This page was not yet optimized for use on mobile devices.
Ultrastar® DC SN650 BiCS5 NVMe® TCG Opal SSD, SED
Certificate details
| Certificate ID | #5341 |
|---|---|
| Status | active |
| Validation dates | 18.06.2026 |
| Sunset date | 17-06-2031 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Hardware |
| Embodiment | MultiChipEmbed |
| Caveat | When installed, initialized and configured as specified in Section 11 of the Security Policy. No operator authentication is enforced for executing security services that were unlocked by an authenticated service |
| Exceptions |
|
| Description | The Ultrastar® DC SN650 BiCS5 NVMe® TCG Opal SSD is a self-encrypting drive (SED) that provides data encryption, access control and cryptographic erase of data stored within the solid-state memory devices. |
| Vendor | SanDisk Technologies Inc http://www.sandisk.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-256, CAST, HMACAsymmetric Algorithms
RSA 2048, RSA-2048Hash functions
SHA-256, PBKDF, PBKDF2Schemes
MAC, Key AgreementRandomness
DRBG, RBGBlock cipher modes
ECB, CBC, XTSTrusted Execution Environments
PSP, SSCSecurity level
Level 1, Level 0Side-channel analysis
fault inductionStandards
FIPS 140-3, FIPS PUB 140-3, FIPS 198-1, FIPS186-4, FIPS 186-4, FIPS 180-4, FIPS 197, FIPS 140, FIPS 180, FIPS PUB 180-4, FIPS 186, FIPS PUB 186-5, FIPS PUB 197, FIPS 198, FIPS PUB 198-1, FIPS140, NIST SP 800-140C, SP 800-140D, SP 800-38A, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-132, SP 800-90B, SP 800-88, PKCS 1, PKCS1, RFC 2119, ISO/IEC19790, ISO/IEC 24759, ISO/IEC 19790Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5341,
"dgst": "955dfe160f51eb72",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"PBKDFA3374",
"#A3375",
"AES-KWPA3374",
"#A3374",
"AES-ECBAES 3580",
"RSA SigVer (FIPS186-4)A3375",
"AES-XTS Testing Revision 2.0A3410",
"SHA2-256SHS 2942",
"AES-CBCAES 3580",
"Counter DRBGA3374",
"#A3410",
"HMAC-SHA2-256HMAC 2280"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "AES 3580",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3410",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "AES 3580",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A3374",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3410",
"properties": "Direction - Decrypt, Encrypt Key Length - 128",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3374",
"properties": "Prediction Resistance - No Mode - AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "HMAC 2280",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3374",
"properties": "Iteration Count - Iteration Count: 2- 1024 Increment 1 Password Length - Password Length: 32",
"reference": "SP 800-132"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3374",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3375",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "SHS 2942",
"properties": "Message Length - Message Length: 8-51200 Increment 8",
"reference": "FIPS 180-4"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Activate, is an Opal SSC [2] specific method that allows the TPer owner to \"turn on\" a Security Provider created in manufact uring.",
"indicator": "isFIP S mod e is true",
"inputs": "5.1.1 Activate - Admin Template SP Object Method [2] 3.1.1 Activate [8]",
"name": "Activate",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "SID - Admin SP Admin1 PIN Digest: G,E - DRBG.K ey: G,E - DRBG.V: G,W,E - MEK - Media Encryptio n Keyset MEK.AE SEnc Key MEK.AE SDec Key MEK.XT S Tweak Key (16 total - 1 per LBA range): G - Admin Authority Key (Ka): G,E - Non- Admin Authority Key (Ku) (Locking SP User unique): G,E - Locking Range Keyset (LRK) LRK.AES Key",
"secFunImpl": "Authority_Digest _Generation Derived_Key_G eneration Encryption Key Wrap Keyed_Digest_ Generation MEK Generation RBG RBG Seeding User_Data_Decr yption"
},
{
"description": "Descripti",
"indicator": "Indic ator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output s",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "LRK.XTS Key (Locking SP User unique): G,E - Range Access Key (RAK) (Locking SP User unique): G,E - User Access Key (UAK) (Locking SP User unique): G,E - User Manage ment Key (UMK): G,E - Namesp ace Keyset (NSK) NSK.AE S Key NSK.XT S Key (Locking SP User unique): G,E - SED Volatile Encryptio n Key: G,W,E - SED Volatile Signing",
"secFunImpl": ""
},
{
"description": "Descripti on",
"indicator": "Indic ator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output s",
"rolesSspAccess": "SSP",
"secFunImpl": "Security Functions"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Access Key: G,W,E - Locking SP User [1-10] PIN: Z - Admin SP Admin1 PIN: E - SED AdminSP Encryptio n Key: E - SED AdminSP Signing Key: E - DRBG.S eed: E - Anybody User Access Key (UAKa):",
"secFunImpl": ""
},
{
"description": "Activate, is an Opal SSC [2] specific method that allows the TPer owner to \"turn on\" a Security Provider created in manufact uring.",
"indicator": "isFIP S mod e is true",
"inputs": "See 3.1.2.1 Activate [5]",
"name": "Activate, Single User Mode [5]",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "SID - Admin SP Admin1 PIN Digest: G,W,E - DRBG.K ey: G,E - DRBG.V: G,E - DRBG.S eed: E",
"secFunImpl": "None"
},
{
"description": "PSID character string authentic ation",
"indicator": "isFIP S mod e is true",
"inputs": "PSID",
"name": "Authenticate PSID",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "SID - PSID: E,W - SED Active Encryptio n Key: E - SED Active Signing Key: E - PSID Digest: E Anybody - PSID: E,W - SED Active Encryptio n Key: E - SED Active Signing Key: E - PSID",
"secFunImpl": "Decryption Keyed_Digest_V erification"
