail ure status.",
"rolesSspAccess": "User - DRBG- EI/Seed: E - DRBG- State: E - ECDSA- PRIV: G,E - ECDSA- PUB: G,R",
"secFunImpl": "SigGen1 RNG"
},
{
"description": "Imports keys into the Module encrypted using AM2.",
"indicator": "Approv ed mode",
"inputs": "Ciphertext",
"name": "Import Key",
"outputs": "Key Stored inside the Module. Success/fail ure status.",
"rolesSspAccess": "User - BKWK: E - KDF-DK: R - KEK: W,E - MEK: W,E - SRTP-MK: R - SRTP-MS: R - TEK: W,E - TLS-MS: R",
"secFunImpl": "A5273 Decryption KTS1"
},
{
"description": "Import MEK into the Module encrypted using AM1 \u0026 AM2.",
"indicator": "Approv ed mode",
"inputs": "Ciphertext",
"name": "Import MEK",
"outputs": "MEK Stored inside the Module. Success/fail ure status.",
"rolesSspAccess": "Crypto Officer - DH-SS: E - MEK: W User - DH-SS: E - MEK: W",
"secFunImpl": "KTS1"
},
{
"description": "Retrieve the metadata for a given key present in the Module, using AM2.",
"indicator": "Approv ed mode",
"inputs": "Command in.",
"name": "Key Query",
"outputs": "Key metadata. Success/fail ure status.",
"rolesSspAccess": "User",
"secFunImpl": "None"
},
{
"description": "Obtain status information about a specific key/keyset using AM2.",
"indicator": "Approv ed mode",
"inputs": "Command in",
"name": "KVL Check Key",
"outputs": "Status information on keys Success/Fail ure Indication..",
"rolesSspAccess": "User",
"secFunImpl": "None"
},
{
"description": "Display and Modify OTAR/OTE K Configurati on",
"indicator": "Approv ed mode",
"inputs": "Command in",
"name": "KVL Configurati on",
"outputs": "Configuratio n settings. Success/Fail ure Indication",
"rolesSspAccess": "User",
"secFunImpl": "None"
},
{
"description": "Parameters using AM2.",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Delete Key(s) in the Module using AM2.",
"indicator": "Approv ed mode",
"inputs": "Command in",
"name": "KVL Delete Key",
"outputs": "Success/Fail ure Indication.",
"rolesSspAccess": "User - KEK: Z - MEK: Z - TEK: Z",
"secFunImpl": "None"
},
{
"description": "Import or Modify Keys in the Module using AM2.",
"indicator": "Approv ed mode",
"inputs": "Ciphertext",
"name": "KVL Key Transfer Key",
"outputs": "Store Keys internal to the Module. Success/Fail ure Indication.",
"rolesSspAccess": "User - KEK: W,E,Z - KPK: E - TEK: W,E,Z",
"secFunImpl": "None"
},
{
"description": "Return Module specific version information using AM2.",
"indicator": "Approv ed mode",
"inputs": "Command in",
"name": "KVL Version Info",
"outputs": "Version Information. Success/Fail ure Indication",
"rolesSspAccess": "Unauthentica ted",
"secFunImpl": "None"
},
{
"description": "Logs out CO role using AM1.",
"indicator": "Approv ed mode",
"inputs": "Command In",
"name": "Logout CO (AM1)",
"outputs": "Logout CO",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "User Logout using AM2.",
"indicator": "Approv ed mode",
"inputs": "Command In",
"name": "Logout User (AM2)",
"outputs": "Logout User",
"rolesSspAccess": "User",
"secFunImpl": "None"
},
{
"description": "Set configuratio n parameters used to specify module behavior using AM1..",
"indicator": "Approv ed mode",
"inputs": "Configurati on parameter s",
"name": "Module Configurati on",
"outputs": "Updated module configuration . Success/fail ure status.",
"rolesSspAccess": "Crypto Officer - CO PWD (AM1): Z - DH-Priv: Z - DH-Pub: Z - DH-SS: Z - ECDSA- PRIV: Z - ECDSA- PUB: Z - KDF-DK: Z - KEK: Z - KPK: Z - MEK: Z - PWD Hash: Z - SRTP-MK: Z - SRTP-MS: Z - TEK: Z - TLS-MS: Z",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- User PWD (AM2): Z",
