Purity Encryption Module

Certificate #4109

Webpage information ?

Status active
Validation dates 16.12.2021 , 30.12.2021 , 04.01.2022 , 01.03.2023 , 04.04.2023
Sunset date 21-09-2026
Standard FIPS 140-2
Security level 1
Type Software-Hybrid
Embodiment Multi-Chip Stand Alone
Caveat None
Exceptions
  • Design Assurance: Level 2
Description Purity Encryption Module is a standalone cryptographic module for the Purity Operating Environment for FlashArray (Purity//FA). Purity//FA powers Pure Storage's FlashArray family of products which provide economical all-flash storage. Purity Encryption Module enables FlashArray to support always-on, inline encryption of data with an internal key management scheme that requires no user intervention.
Version (Hardware) Intel Xeon E5-2698 v4, Intel Xeon 4114, Intel Xeon 6130, Intel Xeon 6230 and Intel Xeon 8368
Tested configurations
  • Purity OS 5.3 running on C60 with Intel Xeon 6130 with PAA
  • Purity OS 5.3 running on M70R2 with Intel Xeon E5-2698 v4 with PAA
  • Purity OS 5.3 running on X70R3 with Intel Xeon 6230 with PAA
  • Purity OS 6.1 running on C60 with Intel Xeon 6130 with PAA
  • Purity OS 6.1 running on X20R2 with Intel Xeon 4114 with PAA
  • Purity OS 6.1 running on X70R3 with Intel Xeon 6230 with PAA
  • Purity OS 6.2 running on XL170 with Intel Xeon 8368 with PAA
  • Purity OS 6.3 running on XL170 with Intel Xeon 8368 with PAA (single-user mode)
Vendor Pure Storage, Inc.
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy ?

Symmetric Algorithms
AES, HMAC, HMAC-SHA-256
Hash functions
SHA-256
Randomness
DRBG, RNG
Block cipher modes
ECB, CTR

Vendor
Microsoft

Security level
Level 1

Standards
FIPS 140-2, FIPS 197, FIPS 198-1, FIPS 180-4, FIPS140-2, SP 800-38A, SP 800-38F, SP 800-90A, SP 800-131A

File metadata

Author avaralikar
Creation date D:20230316200521-07'00'
Modification date D:20230316200521-07'00'
Pages 19
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

References

Outgoing
  • 260 - historical - Encryption Services Module

Heuristics ?

No heuristics are available for this certificate.

References ?

Updates ?

  • 18.05.2023 The certificate data changed.
    Certificate changed

    The web extraction data was updated.

    • The validation_history property was updated, with the [[4, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2023-04-04', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}]] values inserted.
    • The tested_conf property was updated, with the [[6, 'Purity OS 6.2 running on XL170 with Intel Xeon 8368 with PAA'], [7, 'Purity OS 6.3 running on XL170 with Intel Xeon 8368 with PAA (single-user mode)']] values inserted.

    The PDF extraction data was updated.

    • The keywords property was updated, with the {'vendor': {'__update__': {'Microsoft': {'__update__': {'Microsoft': 6}}}}} data.
    • The policy_metadata property was updated, with the {'pdf_file_size_bytes': 458783, '/CreationDate': "D:20230316200521-07'00'", '/ModDate': "D:20230316200521-07'00'"} data.

    The state was updated.

    • The policy_pdf_hash property was set to 0573f5209bd3878393d09782604671e75da60953ebfcd0422fc74a9a6f113187.
    • The policy_txt_hash property was set to 7bdfedc01a699f25747972636bc52794ac9b3c584880095a804d95c2db7d8e32.
  • 12.03.2023 The certificate data changed.
    Certificate changed

    The web extraction data was updated.

    • The validation_history property was updated, with the [[3, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2023-03-01', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}]] values inserted.
    • The tested_conf property was updated, with the [[3, 'Purity OS 6.1 running on C60 with Intel Xeon 6130 with PAA'], [6, 'Purity OS 6.2 running on XL170 with Intel Xeon 8368 with PAA (single-user mode)']] values inserted.
    • The hw_versions property was set to Intel Xeon E5-2698 v4, Intel Xeon 4114, Intel Xeon 6130, Intel Xeon 6230 and Intel Xeon 8368.

    The PDF extraction data was updated.

    • The keywords property was updated, with the {'vendor': {'Microsoft': {'Microsoft': 2}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 140-2': 7}}}}} data.
    • The policy_metadata property was updated, with the {'pdf_file_size_bytes': 454949, 'pdf_number_of_pages': 19, '/CreationDate': "D:20221108202933-08'00'", '/ModDate': "D:20221108202933-08'00'"} data.

    The computed heuristics were updated.

    • The extracted_versions property was updated, with the {'_type': 'Set', 'elements': ['8368']} values added.

    The state was updated.

    • The policy_pdf_hash property was set to 63b956a92bc4e83dff22fcfcc586475823716951f170a21a0edd73e27d4ff0a3.
    • The policy_txt_hash property was set to 9fa66a13d5e3f19b60a17184f0ac979a2130d2b1baecb0b6ad49bf7bc09c69e0.
  • 09.02.2023 The certificate data changed.
    Certificate changed

    The cert_id was updated.