},
{
"description": "Authentic ation Credentia l authentic ation",
"indicator": "isFIP S mod e is true",
"inputs": "Authentication Credential PIN",
"name": "Authenticate TCG Authority",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "Digest: E SID - Admin SP Admin1 PIN: W,E - Admin SP Admin1 PIN Digest: E - Admin SP Maintena nce PIN: W,E - Admin SP Maintena nce PIN Digest: E - Locking SP",
"secFunImpl": "Authority_Digest _Verification"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Admin [1-4] PIN: W,E - Locking SP Admin [1-4] PIN Digest: E - Locking SP User [1-10] PIN: W,E - Locking SP User [1-10] PIN Digest: E - SED Active Signing Key: E Admin SP Admin1 - SID PIN: W,E - SID PIN Digest: E - Locking SP Admin [1-4] PIN: W,E - Locking SP Admin [1-4] PIN Digest: E - Locking SP User [1-10] PIN: W,E - Locking SP User [1-10] PIN Digest: E - SED",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "on",
"indicator": "ator",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Active Signing Key: E Admin SP Maintena nce - SID PIN: W,E - SID PIN Digest: E - Admin SP Admin1 PIN: W,E - Admin SP Admin1 PIN Digest: E - Locking SP Admin [1-4] PIN: W,E - Locking SP Admin [1-4] PIN Digest: E - Locking SP User [1-10] PIN: W,E - Locking SP User [1-10] PIN Digest: E - SED Active Signing Key: E Locking SP Admin - SID",
"secFunImpl": "Functions"
},
{
"description": "Descripti",
"indicator": "Indic",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "ator",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "- SID PIN Digest: E - Admin SP Admin1 PIN: W,E - Admin SP Admin1 PIN Digest: E - Locking SP Admin [1-4] PIN: W,E - Locking SP Admin [1-4] PIN Digest: E - Locking SP User [1-10] PIN: W,E - Locking SP User [1-10] PIN Digest: E - SED Active Signing Key: E Locking SP User - SID PIN: W,E - SID PIN Digest: E - Admin SP Admin1 PIN: W,E - Admin SP Admin1",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic ator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output s",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Digest: E - Locking SP Admin [1-4] PIN: W,E - Locking SP Admin [1-4] PIN Digest: E - Locking SP User [1-10] PIN: W,E - Locking SP User [1-10] PIN Digest: E - SED Active Signing Key: E Anybody - SID PIN: W,E - SID PIN Digest: E - Admin SP Admin1 PIN: W,E - Admin SP Admin1 PIN Digest: E - Locking SP Admin [1-4] PIN: W,E - Locking SP Admin [1-4] PIN Digest: E",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- Locking SP User [1-10] PIN: W,E - Locking SP User [1-10] PIN Digest: E - SED Active Signing Key: E",
"secFunImpl": ""
},
{
"description": "An RSA digital signature verifies the authentici ty of a binary firmware image.",
"indicator": "isFIP S mod e is true",
"inputs": "RSA 2048 PKCS1 v1.5 signed firmware image",
"name": "BootFlashIntegr ity",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "Unauthe nticated - Storage Device Certificati on Authority Key (SD_CA Key): E",
"secFunImpl": "SecureLoader _ Integrity"
},
{
"description": "This service allows the operator to test the CM\u0027s adverse condition response by injected an error condition.",
"indicator": "isFIP S mod e is true",
"inputs": "See \u00a74.11 [17]",
"name": "Error Injection",
"outputs": "See \u00a74.11 [17]",
"rolesSspAccess": "SID - SID PIN: E,W - SID PIN Digest: E - SED Active Signing Key: E Admin SP Maintena nce - Admin SP Maintena nce PIN: E,W - Admin SP Maintena nce PIN Digest: E - SED Active",
"secFunImpl": "Authority_Digest _Verification"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Signing Key: E",
"secFunImpl": ""
},
{
"description": "This service reports the FIPS 140 revision as well as the Cryptogr aphic Module\u0027s overall security level, hardware revision, firmware revision and module name.",
"indicator": "isFIP S mod e is true",
"inputs": "Security Protocol IN (0x0, 0x2, 0x2)",
"name": "FIPS 140 Compliance Descriptor (Show Version)",
"outputs": "FIPS 140 Compli ance Descrip tor table data or UEC failure code",
"rolesSspAccess": "NVMe User",
"secFunImpl": "None"
},
{
"description": "ADigital signature verificatio n of a binary firmware image.",
"indicator": "isFIP S mod e is true",
"inputs": "RSA 2048 PKCS1 v1.5 signed firmware image",
"name": "Firmware Download",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "SID - OEM Firmware Key (OEM FW Key): E - Product Group Key (PROD GROUP Key): E",
"secFunImpl": "FW_Authenticity"
},
{
"description": "Enable or disable access to the Firmware Downloa d service",
"indicator": "isFIP S mod e is true",
"inputs": "FW_DOWNL OAD_PORT bit within the AdminSP Logical Port Table",
"name": "Firmware Download Control",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "SID",
"secFunImpl": "None"
},
{
"description": "An RSA digital signature verifies",
"indicator": "isFIP S mod",
"inputs": "RSA 2048 PKCS1 v1.5 signed",
"name": "Firmware Integrity",
"outputs": "Succes s or UEC",
"rolesSspAccess": "Unauthe nticated - OEM Firmware",
"secFunImpl": "FW_Integrity"
},
{
"description": "the authentici ty of a binary firmware image.",
"indicator": "e is true",
"inputs": "firmware image",
"name": "",
"outputs": "failure code",
"rolesSspAccess": "Key (OEM FW Key): E - Security Core Firmware Key (SC_FW Key): E - Security Protocol Firmware Key (SP_FW Key): E - OEM Original Factory State Key (OEM_O FS Key): E - Storage Device Boot FW Key (SD_BF W Key): E - Storage Device Certificati on Authority Key (SD_CA",
"secFunImpl": ""
},
{
"description": "Cryptogr aphic zeroizatio n of user data..",
"indicator": "isFIP S mod e is true",
"inputs": "See \u00a75.23, \u00a75.24 [10], \u00a74.1.2 [12]",