"secFunImpl": ""
},
{
"description": "Return Module specific information using UA. Module HW version, version information, and FIPS status.",
"indicator": "Approv ed mode",
"inputs": "Command in.",
"name": "Module Info",
"outputs": "Module HW version, Firmware version, and FIPS status",
"rolesSspAccess": "Unauthentica ted",
"secFunImpl": "None"
},
{
"description": "Reset the Module",
"indicator": "Approv ed mode",
"inputs": "Command in.",
"name": "Module Reset",
"outputs": "Module Reset",
"rolesSspAccess": "Crypto Officer User",
"secFunImpl": "None"
},
{
"description": "Delete Key(s) in the Module using AM2.",
"indicator": "Approv ed mode",
"inputs": "Command In",
"name": "OTAR/OT EK Delete Key",
"outputs": "Delete Keys stored in the Module. Success/Fail ure Indication",
"rolesSspAccess": "User - KEK: Z - MEK: Z - TEK: Z",
"secFunImpl": "None"
},
{
"description": "Import or Modify Keys in the Module using AM2.",
"indicator": "Approv ed mode",
"inputs": "Ciphertext",
"name": "OTAR/OT EK Transfer Key",
"outputs": "Store Keys internal to the Module. Success/Fail ure Indication.",
"rolesSspAccess": "User - KEK: W,E - KPK: E - TEK: W,E",
"secFunImpl": "KTS1"
},
{
"description": "Perform a key agreement process using AM2.",
"indicator": "Approv ed mode",
"inputs": "Command in.",
"name": "Perform Key Agreement Process",
"outputs": "Generate Keys stored in the Module. Success/fail ure status",
"rolesSspAccess": "User - DH-CLI- Pub: W,E - DH-Priv: G,E - DH-Pub: G,R - DH-SS: G,E - DRBG- EI/Seed: E - DRBG- State: G,E - KDF-DK: G,E - KEK: W - SRTP-MK: W - SRTP-MS: W",
"secFunImpl": "KeyGen2 KAS"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- TEK: W - TLS-MS: W",
"secFunImpl": ""
},
{
"description": "Update the MACE HSM firmware. Firmware upgrades are authenticat ed using a digital signature. The Program Update Public Signature Key is used to validate the signature of the firmware image being loaded before it is allowed to be executed.",
"indicator": "Approv ed mode",
"inputs": "Firmware image",
"name": "Program Update",
"outputs": "The MACE HSM is upgraded to new firmware.",
"rolesSspAccess": "Crypto Officer - BKWK: Z - CO PWD (AM1): Z - DH-CLI- Pub: Z - DH-Priv: Z - DH-Pub: Z - DH-SS: Z - ECDSA- PRIV: Z - ECDSA- PUB: Z - FW-LD- Pub: E,Z - IDK: E,Z - IDK Block: E,Z - IDK ROM: E - KEK: Z - KPK: Z - MEK: Z - PEK: Z - PWD Hash: Z - SRTP-MK: Z - SRTP-MS: Z - TEK: Z - TLS-MS: Z - User PWD (AM2): Z User - BKWK: Z - CO PWD (AM1): Z - DH-CLI- Pub: Z - DH-Priv: Z - DH-Pub: Z - DH-SS: Z - ECDSA- PRIV: Z - ECDSA-",
"secFunImpl": "A5273 Decryption SigVer2"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "PUB: Z - IDK: E,Z - IDK Block: E,Z - IDK ROM: E - KDF-DK: Z - KEK: Z - KPK: Z - MEK: Z - PEK: Z - PWD Hash: Z - SRTP-MK: Z - SRTP-MS: Z - TEK: Z - TLS-MS: Z - User PWD (AM2): Z",
"secFunImpl": ""
},
{
"description": "Perform module self-tests comprised of cryptograp hic algorithm tests and firmware integrity test. Initiated by module reset or transition from power off state to power on state using UA.",
"indicator": "Approv ed mode indicato r and service status output",
"inputs": "Power on/Comma nd In",
"name": "Self-Tests",
"outputs": "Success/Res et.",
"rolesSspAccess": "Unauthentica ted - FW-LD- Pub: E",
"secFunImpl": "A5275 Encryption A5275 Decryption A5275 Authenticat ed Encrypt A5275 Authenticat ed Decrypt A5274 Encryption A5274 Decryption A5274 Authenticat ed Encrypt A5274 Authenticat ed Decrypt A5273 Encryption A5273 Decryption A5273 Authenticat ed Encrypt A5273"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "Authenticat ed Decrypt IDK-Gen SigGen1 SigVer1 SigVer2 Entropy RNG KAS SHA Common- SHA2 HMAC"
