Purity Encryption Module
Certificate #4109
Webpage information ?
Security policy ?
Symmetric Algorithms
AES, HMAC, HMAC-SHA-256Hash functions
SHA-256Randomness
DRBG, RNGBlock cipher modes
ECB, CTRVendor
MicrosoftSecurity level
Level 1Standards
FIPS 140-2, FIPS 197, FIPS 198-1, FIPS 180-4, FIPS140-2, SP 800-38A, SP 800-38F, SP 800-90A, SP 800-131AFile metadata
Author | avaralikar |
---|---|
Creation date | D:20230316200521-07'00' |
Modification date | D:20230316200521-07'00' |
Pages | 19 |
Creator | Microsoft® Word for Microsoft 365 |
Producer | Microsoft® Word for Microsoft 365 |
References
Outgoing- 260 - historical - Encryption Services Module
Heuristics ?
No heuristics are available for this certificate.
References ?
Updates ?
-
18.05.2023 The certificate data changed.
Certificate changed
The web extraction data was updated.
- The validation_history property was updated, with the
[[4, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2023-04-04', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}]]
values inserted. - The tested_conf property was updated, with the
[[6, 'Purity OS 6.2 running on XL170 with Intel Xeon 8368 with PAA'], [7, 'Purity OS 6.3 running on XL170 with Intel Xeon 8368 with PAA (single-user mode)']]
values inserted.
The PDF extraction data was updated.
- The keywords property was updated, with the
{'vendor': {'__update__': {'Microsoft': {'__update__': {'Microsoft': 6}}}}}
data. - The policy_metadata property was updated, with the
{'pdf_file_size_bytes': 458783, '/CreationDate': "D:20230316200521-07'00'", '/ModDate': "D:20230316200521-07'00'"}
data.
The state was updated.
- The policy_pdf_hash property was set to
0573f5209bd3878393d09782604671e75da60953ebfcd0422fc74a9a6f113187
. - The policy_txt_hash property was set to
7bdfedc01a699f25747972636bc52794ac9b3c584880095a804d95c2db7d8e32
.
- The validation_history property was updated, with the
-
12.03.2023 The certificate data changed.
Certificate changed
The web extraction data was updated.
- The validation_history property was updated, with the
[[3, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2023-03-01', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}]]
values inserted. - The tested_conf property was updated, with the
[[3, 'Purity OS 6.1 running on C60 with Intel Xeon 6130 with PAA'], [6, 'Purity OS 6.2 running on XL170 with Intel Xeon 8368 with PAA (single-user mode)']]
values inserted. - The hw_versions property was set to
Intel Xeon E5-2698 v4, Intel Xeon 4114, Intel Xeon 6130, Intel Xeon 6230 and Intel Xeon 8368
.
The PDF extraction data was updated.
- The keywords property was updated, with the
{'vendor': {'Microsoft': {'Microsoft': 2}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 140-2': 7}}}}}
data. - The policy_metadata property was updated, with the
{'pdf_file_size_bytes': 454949, 'pdf_number_of_pages': 19, '/CreationDate': "D:20221108202933-08'00'", '/ModDate': "D:20221108202933-08'00'"}
data.
The computed heuristics were updated.
- The extracted_versions property was updated, with the
{'_type': 'Set', 'elements': ['8368']}
values added.
The state was updated.
- The policy_pdf_hash property was set to
63b956a92bc4e83dff22fcfcc586475823716951f170a21a0edd73e27d4ff0a3
. - The policy_txt_hash property was set to
9fa66a13d5e3f19b60a17184f0ac979a2130d2b1baecb0b6ad49bf7bc09c69e0
.
- The validation_history property was updated, with the
-
09.02.2023 The certificate data changed.
Certificate changed
The cert_id was updated.
- The new value is
4109
.
The web extraction data was updated.