"name": "Format_NVM_ SecureErase",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "NVMe User - DRBG.K ey: G,E - DRBG.V: G,E -",
"secFunImpl": "Keyed_Digest_ Generation MEK Generation RBG RBG Seeding User_Data_Encr yption"
},
{
"description": "Descripti",
"indicator": "Indic",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "ator",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Namesp ace Keyset (NSK) NSK.AE S Key NSK.XT S Key (Locking SP User unique): G,E,Z - MEK - Media Encryptio n Keyset MEK.AE SEnc Key MEK.AE SDec Key MEK.XT S Tweak Key (16 total - 1 per LBA range): G,Z - Locking Range Keyset (LRK) LRK.AES Key LRK.XTS Key (Locking SP User unique): E - Global Active Encryptio n Key (AEK): E - Global Active",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Signing Key: E",
"secFunImpl": ""
},
{
"description": "TCG Random method that generate s a random number from the SP 800- 90A CTR_DR BG",
"indicator": "isFIP S mod e is true",
"inputs": "Byte count",
"name": "Generate Random",
"outputs": "Byte string",
"rolesSspAccess": "Anybody - DRBG.K ey: G,E - DRBG.V: G,E",
"secFunImpl": "RBG"
},
{
"description": "Reads data structure; access control enforcem ent occurs per data structure field",
"indicator": "IsFIP S globa l indic ator =1",
"inputs": "See \u00a75.3.3.6 Basic Table Method Group - Get (Table and Object Method) [1]",
"name": "Get",
"outputs": "Get method table data",
"rolesSspAccess": "Anybody - MSID: R",
"secFunImpl": "Decryption Keyed_Digest_V erification"
},
{
"description": "Read a stream of bytes from unstructu red storage",
"indicator": "isFIP S mod e is true",
"inputs": "See \u00a73.2.13.9 Read data from the DataStore table [7]",
"name": "Get DataStore",
"outputs": "DataSt ore plainte xt data or UEC failure code",
"rolesSspAccess": "Anybody",
"secFunImpl": "None"
},
{
"description": "Returns the data stored in the Locking SP table for an LBA Range",
"indicator": "isFIP S mod e is true",
"inputs": "Band_UID [12]",
"name": "Get Range Attributes",
"outputs": "Range attribut e data",
"rolesSspAccess": "Anybody Locking SP User",
"secFunImpl": "None"
},
{
"description": "TCG \u0027Level 0 Discover y\u0027 discloses",
"indicator": "isFIP S mod e is true",
"inputs": "See \u00a73.3.6 Level 0 Discovery, \u00a73.3.6.2 IF-",
"name": "Level 0 Discovery",
"outputs": "Level 0 Discov ery Respo nse",
"rolesSspAccess": "Anybody",
"secFunImpl": "None"
},
{
"description": "basic configura tion data about the Cryptogr aphic Module, both current and potential",
"indicator": "",
"inputs": "RECV Command [1]",
"name": "",
"outputs": "data See \u00a73.3.6 Level 0 Discov ery [1]",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Allows Locking SP Admins to update the PIN of a user that in not in Single User Mode",
"indicator": "isFIP S mod e is true",
"inputs": "Locking SP UserPIN",
"name": "Locking SP User Password Update",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "Locking SP Admin - DRBG.K ey: G,E - DRBG.V: G,E - KDF Salt (Unique to Admin SP Admin1, each Locking SP Admin and each Locking SP User): G - Locking SP User [1-10] PIN: W - User Access Key (UAK) (Locking SP User unique): E - User Manage",
"secFunImpl": "Authority_Digest _Generation Decryption Derived_Key_G eneration Encryption Keyed_Digest_ Generation RBG"
},
{
"description": "In Single User Mode, the reactivate service allows the hostoper ator to define which ranges are under the control of a Single User authority. In addition, it allows the host to define range ownershi p within non- Global Range Locking",
"indicator": "isFIP S mod e is true",
"inputs": "See \u00a73.1.1.1 Reactivate [5] and \u00a73.1.1 Reactivate [8]",
"name": "Reactivate",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "unique): E Locking SP Admin - Admin Authority Key (Ka): G,E - Non- Admin Authority Key (Ku) (Locking SP User unique): G,E - Locking SP Admin [1-4] PIN Digest: G - SED Active Encryptio n Key: E - SED Active Signing Key: E - SED LockingS P Signing Key: E - SED Volatile Encryptio n Key: E - SED",
"secFunImpl": "None"
},
{
"description": "Descripti on",
"indicator": "Indic ator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output s",
"rolesSspAccess": "SSP",
"secFunImpl": "Security Functions"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Access Volatile Signing Key: E - Range Access Key (RAK) (Locking SP User unique): E - User Access Key (UAK) (Locking SP User unique): E - User Manage ment Key (UMK): E - Locking SP Admin [1-4] PIN:",
"secFunImpl": ""
},
{
"description": "Reads ciphertext from a specified LBA range and outputs the user data as plaintext.",
"indicator": "isFIP S mod e is true",
"inputs": "See \u00a73.2.4 Read Command [12 ]",
"name": "Read User Data",
"outputs": "Plainte xt user data or UEC failure code",
"rolesSspAccess": "W NVMe User - MEK - Media Encryptio n Keyset MEK.AE SEnc Key MEK.AE SDec Key MEK.XT S Tweak Key (16 total - 1 per LBA range): E",
"secFunImpl": "User_Data_Decr yption"
},
{
"description": "Power on Reset",
"indicator": "isFIP S",
"inputs": "None",
"name": "Reset Module",
"outputs": "Drive Ready",
"rolesSspAccess": "Unauthe nticated",
"secFunImpl": "Derived_Key_G eneration"
},
{
"description": "",
"indicator": "mod e is true",
"inputs": "",
"name": "",
"outputs": "Indicat or or UEC failure code",
"rolesSspAccess": "- DRBG.K ey: G,E - DRBG.V: G,E - ESV: G - SED Volatile Encryptio n Key: G - SED Volatile Signing Key: G - User Access Key (UAK) (Locking SP User unique): G - User Manage ment Key (UMK): G",
"secFunImpl": "Encryption Key Wrap RBG RBG Seeding"
},
{
"description": "The TCG Revert method cryptogra phically erases CSPs and returns the Cryptogr aphic Module to its original manufact ured state.",