},
{
"description": "Validate the current password used to identify and authenticat e the CO role using AM1.",
"indicator": "Approv ed mode",
"inputs": "Password",
"name": "Validate CO Password (AM1)",
"outputs": "Successful authenticatio n will allow access to the services allowed for CO role.",
"rolesSspAccess": "Crypto Officer - CO PWD (AM1): Z - DH-Priv: Z - DH-Pub: Z - DH-SS: Z - ECDSA- PRIV: Z - ECDSA- PUB: Z - KDF-DK: Z - KEK: Z - KPK: G,E,Z - MEK: Z - PEK: E - PWD Hash: W,Z - SRTP-MK: Z - SRTP-MS: Z - TEK: Z - TLS-MS: Z",
"secFunImpl": "A5273 Encryption A5273 Decryption Common- SHA2"
},
{
"description": "Validate the current password used to identify and authenticat e the User role using AM2.",
"indicator": "Approv ed mode",
"inputs": "Password",
"name": "Validate User Password (AM2)",
"outputs": "Successful authenticatio n will allow access to the services allowed for User role.",
"rolesSspAccess": "User - DH-Priv: Z - DH-Pub: Z - DH-SS: Z - ECDSA- PRIV: Z - ECDSA- PUB: Z - KDF-DK: Z - KEK: Z - KPK: G,E,Z - MEK: Z",
"secFunImpl": "A5273 Encryption A5273 Decryption Common- SHA2"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- PEK: E - PWD Hash: W,Z - SRTP-MK: Z - SRTP-MS: Z - TEK: Z - TLS-MS: Z - User PWD (AM2): Z",
"secFunImpl": ""
},
{
"description": "Verify a signature using AM2.",
"indicator": "Approv ed mode",
"inputs": "Command In.",
"name": "Verify Signature",
"outputs": "Success/fail ure status.",
"rolesSspAccess": "User - ECDSA- PUB: E",
"secFunImpl": "SigVer1"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [
{
"description": "Identity- based. Crypto-Officer Password: an 8-32 ASCII (printable) characters password is authenticated to gain access to Crypto- Officer services. It should be noted that after authenticating , this password may be changed at any time through the EBI Port.",
"mechanism": "SHA",
"name": "AM1",
"perMinute": "After the CO password has been incorrectly entered 10 consecutive times, the Module will erase all CSPs, reset the CO password back to the default and must be reinitialized. The strength per minute is 15 in {(10)x(26^2)x(32)x(95^4) }",
"strength": "The password requires a minimum of 1 Upper case, 1 Lower case, 1 Numerical and 1 special character. Since the minimum password length is 8 ASCII printable characters and there are 95 ASCII printable characters, the probability of a successful random attempt is 1 in {(10)x(26^2)x(32)x(95^4) } which is 1 in 17,619,399,200,00."
},
{
"description": "Identity based. User Password: an 8-32 ASCII (printable) characters password is authenticated to gain access to User services. It should be noted that after authenticating , this password may be",
"mechanism": "SHA",
"name": "AM2",
"perMinute": "After the User password has been incorrectly entered 10 consecutive times, the Module will erase all CSPs, reset the User password back to the default and must be reinitialized. The strength per minute is 15 in {(10)x(26^2)x(32)x(95^4) }",
"strength": "The password requires a minimum of 1 Upper case, 1 Lower case, 1 Numerical and 1 special character. Since the minimum password length is 8 ASCII printable characters and there are 95 ASCII printable characters, the probability of a successful random attempt is 1 in {(10)x(26^2)x(32)x(95^4) } which is 1 in 17,619,399,200,00."