- The following values were inserted:
{'validation_history': [{'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2021-12-16', 'validation_type': 'Initial', 'lab': 'ACUMEN SECURITY, LLC'}, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2021-12-30', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2022-01-04', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}], 'vendor_url': 'http://www.purestorage.com', 'certificate_pdf_url': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/December 2021_020122_0905_signed.pdf', 'hw_versions': 'Intel Xeon E5-2698 v4, Intel Xeon 4114, Intel Xeon 6130 and Intel Xeon 6230', 'fw_versions': None}
. - The standard property was set to
FIPS 140-2
. - The status property was set to
active
. - The level property was set to
1
. - The module_type property was set to
Software-Hybrid
. - The embodiment property was set to
Multi-Chip Stand Alone
. - The following properties were deleted:
['date_validation', 'algorithms', 'vendor_www', 'lab', 'lab_nvlap', 'security_policy_www', 'certificate_www', 'hw_version', 'fw_version', 'product_url']
.
The PDF extraction data was updated.
- The following values were inserted:
{'policy_metadata': {'pdf_file_size_bytes': 405057, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 20, '/Title': 'Pure Storage Security Profile.docx.docx', '/Author': 'avaralikar', '/Creator': 'Microsoft® Word for Microsoft 365', '/CreationDate': "D:20210920162356+05'30'", '/ModDate': "D:20210920162356+05'30'", '/Producer': 'Microsoft® Word for Microsoft 365', 'pdf_hyperlinks': {'_type': 'Set', 'elements': ['https://dl.acm.org/doi/10.1145/359168.359176']}}}
. - The following properties were deleted:
['cert_id', 'algorithms', 'clean_cert_ids', 'st_metadata']
.
The computed heuristics were updated.
- The following values were inserted:
{'policy_prunned_references': {'_type': 'Set', 'elements': ['260']}, 'module_prunned_references': {'_type': 'Set', 'elements': []}, 'policy_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': {'_type': 'Set', 'elements': ['260']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['260']}}, 'module_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'direct_transitive_cves': None, 'indirect_transitive_cves': None}
. - The algorithms property was set to
{'_type': 'Set', 'elements': ['HMAC#A727', 'DRBG#A727', 'KTS#A727', 'AES#A727', 'SHS#A727']}
. - The following properties were deleted:
['keywords', 'unmatched_algs', 'clean_cert_ids', 'st_references', 'web_references']
.
The state was updated.
- The following values were inserted:
{'module_download_ok': True, 'policy_download_ok': True, 'policy_convert_garbage': False, 'policy_convert_ok': True, 'module_extract_ok': True, 'policy_extract_ok': True, 'policy_pdf_hash': '5f0711f09f10529f75bb70bd244d3f6cde3b1a77c42966baa92adee32a6006ac', 'policy_txt_hash': 'e96bd34a0d73e8524ae2b427dd74187245ff1f8d80e16ae4762a879e1056609a'}
. - The following properties were deleted:
['sp_path', 'html_path', 'tables_done', 'file_status', 'txt_state']
.
- The new value is
-
05.11.2022 The certificate data changed.
Certificate changed
The web extraction data was updated.
- The caveat property was set to
None
. - The algorithms property was set to
{'_type': 'Set', 'elements': []}
.
The computed heuristics were updated.
- The algorithms property was set to
{'_type': 'Set', 'elements': []}
.
- The caveat property was set to
-
25.10.2022 The certificate data changed.
Certificate changed
The PDF extraction data was updated.
- The keywords property was updated, with the
{'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA-256': 2}}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__delete__': ['AES-']}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 2}}}}}, '__delete__': ['miscellaneous']}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA2': {'__update__': {'SHA-256': 2}, '__delete__': ['SHA-2']}}}}, '__delete__': ['bcrypt']}, 'crypto_scheme': {}, 'randomness': {'__update__': {'PRNG': {'__update__': {'DRBG': 20}}, 'RNG': {'__update__': {'RNG': 1}, '__delete__': ['RBG']}}}, 'tee_name': {}, 'standard_id': {'__update__': {'NIST': {'SP 800-38A': 2, 'SP 800-38F': 1, 'SP 800-90A': 7, 'SP 800-131A': 1}}}}
data.
