{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "940a01e99ef8b507", "cert_id": 5558, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Integrated Compute Complex (ICC)", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-10-20", "validation_type": "Initial", "lab": "Acumen Security"}], "vendor_url": "http://www.google.com", "vendor": "Google, LLC", "certificate_pdf_url": null, "module_type": "Firmware", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode with module B227 True Random Number Generator (TRNG) Cryptographic Module validated to FIPS 140-3 under Cert. #5434 operating in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "SingleChip", "description": "The Integrated Compute Complex (ICC) provides cryptography to subsystems within the Google IN763 SoC.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {"5434": 1}, "historical_reason": null, "date_sunset": "2031-10-19", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#5434": 1, "#2": 1, "Cert. 5434": 1}}, "fips_security_level": {"Level": {"Level 1": 4}}, "fips_certlike": {"Certlike": {"SHA2-256": 3, "AES-128": 4, "AES-256": 7, "AES- 128": 2, "AES-CMAC (256": 1, "AES CTR (256": 2, "AES256": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-128": 4, "AES-256": 7, "AES-": 4, "AES": 2, "AES256": 1}, "CAST": {"CAST": 20}}, "constructions": {"MAC": {"CMAC": 2}}}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {"MAC": {"MAC": 6}}, "crypto_protocol": {}, "randomness": {"TRNG": {"TRNG": 4}, "PRNG": {"DRBG": 40}, "RNG": {"RBG": 2}}, "cipher_mode": {"CTR": {"CTR": 2}}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 28}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 9, "FIPS 180-4": 1}, "NIST": {"SP 800-38B": 1, "SP 800-38A": 2, "SP 800-90B": 5, "SP 800-90A": 2, "SP 800-108": 2, "NIST SP 800-90B": 3}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 461603, "pdf_is_encrypted": false, "pdf_number_of_pages": 30, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20261014125608-04'00'", "/ModDate": "D:20261014125608-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["http://csrc.nist.gov/groups/STM/cmvp/index.html"]}}, "module_algorithms": {"_type": "Set", "elements": ["SHA2-256A7381", "KDF SP800-108A7381", "Counter DRBGA7381", "AES-ECBA7381", "Conditioning Component Block Cipher Derivation Function SP800-90BA2932", "AES-CMACA7381"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A2721", "#A2932", "#A7381"]}, "is_br1_format": true, "br1_deviations": 0, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "1"}, {"section": "2", "title": "Cryptographic module specification", "level": "1"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "1"}, {"section": "4", "title": "Roles, services, and authentication", "level": "1"}, {"section": "5", "title": "Software/Firmware security", "level": "1"}, {"section": "6", "title": "Operational environment", "level": "1"}, {"section": "7", "title": "Physical security", "level": "1"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "1"}, {"section": "10", "title": "Self-tests", "level": "1"}, {"section": "11", "title": "Life-cycle assurance", "level": "1"}, {"section": "12", "title": "Mitigation of other attacks", "level": "N/A"}, {"section": "", "title": "Overall Level", "level": "1"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": true, "entries": [{"packageFileName": "ICC Secure Firmware", "swFwVersion": "2.10.0", "features": "N/A", "integrityTest": "AES-CMAC Verification"}]}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": true, "entries": [{"operatingSystem": "N/A", "hardwarePlatform": "IN763 SoC A0", "processors": "ARM Cortex-A53 (ARMv8)", "paa_pai": "No", "hypervisorHostOs": "N/A", "version": "2.10.0"}]}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "modes_of_operation": {"section": 2, "subsection": 4, "found": false, "entries": []}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CMAC", "cavpCertName": "A7381", "properties": "Direction - Generation Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8- 1024 Increment 8", "reference": "SP 800-38B"}, {"algorithm": "AES-ECB", "cavpCertName": "A2932", "properties": "Direction - Encrypt Key Length - 128, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-ECB", "cavpCertName": "A7381", "properties": "Direction - Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "Conditioning Component Block Cipher Derivation Function SP800-90B", "cavpCertName": "A2932", "properties": "Key Length - 128 Payload Length - Payload Length: 512", "reference": "SP 800-90B"}, {"algorithm": "Counter DRBG", "cavpCertName": "A2721", "properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - AES-128, AES-256 Derivation Function Enabled - No Additional Input - Additional Input: 