},
{
"description": "changed at any time through the EBI Port.",
"mechanism": "",
"name": "",
"perMinute": "",
"strength": ""
}
],
"found": true,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-CBC (A5274) Decryption",
"condition": "Bootup",
"details": "AES-CBC Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A5274) Encryption",
"condition": "Bootup",
"details": "AES-CBC Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A5275) Decryption",
"condition": "Bootup",
"details": "AES-CBC 256 Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A5275) Encryption",
"condition": "Bootup",
"details": "AES-CBC 256 Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CFB8 (A5273) Decryption",
"condition": "Bootup",
"details": "AES-CFB8 256 Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CFB8 (A5273) Encryption",
"condition": "Bootup",
"details": "AES-CFB8 256 Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A5274) Decryption",
"condition": "Bootup",
"details": "AES-CTR Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A5274) Encryption",
"condition": "Bootup",
"details": "AES-CTR Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A5275) Decryption",
"condition": "Bootup",
"details": "AES-CTR 256 Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A5275) Encryption",
"condition": "Bootup",
"details": "AES-CTR 256 Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5274) Decryption",
"condition": "Bootup",
"details": "AES-ECB Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5274) Encryption",
"condition": "Bootup",
"details": "AES-ECB Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5275) Decryption",
"condition": "Bootup",
"details": "AES-ECB 256 Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5275) Encryption",
"condition": "Bootup",
"details": "AES-ECB 256 Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A5273) Decryption",
"condition": "Bootup",
"details": "256-bit AES- GCM and GMAC Authenticated Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A5273) Encryption",
"condition": "Bootup",
"details": "256-bit AES- GCM and GMAC Authenticated Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A5274) Decryption",
"condition": "Bootup",
"details": "128-bit AES- GCM and GMAC Authenticated Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A5274) Encryption",
"condition": "Bootup",
"details": "128-bit AES- GCM and GMAC Authenticated Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A5275) Decryption",
"condition": "Bootup",
"details": "256-bit AES- GCM and GMAC Authenticated Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A5275) Encryption",
"condition": "Bootup",
"details": "256-bit AES- GCM and GMAC Authenticated Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-KW (A2527) Decryption",
"condition": "Bootup",
"details": "Message Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-KW (A2527) Encryption",
"condition": "Bootup",
"details": "Message Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A5273) Decryption",
"condition": "Bootup",
"details": "AES-OFB 256 Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A5273) Encryption",
"condition": "Bootup",
"details": "AES-OFB 256 Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A5274) Decryption",
"condition": "Bootup",
"details": "AES-OFB Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A5274) Encryption",
"condition": "Bootup",
"details": "AES-OFB Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A5275) Decryption",
"condition": "Bootup",
"details": "AES-OFB 256 Decryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A5275) Encryption",
"condition": "Bootup",
"details": "AES-OFB 256 Encryption",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A6380)",
"condition": "Bootup",
"details": "AES-256 CTR_DRBG instantiation and generate KATs performed before the first random",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "AES-256 CTR",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "data generation.",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A2532)",
"condition": "Bootup",
"details": "ECDSA P- 384 Pair-wise Consistency Test",
"indicator": "Success or ES3 on failure",
"testMethod": "PWCT",
"testProps": "ECDSA KeyGen",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A2532)",
"condition": "Bootup",
"details": "ECDSA P- 384 SigGen",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "ECDSA P-384 SigGen",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A2532)",
"condition": "Bootup",