The state was updated.
- The tables_done property was set to
True
.
- The keywords property was updated, with the
-
17.07.2022 The certificate data changed.
Certificate changed
The _type was updated.
- The new value is
sec_certs.sample.fips.FIPSCertificate
.
The computed heuristics were updated.
- The following values were inserted:
{'clean_cert_ids': {}}
. - The _type property was set to
sec_certs.sample.fips.FIPSCertificate.Heuristics
. - The keywords property was set to
{}
. - The algorithms property was set to
{'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A727', 'algorithm_type': 'KTS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A727', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A727', 'algorithm_type': 'DRBG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A727', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A727', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}]}
. - The st_references property was updated, with the
{'_type': 'sec_certs.sample.certificate.References'}
data. - The web_references property was updated, with the
{'_type': 'sec_certs.sample.certificate.References'}
data.
The state was updated.
- The _type property was set to
sec_certs.sample.fips.FIPSCertificate.InternalState
. - The following properties were deleted:
['fragment_path']
.
- The new value is
-
14.06.2022 The certificate data changed.
Certificate changed
The pdf_scan was updated.
- The keywords property was updated, with the
{'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__delete__': ['FIPS 140-2', 'FIPS 198-1', 'FIPS 180-4']}}}, 'rules_block_cipher_modes': {'__update__': {'ECB': {'__update__': {'ECB': {'__update__': {'count': 1}}}}, 'CTR': {'__update__': {'CTR': {'__update__': {'count': 1}}}}}}}
data.
The computed heuristics were updated.
- The keywords property was updated, with the
{'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__delete__': ['FIPS 140-2', 'FIPS 198-1', 'FIPS 180-4']}}}, 'rules_block_cipher_modes': {'__update__': {'ECB': {'__update__': {'ECB': {'__update__': {'count': 1}}}}, 'CTR': {'__update__': {'CTR': {'__update__': {'count': 1}}}}}}}
data.
- The keywords property was updated, with the
-
08.03.2022 The certificate data changed.
Certificate changed
The web_scan was updated.
- The following properties were deleted:
['connections']
.
The pdf_scan was updated.
- The following properties were deleted:
['connections']
.
The computed heuristics were updated.
- The following values were inserted:
{'st_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'web_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}}
. - The following properties were deleted:
['connections', 'directly_affected_by', 'indirectly_affected_by', 'directly_affecting', 'indirectly_affecting']
.
- The following properties were deleted:
-
18.02.2022 The certificate data changed.
Certificate changed
The computed heuristics were updated.
- The extracted_versions property was set to
{'_type': 'Set', 'elements': ['4114', '6230', '6130', '2698']}
.
- The extracted_versions property was set to
-
17.02.2022 The certificate data changed.
Certificate changed
The web_scan was updated.
- The date_sunset property was set to
2026-09-21
.
- The date_sunset property was set to
-
02.02.2022 The certificate data changed.
Certificate changed
The web_scan was updated.
- The module_type property was set to
Software Hybrid
.
- The module_type property was set to
-
30.01.2022 The certificate was first processed.
New certificate
A new FIPS 140 certificate with the product name was processed.