"indicator": "isFIP S mod e is true",
"inputs": "PSID",
"name": "Revert",
"outputs": "Drive Ready Indicat or or UEC failure code",
"rolesSspAccess": "SID - SID PIN Digest: G,Z - Admin SP Admin1 PIN Digest: G,Z - DRBG.K ey: G,E - DRBG.V: G,E - Global Active Signing Key: G,E,Z",
"secFunImpl": "Encryption Key Wrap Keyed_Digest_ Generation MEK Generation RBG"
},
{
"description": "Descripti",
"indicator": "Indic",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "ator",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "- SED Active Encryptio n Key: G,Z - SED Active Signing Key: G,Z - SED AdminSP Encryptio n Key: G,Z - SED AdminSP Signing Key: G,Z - SED LockingS P Encryptio n Key: G,Z - SED LockingS P Signing Key: G,Z - SED Volatile Encryptio n Key: G,Z - SED Volatile Signing Key: G,Z - PSID: W - Locking SP Admin [1-4] PIN Digest: G,Z - Global",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic ator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Encryptio n Key (AEK): G,E,Z - Locking SP User [1-10] PIN Digest: G,E,Z - MEK - Media Encryptio n Keyset MEK.AE SEnc Key MEK.AE SDec Key MEK.XT S Tweak Key (16 total - 1 per LBA range): G,E,Z - Admin Authority Key (Ka): G,E,Z - Non- Admin Authority Key (Ku) (Locking SP User unique): G,E,Z - Locking Range Keyset (LRK) LRK.AES Key LRK.XTS Key (Locking",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "SP User unique): G,E,Z - Range Access Key (RAK) (Locking SP User unique): G,E,Z - User Access Key (UAK) (Locking SP User unique): G,E,Z - User Manage ment Key (UMK): G,E,Z - Namesp ace Keyset (NSK) NSK.AE S Key NSK.XT S Key (Locking SP User unique): G,E,Z - Root Encryptio n Key: G,E,Z - Root Signing Key: G,E,Z - MSID: E - MSID",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "ator",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Digest: E Anybody - SID PIN Digest: G,Z - Admin SP Admin1 PIN Digest: G,Z - Locking SP Admin [1-4] PIN Digest: G,Z - Locking SP User [1-10] PIN Digest: G,Z - DRBG.K ey: G,E - DRBG.V: G,E - MEK - Media Encryptio n Keyset MEK.AE SEnc Key MEK.AE SDec Key MEK.XT S Tweak Key (16 total - 1 per LBA range): G,Z - Admin Authority",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic ator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Key (Ka): G,E,Z - Non- Admin Authority Key (Ku) (Locking SP User unique): G,E,Z - Locking Range Keyset (LRK) LRK.AES Key LRK.XTS Key (Locking SP User unique): G,E,Z - Range Access Key (RAK) (Locking SP User unique): G,E,Z - User Access Key (UAK) (Locking SP User unique): G,E,Z - User Manage ment Key (UMK): G,E,Z - Namesp ace Keyset (NSK)",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic ator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "NSK.AE S Key NSK.XT S Key (Locking SP User unique): G,E,Z - Root Encryptio n Key: G,E,Z - Root Signing Key: G,E,Z - Global Active Encryptio n Key (AEK): G,E,Z - Global Active Signing Key: G,E,Z - SED Active Encryptio n Key: G,Z - SED Active Signing Key: G,E,Z - SED AdminSP Encryptio n Key: G,E,Z - SED LockingS P Encryptio n Key:",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- SED LockingS P Signing Key: G,E,Z - SED Volatile Encryptio n Key: G,E,Z - SED Volatile Signing Key: G,E,Z - PSID: W - MSID: E - MSID Digest: E",
"secFunImpl": ""
},
{
"description": "The RevertSP method cryptogra phically erases CSPs and returns the Cryptogr aphic Module to its original manufact ured state.",
"indicator": "IsFIP S mod e is true",
"inputs": "See \u00a75.1.3 RevertSP - Base Template SP Method [2]",
"name": "RevertSP",
"outputs": "Drive Ready Indicat or or UEC failure code",
"rolesSspAccess": "Anybody - SID PIN Digest: G,Z - Admin SP Admin1 PIN Digest: G,Z - Locking SP Admin [1-4] PIN Digest: G,Z - Locking SP User [1-10] PIN Digest: G,Z - DRBG.K ey: G,E -",
"secFunImpl": "Encryption Key Wrap Keyed_Digest_ Generation MEK Generation RBG"
},
{
"description": "Descripti",
"indicator": "Indic",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "ator",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "DRBG.S eed: G,E - MEK - Media Encryptio n Keyset MEK.AE SEnc Key MEK.AE SDec Key MEK.XT S Tweak Key (16 total - 1 per LBA range): G,E,Z - Non- Admin Authority Key (Ku) (Locking SP User unique): G,E,Z - Locking Range Keyset (LRK) LRK.AES Key LRK.XTS Key (Locking SP User unique): G,E,Z - Range Access Key (RAK) (Locking SP User unique): G,E,Z - User",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic ator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Access Key (UAK) (Locking SP User unique): G,E,Z - User Manage ment Key (UMK): G,E,Z - Namesp ace Keyset (NSK) NSK.AE S Key NSK.XT S Key (Locking SP User unique): G,E,Z - Root Encryptio n Key: G,E,Z - Root Signing Key: G,E,Z - Global Active Encryptio n Key (AEK): G,E,Z - Global Active Signing Key: G,E,Z - SED Active Encryptio n Key:",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "ator",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "G,E - SED Active Signing Key: G,E,Z - SED AdminSP Encryptio n Key: G,E,Z - SED AdminSP Signing Key: G,E,Z - SED LockingS P Encryptio n Key: G,E,Z - SED LockingS P Signing Key: G,E,Z - SED Volatile Encryptio n Key: G,E,Z - SED Volatile Signing Key: G,E,Z - SID PIN: E - Admin SP Admin1 PIN: E - Locking SP Admin",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic ator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "E - Locking SP User [1-10] PIN: E - MSID: E - MSID Digest: E SID - SID PIN Digest: G,Z - Admin SP Admin1 PIN Digest: G,Z - Locking SP Admin [1-4] PIN Digest: G,Z - Locking SP User [1-10] PIN Digest: G,Z - DRBG.K ey: G - DRBG.S eed: G - MEK - Media Encryptio n Keyset MEK.AE SEnc Key MEK.AE SDec Key