"details": "ECDSA P- 384 SigVer",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "ECDSA P-384 SigVer",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy 90B Start- up Adaptive Proportion Test (APT)",
"condition": "Bootup",
"details": "Designed to detect a large loss of entropy that might occur as a result of some physical failure or environment al change affecting the",
"indicator": "ES4 on failure",
"testMethod": "APT",
"testProps": "Adaptive Proportion Test",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy 90B Start- up Repetition Count Test (RCT)",
"condition": "Bootup",
"details": "Designed to quickly detect catastrophic failures that cause the noise source to become \"stuck\" on a single output value for a long period of time",
"indicator": "ES4 on failure",
"testMethod": "RCT",
"testProps": "Repetition Count Test",
"type": "CAST"
},
{
"algorithmOrTest": "Firmware Load",
"condition": "loading a new firmware image",
"details": "A digital signature is generated over the code when it is built using SHA-256 and RSA-2048. The digital",
"indicator": "Success or ES2 on failure",
"testMethod": "KAT",
"testProps": "2048-bit RSA Signature Verification/SHA2- 256",
"type": "SW/FW Load"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "signature is verified upon download into the MACE HSM.",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A6378)",
"condition": "Bootup",
"details": "HMAC- SHA2-384",
"indicator": "Success or ES2 on failure",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-384",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC Sp800- 56Ar3 (A2533)",
"condition": "Bootup",
"details": "Per IG D.F, separately tested KAS Shared Secret generation with P-384 and SP800- 56Cr2 one- step KDA.",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "KAS-ECC SP800- 56Ar3",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SRTP (A2534)",
"condition": "Bootup",
"details": "SRTP KDF [135]",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "SRTP KDF",
"type": "CAST"
},
{
"algorithmOrTest": "KDF TLS (A2535)",
"condition": "Bootup",
"details": "TLS 1.3 KDF [135]",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "TLS 1.3 KDF",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 5) (A5253)",
"condition": "Bootup",
"details": "2048-bit RSA PKCSv1.5 Signature Verification, performed before Pre- Operational FW integrity tests.",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "RSA-2048 SigVer",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6379)",
"condition": "Bootup",
"details": "SHA2-256",
"indicator": "Success or ES1 on failure",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (SHS 817)",
"condition": "Bootup",
"details": "SHA2, -256, KAT performed before Pre- Operational FW integrity tests.",
"indicator": "Success or ES2 on failure",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "The MACE HSM enters the critical error state. In this state, the MACE HSM stores the status into the internal flash memory and then halts all further operation by entering an infinite loop.",
"description": "The MACE HSM fails a conditional KAT.",
"indicator": "Device will not respond to authentication requests.",
"name": "ES1",
"recoveryMethod": "Reboot/Power cycle the module."
},
{
"conditions": "The MACE HSM enters the firmware signature validation failure state. In this state, the MACE HSM halts all further operations by entering the flash programming mode.",
"description": "The MACE HSM fails a firmware loading during program upgrade and/or firmware integrity pre- operational self- test.",
"indicator": "Device will not respond to authentication requests.",
"name": "ES2",
"recoveryMethod": "Reboot/Power cycle the module or re-flashing a new image."
},
{
"conditions": "The MACE HSM enters a temporary error state. The generated key is discarded.",
"description": "The MACE HSM fails an ECDSA PCT.",
"indicator": "The MACE HSM will return an error code (0x01) to the operator.",
"name": "ES3",
"recoveryMethod": "The error state is automatically cleared and the module resumes normal operation."
},
{
"conditions": "The MACE HSM enters the Fatal Error state.",
"description": "The MACE HSM fails to acquire Entropy.",
"indicator": "The MACE HSM stores the status into the internal flash memory and resets to attempt recovery.",
"name": "ES4",
"recoveryMethod": "Automatic"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [
{
"inspectFreq": "Periodically",
"inspectGuidance": "Look for signs of tampering. Remove from service if tampering found.",
"mechanism": "Covered with a hard-opaque epoxy coating that provides evidence of attempts to tamper with the MACE HSM."