    • The new value is 4109.

    The web extraction data was updated.

    • The following values were inserted: {'validation_history': [{'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2021-12-16', 'validation_type': 'Initial', 'lab': 'ACUMEN SECURITY, LLC'}, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2021-12-30', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2022-01-04', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}], 'vendor_url': 'http://www.purestorage.com', 'certificate_pdf_url': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/December 2021_020122_0905_signed.pdf', 'hw_versions': 'Intel Xeon E5-2698 v4, Intel Xeon 4114, Intel Xeon 6130 and Intel Xeon 6230', 'fw_versions': None}.
    • The standard property was set to FIPS 140-2.
    • The status property was set to active.
    • The level property was set to 1.
    • The module_type property was set to Software-Hybrid.
    • The embodiment property was set to Multi-Chip Stand Alone.
    • The following properties were deleted: ['date_validation', 'algorithms', 'vendor_www', 'lab', 'lab_nvlap', 'security_policy_www', 'certificate_www', 'hw_version', 'fw_version', 'product_url'].

    The PDF extraction data was updated.

    • The following values were inserted: {'policy_metadata': {'pdf_file_size_bytes': 405057, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 20, '/Title': 'Pure Storage Security Profile.docx.docx', '/Author': 'avaralikar', '/Creator': 'Microsoft® Word for Microsoft 365', '/CreationDate': "D:20210920162356+05'30'", '/ModDate': "D:20210920162356+05'30'", '/Producer': 'Microsoft® Word for Microsoft 365', 'pdf_hyperlinks': {'_type': 'Set', 'elements': ['https://dl.acm.org/doi/10.1145/359168.359176']}}}.
    • The following properties were deleted: ['cert_id', 'algorithms', 'clean_cert_ids', 'st_metadata'].

    The computed heuristics were updated.

    • The following values were inserted: {'policy_prunned_references': {'_type': 'Set', 'elements': ['260']}, 'module_prunned_references': {'_type': 'Set', 'elements': []}, 'policy_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': {'_type': 'Set', 'elements': ['260']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['260']}}, 'module_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'direct_transitive_cves': None, 'indirect_transitive_cves': None}.
    • The algorithms property was set to {'_type': 'Set', 'elements': ['AES#A727', 'SHS#A727', 'HMAC#A727', 'DRBG#A727', 'KTS#A727']}.
    • The following properties were deleted: ['keywords', 'unmatched_algs', 'clean_cert_ids', 'st_references', 'web_references'].

    The state was updated.

    • The following values were inserted: {'module_download_ok': True, 'policy_download_ok': True, 'policy_convert_garbage': False, 'policy_convert_ok': True, 'module_extract_ok': True, 'policy_extract_ok': True, 'policy_pdf_hash': '5f0711f09f10529f75bb70bd244d3f6cde3b1a77c42966baa92adee32a6006ac', 'policy_txt_hash': 'e96bd34a0d73e8524ae2b427dd74187245ff1f8d80e16ae4762a879e1056609a'}.
    • The following properties were deleted: ['sp_path', 'html_path', 'tables_done', 'file_status', 'txt_state'].
  • 05.11.2022 The certificate data changed.
    Certificate changed

    The web extraction data was updated.

    • The caveat property was set to None.
    • The algorithms property was set to {'_type': 'Set', 'elements': []}.

    The computed heuristics were updated.

    • The algorithms property was set to {'_type': 'Set', 'elements': []}.
  • 25.10.2022 The certificate data changed.
    Certificate changed

    The PDF extraction data was updated.

    • The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA-256': 2}}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__delete__': ['AES-']}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 2}}}}}, '__delete__': ['miscellaneous']}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA2': {'__update__': {'SHA-256': 2}, '__delete__': ['SHA-2']}}}}, '__delete__': ['bcrypt']}, 'crypto_scheme': {}, 'randomness': {'__update__': {'PRNG': {'__update__': {'DRBG': 20}}, 'RNG': {'__update__': {'RNG': 1}, '__delete__': ['RBG']}}}, 'tee_name': {}, 'standard_id': {'__update__': {'NIST': {'SP 800-38A': 2, 'SP 800-38F': 1, 'SP 800-90A': 7, 'SP 800-131A': 1}}}} data.

    The state was updated.

    • The tables_done property was set to True.
  • 17.07.2022 The certificate data changed.
    Certificate changed

    The _type was updated.

    • The new value is sec_certs.sample.fips.FIPSCertificate.

    The computed heuristics were updated.

    • The following values were inserted: {'clean_cert_ids': {}}.
    • The _type property was set to sec_certs.sample.fips.FIPSCertificate.Heuristics.
    • The keywords property was set to {}.
    • The algorithms property was set to {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A727', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A727', 'algorithm_type': 'KTS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A727', 'algorithm_type': 'DRBG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A727', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A727', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}]}.
    • The st_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References'} data.
    • The web_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References'} data.

    The state was updated.