MEK.XT",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "ator",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "S Tweak Key (16 total - 1 per LBA range): G,Z - Admin Authority Key (Ka): G,E,Z - Non- Admin Authority Key (Ku) (Locking SP User unique): G,E,Z - Locking Range Keyset (LRK) LRK.AES Key LRK.XTS Key (Locking SP User unique): G,E,Z - Range Access Key (RAK) (Locking SP User unique): G,E,Z - User Access Key (UAK) (Locking SP User unique): G,E,Z - User",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "ator",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "ment Key (UMK): G,E,Z - Namesp ace Keyset (NSK) NSK.AE S Key NSK.XT S Key (Locking SP User unique): G,E,Z - Root Encryptio n Key: G,E,Z - Root Signing Key: G,E,Z - Global Active Encryptio n Key (AEK): G,E,Z - Global Active Signing Key: G,E,Z - SED Active Encryptio n Key: G,E,Z - SED Active Signing Key: G,E,Z - SED AdminSP",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic ator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output s",
"rolesSspAccess": "SSP",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Access n Key: G,E,Z - SED AdminSP Signing Key: G,E,Z - SED LockingS P Encryptio n Key: G,E,Z - SED LockingS P Signing Key: G,E,Z - SED Volatile Encryptio n Key: G,E,Z - SED Volatile Signing Key: G,E,Z - MSID:",
"secFunImpl": ""
},
{
"description": "The Cryptogr aphic Module performs self-tests when it powers up",
"indicator": "N/A",
"inputs": "None",
"name": "Self-Test",
"outputs": "Drive Ready or UEC failure code",
"rolesSspAccess": "Unauthe nticated - DRBG.K ey: G,E - DRBG.V: G,E",
"secFunImpl": "Decryption Derived_Key_G eneration Digest_Generati on Digest_Verificati on Encryption FW_Integrity Key Wrap Keyed_Digest_ Generation Keyed_Digest_V erification RBG"
},
{
"description": "Write data structure s; access control enforcem ent occurs per data structure field. This service can change Authentic ation Credentia l PINs",
"indicator": "isFIP S mod e is true",
"inputs": "See \u00a75.3.3.7 Basic Table Method Group - Set [1]",
"name": "Set",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "SID - Global Active Encryptio n Key (AEK): E - Global Active Signing Key: E - SED AdminSP Encryptio n Key: E - SED AdminSP Signing Key: E - SED Volatile Encryptio n Key: E - SED Volatile Signing Key: E - SID PIN: W - SED Active Encryptio n Key: E - SED Active Signing Key: E Anybody - Global Active Encryptio n Key (AEK): E - Global Active Signing Key: E - SED",
"secFunImpl": "Encryption Keyed_Digest_ Generation"
},
{
"description": "Descripti",
"indicator": "Indic",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "ator",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Encryptio n Key: E - SED Active Signing Key: E - SED Volatile Encryptio n Key: E - MSID: E Admin SP Admin1 - Global Active Encryptio n Key (AEK): E - Global Active Signing Key: E - SED AdminSP Encryptio n Key: E - SED AdminSP Signing Key: E - SED Volatile Signing Key: E - SED Volatile Encryptio n Key: E - SED Active Encryptio n Key: E - SED Active Signing",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic ator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output s",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Locking SP Admin - Global Active Encryptio n Key (AEK): E - Global Active Signing Key: E - SED Active Encryptio n Key: E - SED Active Signing Key: E - SED LockingS P Encryptio n Key: E - SED LockingS P Signing Key: E - SED Volatile Encryptio n Key: E - SED Volatile Signing Key: E - Admin Authority Key (Ka): E - Locking SP Admin [1-4] PIN: W Locking",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic ator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output s",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "SP User - Global Active Encryptio n Key (AEK): E - Global Active Signing Key: E - SED Active Encryptio n Key: E - SED Active Signing Key: E - SED LockingS P Encryptio n Key: E - SED LockingS P Signing Key: E - SED Volatile Encryptio n Key: E - SED Volatile Signing Key: E - Non- Admin Authority Key (Ku) (Locking SP User unique): E - Locking SP User [1-10] PIN: W",
"secFunImpl": ""
},
{
"description": "Writes configura tion data to a Locking SP table for an LBA Range",
"indicator": "isFIP S mod e is true",
"inputs": "LBA range configuration data [2]",
"name": "Set Range Attributes",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "Locking SP User",
"secFunImpl": "Encryption Keyed_Digest_ Generation"
},
{
"description": "Write a stream of bytes to unstructu red storage.",
"indicator": "isFIP S mod e is true",
"inputs": "See \u00a73.2.13.6 Write data to the DataStore table [7]",
"name": "Set DataStore",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "Anybody Locking SP User",
"secFunImpl": "None"
},
{
"description": "The NVMe Controller Health status poll comman d requests NVMe storage device (e.g., Cryptogr aphic Module) status informati on",
"indicator": "N/A",
"inputs": "Input parameters are defined within NVM Express\u00ae Management Interface [11]",
"name": "Show Status",
"outputs": "Output data is defined within NVM Expres s\u00ae Manag ement Interfac e [11]",
"rolesSspAccess": "NVMe User",
"secFunImpl": "None"
},
{
"description": "TCG Erase cryptogra phically erases user data within a defined data range.",
"indicator": "isFIP S mod e is true",
"inputs": "[NVMe Command] defines the input parameters.",
"name": "TCG Erase, Single User Mode",
"outputs": "Return request ed module data or UEC failure code.",
"rolesSspAccess": "Locking SP Admin - MEK - Media Encryptio n Keyset MEK.AE SEnc Key MEK.AE SDec Key MEK.XT",
"secFunImpl": "Encryption Keyed_Digest_ Generation MEK Generation RBG"
},
{