}
],
"found": true,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Operating in approved mode",
"name": "Approved",
"statusIndicator": "FIPS Status : 0x02",
"type": "Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [
{
"caveat": "No Security Claimed. AES MAC is used as part of OTAR but is considered obfuscation.",
"name": "AES MAC",
"use": "[IG 2.4.A] P25 AES OTAR. AES MAC is applied directly to the plaintext OTAR key components and then KTS encryption is performed on the OTAR key components and decrypted within the module using AES KW Cert #5438"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "The main physical port provided by the Module. It provides access to the majority of the supported interfaces.",
"logicalInterface": "Data Input Data Output Control Input Status Output",
"physicalPort": "External Bus Interface (EBI)"
},
{
"data": "This interface provides status output to indicate all power- up self-tests complete successfully.",
"logicalInterface": "Status Output",
"physicalPort": "Status Indicator"
},
{
"data": "This interface powers all circuitry.",
"logicalInterface": "Power",
"physicalPort": "Power"
},
{
"data": "Provides an interface to the Key Variable Loader.",
"logicalInterface": "Data Input Data Output Control Input Status Output",
"physicalPort": "Key Loading Port (KYLD)"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "AM1",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Identity"
},
{
"authMethodList": "AM2",
"name": "User",
"operatorType": "User",
"type": "Identity"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "2",
"section": "1",
"title": "General"
},
{
"level": "2",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "2",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "3",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "3",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "N/A",
"section": "6",
"title": "Operational environment"
},
{
"level": "2",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "2",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "3",
"section": "10",
"title": "Self-tests"
},
{
"level": "3",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "2",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "Firmware integrity",
"details": "When the MACE HSM is powered up, the digital signature is verified. If the digital signature matches then the test passes otherwise it fails.",
"indicator": "Success or ES2 on failure",
"testMethod": "KAT",
"testProps": "SHA2-256 (Cert. #817), RSA-2048 (Cert. #A5253)",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Flash Memory - Encrypted (S3)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Encrypted",
"name": "Input encrypted on ephemeral key generated via KAS (I8)",
"sfiAlgo": "KTS1",
"source": "Application Software (outside)"
},
{
"dest": "Flash Memory - Encrypted (S3)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Encrypted",
"name": "Input encrypted on KEK (I5)",
"sfiAlgo": "KTS1",
"source": "OTAR (outside)"
},
{
"dest": "Flash Memory - Encrypted (S3)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Encrypted",
"name": "Input encrypted on TEK or MEK (I7)",
"sfiAlgo": "KTS1",
"source": "Application Software (outside)"
},
{
"dest": "Flash Memory - Encrypted (S3)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Encrypted",
"name": "Input encrypted on the BKWK (I3)",
"sfiAlgo": "A5273 Decryption",
"source": "Application Software (outside)"
},
{
"dest": "Flash Memory (S2)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Encrypted",
"name": "Input encrypted on the IDK (I1)",
"sfiAlgo": "A5273 Decryption",
"source": "Application Software (outside)"
},
{
"dest": "Flash Memory - Encrypted (S3)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Encrypted",
"name": "Input encrypted on the PEK (I2)",
"sfiAlgo": "A5273 Decryption",
"source": "Application Software (outside)"
},
{
"dest": "Flash Memory (S2)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "Input in plaintext as part of protocol (I4)",
"sfiAlgo": "",
"source": "Application Software (outside)"
},
{
"dest": "Flash Memory (S2)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "Input in plaintext through the KVL (I6)",
"sfiAlgo": "A5273 Decryption",
"source": "KVL"
},
{
"dest": "Application Software (outside)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Encrypted",
"name": "Output encrypted on ephemeral key generated via KAS (O5)",
"sfiAlgo": "KTS1",
"source": "Flash Memory - Encrypted (S3)"
},
{
"dest": "OTAR (outside)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Encrypted",
"name": "Output encrypted on KEK (O3)",
"sfiAlgo": "KTS1",
"source": "Flash Memory - Encrypted (S3)"
},
{
"dest": "Application Software (outside)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Encrypted",
"name": "Output encrypted on the BKWK (O1)",
"sfiAlgo": "A5273 Encryption",
"source": "Flash Memory - Encrypted (S3)"
},
{
"dest": "Application Software (outside)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Encrypted",
"name": "Output encrypted on the TEK or MEK (O4)",
"sfiAlgo": "KTS1",
"source": "Flash Memory - Encrypted (S3)"
},
{
"dest": "Application Software (outside)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "Output in plaintext public key (O2)",
"sfiAlgo": "",
"source": "Flash Memory (S2)"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroized by the \"Program Update\" service.*",
"method": "Z1",
"operatorId": "Yes",
"rationale": "SSPs zeroized upon loading of new firmware."
},
{
"description": "Zeroized by module power cycle or hard reset.*",
"method": "Z2",
"operatorId": "Yes",
"rationale": "SSPs in volatile memory zeroized."
},
{
"description": "Zeroized by the \"Configure Module\" service by overwriting with a fixed pattern of 0s.",
"method": "Z3",
"operatorId": "Yes",
"rationale": "CO zeroize module when configuring into an Approved mode."