0-256 Increment 8, Additional Input: 0-384 Increment 8 Entropy Input - Entropy Input: 256, Entropy Input: 384 Nonce - Nonce: 0 Personalization String Length - Personalization String Length: 0-256 Increment 8, Personalization String Length: 0-384 Increment 8 Returned Bits - 128, 512", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "Counter DRBG", "cavpCertName": "A7381", "properties": "Prediction Resistance - No Supports Reseed - No Mode - AES-256 Derivation Function Enabled - No Additional Input - Additional Input: 0-256 Increment 8 Entropy Input - Entropy Input: 384 Nonce - Nonce: 0 Personalization String Length - Personalization String Length: 0-256 Increment 8 Returned Bits - 512", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "KDF SP800-108", "cavpCertName": "A7381", "properties": "KDF Mode - Counter MAC Mode - CMAC-AES256 Supported Lengths - Supported Lengths: 128, 256 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - No Custom Key In Length - 0", "reference": "SP 800-108 Rev. 1"}, {"algorithm": "SHA2-256", "cavpCertName": "A7381", "properties": "Message Length - Message Length: 0- 16384 Increment 8", "reference": "FIPS 180-4"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "CKG - Section 4", "algoPropList": "Key Type:Symmetric", "implName": "N/A", "reference": "NIST SP 800-133r2 Section 4 option 1 Using the Output of a Random Bit Generator; NIST SP 800-133r2 Section 6.1 The \"Direct Generation\" of Symmetric Keys; NIST SP 800-133r2 Section 6.2.2 Symmetric Keys Derived from a Pre-existing Key"}]}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": false, "entries": []}, "ports_interfaces": {"section": 3, "subsection": 1, "found": true, "entries": [{"physicalPort": "N/A", "logicalInterface": "Data Input", "data": "Secure EL1 command parameters; Fast Secure Monitor API parameters ; Google service request API parameters"}, {"physicalPort": "N/A", "logicalInterface": "Data Output", "data": "Secure EL1 return data ; Fast Secure Monitor API return data; Google service request API return data"}, {"physicalPort": "N/A", "logicalInterface": "Control Input", "data": "Secure EL1 commands; Fast Secure Monitor API commands; Google service request API commands, reset signal"}, {"physicalPort": "N/A", "logicalInterface": "Status Output", "data": "Secure EL1 command response codes; Fast Secure Monitor API response codes; Google service request API response codes"}, {"physicalPort": "N/A", "logicalInterface": "Power", "data": "Provides power to the module"}]}, "authentication_methods": {"section": 4, "subsection": 1, "found": false, "entries": []}, "roles": {"section": 4, "subsection": 2, "found": true, "entries": [{"name": "CO", "type": "Role", "operatorType": "Crypto Officer", "authMethodList": "None"}]}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "Initialize", "description": "Module and PSP functions including generate PSP Master Key", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "N/A", "outputs": "Status (success/fail ure of self- tests)", "secFunImpl": "Key Derivatio n", "rolesSspAccess": "CO - Master PSP Keys: W"}, {"name": "Perform self-tests", "description": "Executed automatic ally when powered on", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi", "inputs": "Reset", "outputs": "Status (success/fail ure of self- tests)", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "", "description": "", "indicator": "on of the service", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": ""}, {"name": "Show status", "description": "Status retrieved from the module", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "N/A", "outputs": "Status (Approved mode indicator/err or indicator)", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "Zeroizatio n", "description": "A module reset zeroises all SSPs", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Reset", "outputs": "N/A", "secFunImpl": "None", "rolesSspAccess": "CO - Entropy Input String: Z - DRBG Seed: Z - DRBG V : Z - DRBG Key: Z - Master PSP Keys: Z - Security Associati on Databas e (SADB) Protectio n keys: Z - PSP"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Session Keys: Z"}, {"name": "CPU state managem ent", "description": "CPU managem ent instruction (start CPU)", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "start CPU", "outputs": "CPU state", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "Get informatio n (Show Version / Show module's versioning informatio n)", "description": "Print buffer, command buffer", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Get command", "outputs": "Module's firmware version (2.10.0), module identifier (\"imc\")", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "Print buffer", "description": "Start, stop