"description": "Descripti",
"indicator": "Indic",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "ator",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "S Tweak Key (16 total - 1 per LBA range): G,Z - Locking Range Keyset (LRK) LRK.AES Key LRK.XTS Key (Locking SP User unique): Z - DRBG.K ey: E - DRBG.V: E - Range Access Key (RAK) (Locking SP User unique): E - User Access Key (UAK) (Locking SP User unique): E Locking SP User - MEK - Media Encryptio n Keyset MEK.AE SEnc",
"secFunImpl": ""
},
{
"description": "Descripti",
"indicator": "Indic",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "ator",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Key MEK.AE SDec Key MEK.XT S Tweak Key (16 total - 1 per LBA range): G,E,Z - Locking Range Keyset (LRK) LRK.AES Key LRK.XTS Key (Locking SP User unique): G,Z - DRBG.K ey: E - DRBG.V: E - Range Access Key (RAK) (Locking SP User unique): E - User Access Key (UAK) (Locking SP User unique): E - User Manage",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "ment Key (UMK): E",
"secFunImpl": ""
},
{
"description": "TCG GenKey cryptogra phically erases user data within a defined data range.",
"indicator": "isFIP S mod e is true",
"inputs": "See \u00a75.3.3.16 Key Related Method Group - GenKey [1]",
"name": "TCG GenKey",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "Locking SP User - MEK - Media Encryptio n Keyset MEK.AE SEnc Key MEK.AE SDec Key MEK.XT S Tweak Key (16 total - 1 per LBA range): G,E,Z - Locking Range Keyset (LRK) LRK.AES Key LRK.XTS Key (Locking SP User unique): G,Z - DRBG.K ey: E - DRBG.V: E - User Access Key (UAK) (Locking SP User unique): E",
"secFunImpl": "Encryption Keyed_Digest_ Generation MEK Generation RBG"
},
{
"description": "Transfor ms plaintext user data into ciphertext and writes the data to a specified LBA band.",
"indicator": "isFIP S mod e is true",
"inputs": "Operation Code, LBA, Transfer Length, Data- Out Buffer [NVMe Command]",
"name": "Write User Data",
"outputs": "Succes s or UEC failure code",
"rolesSspAccess": "NVMe User - MEK - Media Encryptio n Keyset MEK.AE SEnc Key MEK.AE SDec Key MEK.XT S Tweak Key (16 total - 1 per LBA range): E",
"secFunImpl": "User_Data_Encr yption"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [
{
"description": "Authenticates a 12-byte to 32-byte Authentication Credential PIN Byte value range (ea.): 0x00 to 0xFF.",
"mechanism": "Authority_Digest_Verification",
"name": "Role-based Authentication - Credential PIN Authentication",
"perMinute": "For 12-byte PIN: Permutations: 7.92E+28 Authentication Time: 2.094965 msec Guess Probability (1 min): 3.61E-25 For 32-byte PIN: Permutations: 1.16E+77 Authentication Time: 2.094965 msec Guess Probability (1 min): 2.47E-73",
"strength": "Lowest: 12-byte PIN: 96 bits Up to: 32- byte PIN: 256 bits"
}
],
"found": true,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES CBC Encrypt",
"condition": "Power up",
"details": "Encrypt, verify",
"indicator": "Pass: Next test Fail: Degraded Error",
"testMethod": "KAT",
"testProps": "256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AEs CBC Decrypt",
"condition": "Power up",
"details": "Decrypt, verify",
"indicator": "Pass: Next test Fail: Degraded Error",
"testMethod": "KAT",
"testProps": "256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES ECB Encrypt",
"condition": "Power up",
"details": "Encrypt, verify",
"indicator": "Pass: Next test Fail: Degraded Error",
"testMethod": "KAT",
"testProps": "256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES ECB Decrypt",
"condition": "Power up",
"details": "Decrypt, verify",
"indicator": "Pass: Next test Fail: Degraded Error",
"testMethod": "KAT",
"testProps": "256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3374)",
"condition": "Power up",
"details": "SP 800- 90ARev1 section 11.3 health test (Instantiate, generate and reseed)",
"indicator": "Pass: Next test Fail: Device Unavailable Error",
"testMethod": "KAT",
"testProps": "5120-bit seed",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (HMAC 2280)",
"condition": "Power up",
"details": "Verify",
"indicator": "Pass: Next test Fail: Degraded Error",
"testMethod": "KAT",
"testProps": "Message, 256-bit key, 256-bit hash digest",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3374)",
"condition": "Power up",
"details": "Verify",
"indicator": "Pass: Next test Fail: Degraded Error",
"testMethod": "KAT",
"testProps": "256-bit Salt Iteration Count: 1024",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer KAT",
"condition": "Power up",
"details": "Verify",
"indicator": "Pass: Next test Fail: Degraded Error",
"testMethod": "KAT",
"testProps": "2048- bit public key, 256-bit hash digest",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer for Load Test",
"condition": "Power up",
"details": "Verify",
"indicator": "Pass: Next test Fail: Degraded Error",
"testMethod": "Digital Signature Verification",
"testProps": "2048- bit public key, 256-bit hash digest",
"type": "SW/FW Load"
},
{
"algorithmOrTest": "SHA2-256 (SHS 2942)",
"condition": "Power up",
"details": "Verify",
"indicator": "Pass: Next test Fail: Degraded Error",
"testMethod": "KAT",
"testProps": "Message, 256-bit hash digest",
"type": "CAST"
},
{
"algorithmOrTest": "AES KWP Encrypt",
"condition": "Power up",
"details": "Encrypt, Verify",
"indicator": "Pass: Next test Fail: Degraded Error",
"testMethod": "KAT",
"testProps": "256-bit KEK",
"type": "CAST"
},
{
"algorithmOrTest": "AES KWP Decrypt",
"condition": "Power up",
"details": "Decrypt, Verify",
"indicator": "Pass: Next test Fail: Degraded Error",
"testMethod": "KAT",
"testProps": "256-bit KEK",
"type": "CAST"
},
{
"algorithmOrTest": "ESV APT",