},
{
"description": "Zeroized by the \"Change CO Password (AM1)\" service by overwriting with a fixed pattern of 0s.",
"method": "Z4",
"operatorId": "Yes",
"rationale": "Old CO password zeroized as new CO password set"
},
{
"description": "Zeroized by the \"Validate CO Password (AM1)\" service by overwriting with a fixed pattern of 0s.",
"method": "Z5",
"operatorId": "Yes",
"rationale": "CO password zeroized after too many failed login attempts"
},
{
"description": "Zeroized by the \"Change User Password (AM2)\" service by overwriting with a fixed pattern of 0s.",
"method": "Z6",
"operatorId": "Yes",
"rationale": "Old User password zeroized as new CO password set"
},
{
"description": "Zeroized by the \"Validate User Password (AM2)\" service by overwriting with a fixed pattern of 0s.",
"method": "Z7",
"operatorId": "Yes",
"rationale": "User password zeroized after too many failed login attempts"
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Stored in the flash in plaintext, associated by memory location (pointer).",
"name": "Flash Memory (S2)",
"persistance": "Static"
},
{
"description": "Stored in the flash in encrypted, associated by memory location (pointer).",
"name": "Flash Memory - Encrypted (S3)",
"persistance": "Static"
},
{
"description": "Stored in the volatile memory (RAM).",
"name": "System Memory (S1)",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [
{
"features": "N/A",
"fwVersion": "R05.01.07 with [AES256 R01.00.07 and/or AES128 R01.00.05]",
"hwVersion": "5185912",
"modelPartNum": "5185912T05",
"processors": "5185912 family"
},
{
"features": "N/A",
"fwVersion": "R05.01.07 with [AES256 R01.00.07 and/or AES128 R01.00.05]",
"hwVersion": "5185912",
"modelPartNum": "5185912Y03",
"processors": "5185912 family"
},
{
"features": "N/A",
"fwVersion": "R05.01.07 with [AES256 R01.00.07 and/or AES128 R01.00.05]",
"hwVersion": "5185912",
"modelPartNum": "5185912Y05",
"processors": "5185912 family"
},
{
"features": "",
"fwVersion": "Base FW Version",
"hwVersion": "Algorithm FW Version",
"modelPartNum": "Algorithm*",
"processors": "Cert. #"
},
{
"features": "",
"fwVersion": "R05.01.07",
"hwVersion": "R01.00.05",
"modelPartNum": "AES128",
"processors": "A5274"
},
{
"features": "",
"fwVersion": "R05.01.07",
"hwVersion": "R01.00.07",
"modelPartNum": "AES256",
"processors": "A5275"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Asymmetric and Symmetric",
"implName": "N/A",
"name": "CKG1",
"reference": "SP800-133rev2 Section 4 example #1 and IG D.H"
},
{
"algoPropList": "Key Type: Symmetric",
"implName": "N/A",
"name": "CKG - IDK",
"reference": "SP800-133rev2 Sections 6.3 #2 and IG D.H"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 3
},
"ECDH": {
"ECDH": 1
},
"ECDSA": {
"ECDSA": 29
}
},
"FF": {
"DH": {
"DH": 5,
"DHE": 1,
"Diffie-Hellman": 8
}
},
"RSA": {
"RSA-2048": 3
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 4
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 2
},
"ECB": {
"ECB": 1
},
"GCM": {
"GCM": 17
},
"OFB": {
"OFB": 2
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"IPsec": {
"IPsec": 1
},
"TLS": {
"SSL": {
"SSL": 1
},
"TLS": {
"TLS": 9,
"TLS 1.3": 4,
"TLS v1.3": 4,
"TLS1.3": 3
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 3
},
"MAC": {
"MAC": 9
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-384": 14
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#1": 1,
"#2": 3,
"#5": 1,
"#5438": 1,
"#817": 1
}
},
"fips_certlike": {
"Certlike": {
"# A5275": 1,
"AES 256": 1,
"AES-128": 11,
"AES-192": 1,
"AES-256": 24,
"AES-CBC 256": 2,