    • The _type property was set to sec_certs.sample.fips.FIPSCertificate.InternalState.
    • The following properties were deleted: ['fragment_path'].
  • 14.06.2022 The certificate data changed.
    Certificate changed

    The pdf_scan was updated.

    • The keywords property was updated, with the {'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__delete__': ['FIPS 140-2', 'FIPS 198-1', 'FIPS 180-4']}}}, 'rules_block_cipher_modes': {'__update__': {'ECB': {'__update__': {'ECB': {'__update__': {'count': 1}}}}, 'CTR': {'__update__': {'CTR': {'__update__': {'count': 1}}}}}}} data.

    The computed heuristics were updated.

    • The keywords property was updated, with the {'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__delete__': ['FIPS 140-2', 'FIPS 198-1', 'FIPS 180-4']}}}, 'rules_block_cipher_modes': {'__update__': {'ECB': {'__update__': {'ECB': {'__update__': {'count': 1}}}}, 'CTR': {'__update__': {'CTR': {'__update__': {'count': 1}}}}}}} data.
  • 08.03.2022 The certificate data changed.
    Certificate changed

    The web_scan was updated.

    • The following properties were deleted: ['connections'].

    The pdf_scan was updated.

    • The following properties were deleted: ['connections'].

    The computed heuristics were updated.

    • The following values were inserted: {'st_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'web_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}}.
    • The following properties were deleted: ['connections', 'directly_affected_by', 'indirectly_affected_by', 'directly_affecting', 'indirectly_affecting'].
  • 18.02.2022 The certificate data changed.
    Certificate changed

    The computed heuristics were updated.

    • The extracted_versions property was set to {'_type': 'Set', 'elements': ['6230', '6130', '4114', '2698']}.
  • 17.02.2022 The certificate data changed.
    Certificate changed

    The web_scan was updated.

    • The date_sunset property was set to 2026-09-21.
  • 02.02.2022 The certificate data changed.
    Certificate changed

    The web_scan was updated.

    • The module_type property was set to Software Hybrid.
  • 30.01.2022 The certificate was first processed.
    New certificate

    A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4109,
  "dgst": "808b0748b38c67a2",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "DRBG#A727",
        "KTS#A727",
        "AES#A727",
        "HMAC#A727",
        "SHS#A727"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "4114",
        "6130",
        "8368",
        "6230",
        "2698"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "260"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "260"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "260"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {
        "CTR": {
          "CTR": 11
        },
        "ECB": {
          "ECB": 4
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#260": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "Cert # AES": 1,
          "HMAC-SHA-256": 4,
          "SHA-256": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 4
        }
      },
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA-256": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 20
        },
        "RNG": {
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 7,
          "FIPS 180-4": 1,
          "FIPS 197": 1,
          "FIPS 198-1": 1,
          "FIPS140-2": 1
        },
        "NIST": {
          "SP 800-131A": 1,
          "SP 800-38A": 2,
          "SP 800-38F": 1,
          "SP 800-90A": 7
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 9
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 2,
            "HMAC-SHA-256": 2
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 6
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "avaralikar",
      "/CreationDate": "D:20230316200521-07\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20230316200521-07\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 458783,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://dl.acm.org/doi/10.1145/359168.359176"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 19
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "0573f5209bd3878393d09782604671e75da60953ebfcd0422fc74a9a6f113187",
    "policy_txt_hash": "7bdfedc01a699f25747972636bc52794ac9b3c584880095a804d95c2db7d8e32"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "None",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/December 2021_020122_0905_signed.pdf",
    "date_sunset": "2026-09-21",
    "description": "Purity Encryption Module is a standalone cryptographic module for the Purity Operating Environment for FlashArray (Purity//FA). Purity//FA powers Pure Storage\u0027s FlashArray family of products which provide economical all-flash storage. Purity Encryption Module enables FlashArray to support always-on, inline encryption of data with an internal key management scheme that requires no user intervention.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Design Assurance: Level 2"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": "Intel Xeon E5-2698 v4, Intel Xeon 4114, Intel Xeon 6130, Intel Xeon 6230 and Intel Xeon 8368",
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Purity Encryption Module",
    "module_type": "Software-Hybrid",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "active",
    "sw_versions": "1.3",
    "tested_conf": [
      "Purity OS 5.3 running on C60 with Intel Xeon 6130 with PAA",
      "Purity OS 5.3 running on M70R2 with Intel Xeon E5-2698 v4 with PAA",
      "Purity OS 5.3 running on X70R3 with Intel Xeon 6230 with PAA",
      "Purity OS 6.1 running on C60 with Intel Xeon 6130 with PAA",
      "Purity OS 6.1 running on X20R2 with Intel Xeon 4114 with PAA",
      "Purity OS 6.1 running on X70R3 with Intel Xeon 6230 with PAA",
      "Purity OS 6.2 running on XL170 with Intel Xeon 8368 with PAA",
      "Purity OS 6.3 running on XL170 with Intel Xeon 8368 with PAA (single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2021-12-16",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2021-12-30",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2022-01-04",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2023-03-01",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2023-04-04",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Update"
      }
    ],
    "vendor": "Pure Storage, Inc.",
    "vendor_url": "http://www.purestorage.com"
  }
}