"condition": "Power-up or after 2^32 CTR_DRBG reseeds.",
"details": "Verify",
"indicator": "Pass: Next test Fail: Degraded Error",
"testMethod": "Health Test",
"testProps": "RCT threshold",
"type": "CAST"
},
{
"algorithmOrTest": "ESV RCT",
"condition": "Power-up or after 2^32 CTR_DRBG reseeds.",
"details": "Verify",
"indicator": "Pass: Next test Fail: Degraded Error",
"testMethod": "Health Test",
"testProps": "APT threshold",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Conditional test failure",
"description": "This error indicates that a fatal failure occurred from which the CM could not recover itself.",
"indicator": "UEC failure code",
"name": "Degraded Error",
"recoveryMethod": "Power cycle"
},
{
"conditions": "Pre- operational test failure",
"description": "This error indicates that a boot initialization, security subsystem initialization or firmware integrity failure event occurred. In this state, the CM does not respond to any command received via the data input port.",
"indicator": "Device is unresponsive",
"name": "Device Unavailable Error",
"recoveryMethod": "Power cycle"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [
{
"inspectFreq": "N/A",
"inspectGuidance": "N/A",
"mechanism": "N/A"
}
],
"found": true,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "The cryptographic module is operating as a FIPS 140-3 compliant module",
"name": "isFIPS",
"statusIndicator": "1. The Level 0 Discovery service returns a value of 1 from the in FIPS global indicator data field and 2. The Firmware Download Control LockOnReset field is set to PowerCycle and 3. The LockOnReset attribute for each configured Locking SP User is set to PowerCycle .",
"type": "Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "Operator issued NVMe commands [12]",
"logicalInterface": "Control Input",
"physicalPort": "EDSFF connector"
},
{
"data": "Operator issued NVMe commands [12]",
"logicalInterface": "Control Input",
"physicalPort": "UART Connector"
},
{
"data": "User data and firmware update images are transmitted from the operator to the Cryptographic Module.",
"logicalInterface": "Data Input",
"physicalPort": "EDSFF connector"
},
{
"data": "User data and firmware update images are transmitted from the operator to the Cryptographic Module.",
"logicalInterface": "Data Input",
"physicalPort": "UART Connector"
},
{
"data": "User data is transmitted from the Cryptographic Module to the operator",
"logicalInterface": "Data Output",
"physicalPort": "EDSFF connector"
},
{
"data": "User data is transmitted from the Cryptographic Module to the operator",
"logicalInterface": "Data Output",
"physicalPort": "UART Connector"
},
{
"data": "Status data is transmitted from the CM to the operator",
"logicalInterface": "Status Output",
"physicalPort": "EDSFF connector"
},
{
"data": "Status data is transmitted from the CM to the operator",
"logicalInterface": "Status Output",
"physicalPort": "UART Connector"
},
{
"data": "Power connector",
"logicalInterface": "Power",
"physicalPort": "EDSFF connector"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "Role-based Authentication - Credential PIN Authentication",
"name": "Admin SP Admin1",
"operatorType": "CO",
"type": "Role"
},
{
"authMethodList": "Role-based Authentication - Credential PIN Authentication",
"name": "Admin SP Maintenance",
"operatorType": "Maintenance",
"type": "Role"
},
{
"authMethodList": "Role-based Authentication - Credential PIN Authentication",
"name": "SID",
"operatorType": "CO",
"type": "Role"
},
{
"authMethodList": "None",
"name": "Anybody",
"operatorType": "User",
"type": "Role"
},
{
"authMethodList": "Role-based Authentication - Credential PIN Authentication",
"name": "Locking SP Admin",
"operatorType": "CO",
"type": "Role"
},
{
"authMethodList": "Role-based Authentication - Credential PIN Authentication",
"name": "Locking SP User",
"operatorType": "CO",
"type": "Role"
},
{
"authMethodList": "Role-based Authentication - Credential PIN Authentication",
"name": "NVMe User",
"operatorType": "User",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "2",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "1",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "ESV",
"details": "APT Threshold",
"indicator": "Pass: Next test Fail: Device Unavailable Error",
"testMethod": "Adaptive Proportion Test",
"testProps": "Sequential data collection",
"type": "Critical Function"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4)",
"details": "Verify Digital Signature",
"indicator": "Pass: Next test Fail: Device Unavailable Error",
"testMethod": "2048-bit, PKCS1 v1.5w/SHA2- 256",
"testProps": "A3374, A3375, SHS 2942",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographi c Module",
"distribution": "Automated",
"entry": "Electroni c",
"format": "Plaintex t",
"name": "Authenticatio n Credential PIN",
"sfiAlgo": "FW_Authenticit y",
"source": "Operato r"
},
{
"dest": "Cryptographi c Module",
"distribution": "Automated",
"entry": "Electroni c",
"format": "Plaintex t",
"name": "Public Key",
"sfiAlgo": "RSA SigVer (FIPS186-4) (A3374)",
"source": "HSM"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Format_NVM_SecureErase cryptographically erases user data regardless of location (e.g., within an exposed LBA, within a cache, within deallocated LBAs, etc.) by regenerating the Namespace Keyset (NSK) and Media Encryption Keyset (MEK)",
"method": "Format_NVM_SecureErase",
"operatorId": "The operator issues a Format NVM command as specified in [12].",
"rationale": "All SSPs within the scope of this zeroization method are encrypted and signed. Therefore, the rationale specified under item e of VE09.30.01 is not applicable."