"AES-CTR 256": 2,
"AES128": 4,
"AES256": 4,
"Diffie-Hellman 384": 1,
"SHA-256": 1,
"SHA2": 8,
"SHA2-256": 11,
"SHA2-384": 8,
"SHS 817": 6
}
},
"fips_security_level": {
"Level": {
"Level 2": 9,
"Level 3": 1,
"level 2": 2
}
},
"hash_function": {
"SHA": {
"SHA2": {
"SHA-256": 1,
"SHA2": 8
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 8
},
"RNG": {
"RBG": 3,
"RNG": 10
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 14,
"FIPS 180-4": 3,
"FIPS 186-4": 3,
"FIPS 186-5": 1,
"FIPS 198-1": 1,
"FIPS PUB 140-3": 2,
"FIPS140-3": 4,
"FIPS186-4": 10,
"FIPS186-5": 3
},
"ISO": {
"ISO/IEC 19790": 2,
"ISO/IEC 24759": 2
},
"NIST": {
"SP 800-135": 2,
"SP 800-38A": 12,
"SP 800-38D": 9,
"SP 800-38F": 1,
"SP 800-56A": 1,
"SP 800-90A": 1
},
"RFC": {
"RFC 7714": 2,
"RFC 8446": 1,
"RFC3686": 1,
"RFC3711": 1,
"RFC5246": 1,
"RFC5288": 1,
"RFC5869": 1,
"RFC6188": 1,
"RFC7714": 1,
"RFC8446": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 24,
"AES-": 9,
"AES-128": 11,
"AES-192": 1,
"AES-256": 24,
"AES128": 4,
"AES256": 4
},
"CAST": {
"CAST": 81
}
},
"constructions": {
"MAC": {
"HMAC": 5
}
}
},
"tee_name": {
"AMD": {
"PSP": 4
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"KDF SRTPA2534",
"AES-KWA2527",
"AES-CTRA5275",
"AES-ECBA5275",
"ECDSA SigVer (FIPS186-4)A2532",
"KAS-ECC Sp800-56Ar3A2533",
"TLS v1.3 KDFA2535",
"AES-GCMA5275",
"ECDSA KeyGen (FIPS186-4)A2532",
"HMAC-SHA2-384A6378",
"AES-CFB8A5273",
"AES-OFBA5275",
"SHA2-256SHS 817",
"Counter DRBGA6380",
"RSA SigVer (FIPS186-5)A5253",
"ECDSA SigGen (FIPS186-4)A2532",
"AES-GMACA5275",
"SHA2-384A6379",
"AES-CBCA5275"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A2533",
"#A6379",
"#A2527",
"#A5274",
"#A5275",
"#A6378",
"#817",
"#A2532",
"#A2534",
"#5438",
"#A5273",
"#A2535",
"#A6380",
"#A5253"
]
},
"policy_metadata": {
"/CreationDate": "D:20260813072357-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260813072357-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 1087525,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules",
"https://support.motorolasolutions.com/s/?language=en_US\u0026region=NA"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 65
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "93cda3edf66c51d2539b44283c3cfbb573894114292e2b4cb75d8c30d8d76e92",
"source_hash": "b74f38c25f16c880ea4edf4912b48ea1f0ba95a9d0603a2723b753ab7370ffbd",
"txt_hash": "08731b7d94c7a1e35313031e8269b262009f36ab2e763ead793db854ec5c1eb8"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When installed, initialized and configured as specified in Section 11 of the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2026_020926_0917.pdf",
"date_sunset": "2031-08-16",
"description": "The MACE HSM is a single-chip cryptographic module to meet FIPS 140-3 Level-2 physical security requirements. The Module provides encryption and decryption services for secure key management, and secure voice/data traffic.",
"embodiment": "SingleChip",
"exceptions": [
"Roles, services, and authentication: Level 3",
"Software/Firmware security: Level 3",
"Operational environment: N/A",
"Non-invasive security: N/A",
"Self-tests: Level 3",
"Life-cycle assurance: Level 3",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 2,
"mentioned_certs": {},
"module_name": "Motorola Solutions Advanced Crypto Engine (MACE) HSM - Security Level 2",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-08-17",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Initial"
}
],
"vendor": "Motorola Solutions, Inc.",
"vendor_url": "http://www.motorolasolutions.com"
}
}