functions", "indicator": "Approve d mode indicator", "inputs": "Start/stop functions/comma nds", "outputs": "N/A", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "managem ent", "description": "", "indicator": "(\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": ""}, {"name": "Submit request data", "description": "Input of request data", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Request data", "outputs": "N/A", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "Retrieve response data", "description": "Retrieval of response data", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\"", "inputs": "N/A", "outputs": "Response data", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "", "description": "", "indicator": "and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": ""}, {"name": "Generate New PSP Master Key", "description": "To generate a new PSP Master Key (Post- initializatio n) a.k.a. \"Rotate key generation \"", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Key rotation/new key generation request via module API", "outputs": "Newly generated key", "secFunImpl": "Random Number Generati on", "rolesSspAccess": "CO - Master PSP Keys: W - Entropy Input String: W,E - DRBG Seed: G,E - DRBG V : G,E - DRBG Key: G,E"}, {"name": "Derive PSP Keys", "description": "To derive PSP Session Keys", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs)", "inputs": "Master PSP Key", "outputs": "PSP Session Key", "secFunImpl": "Key Derivatio n", "rolesSspAccess": "CO - PSP Session Keys: G - Master PSP Keys: G,E"}, {"name": "", "description": "", "indicator": "combine d with successf ul completi on of the service", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": ""}, {"name": "Generate DRBG output", "description": "Random bit generation", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Request for random bits", "outputs": "Random bits generated", "secFunImpl": "Random Number Generati on Entropy Source", "rolesSspAccess": "CO - DRBG Seed: G,E - DRBG Key: G,E - DRBG V : G,E - Entropy Input String: R,E"}, {"name": "Perform Firmware Load Test (LCE)", "description": "Firmware load/integr ity test performed by the ICC module for the LCE module", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi", "inputs": "N/A", "outputs": "Status (success/fail ure of the self-test)", "secFunImpl": "FW Integrity Check", "rolesSspAccess": "CO"}, {"name": "", "description": "", "indicator": "on of the service", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": ""}, {"name": "Encryption", "description": "Used to encrypt SADB and PSP traffic", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the", "inputs": "Plaintext", "outputs": "Ciphertext", "secFunImpl": "Encrypti on", "rolesSspAccess": "CO - Security Associati on Databas e (SADB) Protectio n keys: E - PSP Session Keys: E"}, {"name": "Hashing", "description": "Used to generate a hash of the input provided", "indicator": "service Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Plaintext message", "outputs": "Hash", "secFunImpl": "Hashing", "rolesSspAccess": "CO"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": false, "entries": []}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": true, "entries": [{"mechanism": "Standard passivation applied on the IN763 SoC", "inspectFreq": "None", "inspectGuidance": "None"}]}, "storage_areas": {"section": 9, "subsection": 1, "found": true, "entries": [{"name": "LSM", "description": "Ephemeral storage of SSPs in plaintext", "persistance": "Dynamic"}]}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "Entropy Input", "source": "B227 TRNG", "dest": "LSM", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}, {"name": "Output - 1", "source": "LSM", "dest": "External entity", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}, {"name": "Output - 2", "source": "Random Number Generator", "dest": "External entity", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "Zeroised on reset", "description": "SSPs stored ephemerally are zeroised on resetting the module", "rationale": "SSPs stored ephemerally are zeroised on resetting the module", "operatorId": "Operator Initiated"}, {"method": "Zeroised after writing to the calling application/subsystem", "description": "Automatic zeroisation per the module design", "rationale": "Temporarily stored SSPs are zeroised once no longer used", "operatorId": "Module Initiated"}]}, "self_tests": {"section": 10, "subsection": 1, "found": true, "entries": [{"algorithmOrTest": "AES-CMAC Verification", "testProps": "256 bits", "testMethod": "KAT", "type": "SW/FW Integrity", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "MAC Verify"}]}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "AES-ECB (A7381) - 128 bits", "testProps": "Key Length: 128 bits", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Encrypt", "condition": "On boot"}, {"algorithmOrTest": "AES-ECB (A7381) - 192 bits", "testProps": "Key Length: 192 bits", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Encrypt", "condition": "On boot"}, {"algorithmOrTest": "AES-ECB (A7381) - 256 bits", "testProps": "Key Length: 256 bits", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Encrypt", "condition": "On boot"}, {"algorithmOrTest": "AES-CMAC (A7381)", "testProps": "Key Length: 128 bits", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Generation", "condition": "On boot"}, {"algorithmOrTest": "SHA2-256 (A7381)", "testProps": "256 bits", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Hash", "condition": "On boot"}, {"algorithmOrTest": "Counter DRBG (A7381)", "testProps": "AES CTR (256 bits)", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Generate, Reseed, Instantiate functions", "condition": "On boot"}, {"algorithmOrTest": "Counter DRBG (A2721)", "testProps": "AES CTR (256 bits)", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Generate, Reseed, Instantiate functions", "condition": "On boot"}, {"algorithmOrTest": "LCE Firmware Integrity/Load Test (AES- CMAC 256- bit)", "testProps": "Key Length: 256 bits", "testMethod": "Firmware Integrity/Load Test for the LCE module", "type": "SW/FW Load", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "MAC generation", "condition": "On boot"}, {"algorithmOrTest": "B227 Adaptive Proportion Test (ESV Cert. E137)", "testProps": "Sample size: 1 bit; Min- Entropy: H=50%; Cutoff Value: C=793; Window size: w=1024; False positive error rate: Alpha = 2^- 20", "testMethod": "SP 800-90B Health Tests", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "[EVM]", "condition": "On boot"}, {"algorithmOrTest": "B227 Repetition Count Test (ESV Cert. E137)", "testProps": "Sample size: 1 bit; Min- Entropy: H=50%; Cutoff Value: C=41; False positive error rate: Alpha = 2^- 20", "testMethod": "SP 800-90B Health Tests", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "[EVM]", "condition": "On boot"}, {"algorithmOrTest": "KDF SP800- 108 (A7381)", "testProps": "Mode: Counter, PRF: CMAC- AES256", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Counter Mode", "condition": "On boot"}]}, "error_states": {"section": 10, "subsection": 4, "found": true, "entries": [{"name": "Soft Error state", "description": "Upon failure of the LCE Firmware Integrity Test / Firmware Load Test", "conditions": "Failure of the LCE Firmware Integrity Test / Firmware Load Test", "recoveryMethod": "The module will return an error indicator and resume operation", "indicator": "ERROR: Firmware hash for image 99 DOES NOT MATCH, ERROR: lce abort image load"}, {"name": "Hard Error state", "description": "No cryptographic functions can be executed and all data output is inhibited", "conditions": "Failure of the pre-operational firmware integrity test Failure of the CASTs", "recoveryMethod": "The module would have to be re- initialized via a reload/reboot", "indicator": "\"Integrity FAIL\" for the failure of the pre-operational firmware integrity test and \"crypto self-test failed\" for the failure of one/more CASTs"}, {"name": "B227 Soft Error state", "description": "[EVM] The Soft Error state is cleared automatically by the B227 entropy source (the source raises an alarm, zeroises itself and becomes operational again)", "conditions": "Failure of a NIST SP 800- 90B Health Test", "recoveryMethod": "The entropy source (and thus the bound B227 module as a whole) recovers automatically", "indicator": "Failure of a NIST SP 800-90B Health Test causes the entropy source to raise an alarm and zeroise itself"}]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["#A2721", "SHA2-256A7381", "KDF SP800-108A7381", "Counter DRBGA7381", "#A2932", "#A7381", "AES-ECBA7381", "Conditioning Component Block Cipher Derivation Function SP800-90BA2932", "AES-CMACA7381"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": ["5434"]}, "module_prunned_references": {"_type": "Set", "elements": ["5434"]}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": {"_type": "Set", "elements": ["5434"]}, "indirectly_referencing": {"_type": "Set", "elements": ["5434"]}}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": {"_type": "Set", "elements": ["5434"]}, "indirectly_referencing": {"_type": "Set", "elements": ["5434"]}}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "8d3af186028914d43e9c2534d3bba74e514337d299fdd831da47cb5bc6217ebb", "txt_hash": "35e4bd0cb246cd0d1ba29e8edd6eb422efe111027b1af048a42605778fceeba6", "json_hash": "9b3ba845a96e970ab70bb5d0c36ad8c28238b9cbcf4253bd0d5d66abc948d15b"}}}