Raw data
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4109,
"dgst": "808b0748b38c67a2",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"DRBG#A727",
"KTS#A727",
"AES#A727",
"HMAC#A727",
"SHS#A727"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"4114",
"6130",
"8368",
"6230",
"2698"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": {
"_type": "Set",
"elements": [
"260"
]
},
"indirectly_referenced_by": null,
"indirectly_referencing": {
"_type": "Set",
"elements": [
"260"
]
}
},
"policy_prunned_references": {
"_type": "Set",
"elements": [
"260"
]
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"keywords": {
"asymmetric_crypto": {},
"certification_process": {},
"cipher_mode": {
"CTR": {
"CTR": 11
},
"ECB": {
"ECB": 4
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {},
"device_model": {},
"ecc_curve": {},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#260": 1
}
},
"fips_certlike": {
"Certlike": {
"Cert # AES": 1,
"HMAC-SHA-256": 4,
"SHA-256": 2
}
},
"fips_security_level": {
"Level": {
"Level 1": 4
}
},
"hash_function": {
"SHA": {
"SHA2": {
"SHA-256": 2
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 20
},
"RNG": {
"RNG": 1
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-2": 7,
"FIPS 180-4": 1,
"FIPS 197": 1,
"FIPS 198-1": 1,
"FIPS140-2": 1
},
"NIST": {
"SP 800-131A": 1,
"SP 800-38A": 2,
"SP 800-38F": 1,
"SP 800-90A": 7
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 9
}
},
"constructions": {
"MAC": {
"HMAC": 2,
"HMAC-SHA-256": 2
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {
"Microsoft": {
"Microsoft": 6
}
},
"vulnerability": {}
},
"policy_metadata": {
"/Author": "avaralikar",
"/CreationDate": "D:20230316200521-07\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20230316200521-07\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 458783,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://dl.acm.org/doi/10.1145/359168.359176"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 19
}
},
"state": {
"_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
"module_download_ok": true,
"module_extract_ok": true,
"policy_convert_garbage": false,
"policy_convert_ok": true,
"policy_download_ok": true,
"policy_extract_ok": true,
"policy_pdf_hash": "0573f5209bd3878393d09782604671e75da60953ebfcd0422fc74a9a6f113187",
"policy_txt_hash": "7bdfedc01a699f25747972636bc52794ac9b3c584880095a804d95c2db7d8e32"
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "None",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/December 2021_020122_0905_signed.pdf",
"date_sunset": "2026-09-21",
"description": "Purity Encryption Module is a standalone cryptographic module for the Purity Operating Environment for FlashArray (Purity//FA). Purity//FA powers Pure Storage\u0027s FlashArray family of products which provide economical all-flash storage. Purity Encryption Module enables FlashArray to support always-on, inline encryption of data with an internal key management scheme that requires no user intervention.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Design Assurance: Level 2"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": "Intel Xeon E5-2698 v4, Intel Xeon 4114, Intel Xeon 6130, Intel Xeon 6230 and Intel Xeon 8368",
"level": 1,
"mentioned_certs": {},
"module_name": "Purity Encryption Module",
"module_type": "Software-Hybrid",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-2",
"status": "active",
"sw_versions": "1.3",
"tested_conf": [
"Purity OS 5.3 running on C60 with Intel Xeon 6130 with PAA",
"Purity OS 5.3 running on M70R2 with Intel Xeon E5-2698 v4 with PAA",
"Purity OS 5.3 running on X70R3 with Intel Xeon 6230 with PAA",
"Purity OS 6.1 running on C60 with Intel Xeon 6130 with PAA",
"Purity OS 6.1 running on X20R2 with Intel Xeon 4114 with PAA",
"Purity OS 6.1 running on X70R3 with Intel Xeon 6230 with PAA",
"Purity OS 6.2 running on XL170 with Intel Xeon 8368 with PAA",
"Purity OS 6.3 running on XL170 with Intel Xeon 8368 with PAA (single-user mode)"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2021-12-16",
"lab": "ACUMEN SECURITY, LLC",
"validation_type": "Initial"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2021-12-30",
"lab": "ACUMEN SECURITY, LLC",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2022-01-04",
"lab": "ACUMEN SECURITY, LLC",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2023-03-01",
"lab": "ACUMEN SECURITY, LLC",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2023-04-04",
"lab": "ACUMEN SECURITY, LLC",
"validation_type": "Update"
}
],
"vendor": "Pure Storage, Inc.",
"vendor_url": "http://www.purestorage.com"
}
}