},
{
"description": "Power cycling involves disconnecting and reconnecting the CM to its source of power.",
"method": "Power Cycle",
"operatorId": "The operator physically or remotely disconnects the CM from its source of power.",
"rationale": "Plaintext SSPs stored in IRAM memory within the ACM are destroyed instantaneously when power is removed."
},
{
"description": "The Revert method cryptographically erases CSPs. Revert removes the owner\u0027s Authentication Credentials and returns the Cryptographic Module to its original manufactured state",
"method": "Revert",
"operatorId": "The operator transmits a TCG IF- SEND command to the CM as to instruct the TPer to initiate a zeroization process.",
"rationale": "All SSPs within the scope of this zeroization method are encrypted and signed. Therefore, the rationale specified under item e of VE09.30.01 is not applicable."
},
{
"description": "The RevertSP method cryptographically erases CSPs. RevertSP removes the owner\u0027s Authentication Credentials and returns the Cryptographic Module to its original manufactured state. Global Range data is preserved if the KeepGlobalRangeKey parameter is set to True.",
"method": "RevertSP",
"operatorId": "The operator transmits a TCG IF- SEND command to the CM as to instruct the TPer to initiate a zeroisation process.",
"rationale": "All SSPs within the scope of this zeroization method are encrypted and signed. Therefore, the rationale specified under item e of VE09.30.01 is not applicable."
},
{
"description": "In Single User Data mode, executing the TCG Erase method cryptographically",
"method": "TCG Erase",
"operatorId": "The operator transmits a command to",
"rationale": "All SSPs within the scope of this zeroization"
},
{
"description": "erases user data by regenerating and replacing the Locking Range Key (LRK) and Media Encryption Key (MEK) associated with a data range.",
"method": "",
"operatorId": "the CM as to instruct the TPer to initiate a user data erasure process.",
"rationale": "method are encrypted and signed. Therefore, the rationale specified under item e of VE09.30.01 is not applicable."
},
{
"description": "In Single User Data mode and non-Single User Mode, executing the TCG GenKey method cryptographically erases user data by regenerating and replacing the Locking Range Key (LRK) and Media Encryption Key (MEK) associated with a data range",
"method": "TCG GenKey",
"operatorId": "The operator transmits a command to the CM as to instruct the TPer to initiate a key generation process.",
"rationale": "All SSPs within the scope of this zeroization method are encrypted and signed. Therefore, the rationale specified under item e of VE09.30.01 is not applicable."
},
{
"description": "The secure manufacturing reconfiguration processes incorporates a hardware security module (HSM) and supporting security software to inject cryptographic keys, digital certificates and assure only authentic firmware is installed on the Cryptographic Module.",
"method": "Secure Manufacturing Reconfiguration Process",
"operatorId": "The operator transmits proprietary commands to the CM to initiate a rebuild process that zeroizes and regenerates the symmetric and asymmetric key trees",
"rationale": "All SSPs within the scope of this zeroization method are encrypted and signed. Therefore, the rationale specified under item e of VE09.30.01 is not applicable."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "General purpose system memory",
"name": "DRAM",
"persistance": "Dynamic"
},
{
"description": "Memory internal to the ACM",
"name": "IRAM",
"persistance": "Dynamic"
},
{
"description": "SSP and boot code storage",
"name": "NOR Flash",
"persistance": "Static"
},
{
"description": "SSP storage and firmware image storage",
"name": "NAND Flash",
"persistance": "Static"
},
{
"description": "Root Key and Certificate Authority Key storage",
"name": "One-time Programable (OTP)",
"persistance": "Static"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [
{
"features": "N/A",
"fwVersion": "RA210003",
"hwVersion": "0TS2411",
"modelPartNum": "WUS5BB1A1E9ELE8",
"processors": "ARM Cortex-M3, ARM Cortex- A53, ARM Cortex-R5"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Symmetric",
"implName": "N/A",
"name": "CKG-Direct",
"reference": "SP 800-133rev2 Section 4 example #1, Section 6.1 and IG D.H"
},
{
"algoPropList": "Key Type:Symmetric",
"implName": "N/A",
"name": "CKG- Combined",
"reference": "SP 800-133rev2 Section 6.3 example #2 and IG D.H"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"RSA": {
"RSA 2048": 5,
"RSA-2048": 2
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 5
},
"ECB": {
"ECB": 4
},
"XTS": {
"XTS": 34
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {
"KA": {
"Key Agreement": 1
},
"MAC": {
"MAC": 4
}
},
"device_model": {},
"ecc_curve": {},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#1": 1,
"#2": 1
}
},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 2,
"AES 3580": 18,
"AES-256": 4,
"AES-256 256": 1,
"Cert #HMAC": 1,
"HMAC 2280": 42,
"HMAC SHA-256": 1,
"PKCS 1": 2,
"PKCS1": 12,
"RSA 2048": 5,
"SHA-256": 1,
"SHA2- 256": 7,
"SHA2-256": 6,
"SHS 2942": 9
}
},
"fips_security_level": {
"Level": {
"Level 0": 6,
"Level 1": 5
}
},
"hash_function": {
"PBKDF": {
"PBKDF": 6,
"PBKDF2": 4
},
"SHA": {
"SHA2": {
"SHA-256": 1
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 80
},
"RNG": {
"RBG": 18
}
},
"side_channel_analysis": {
"FI": {
"fault induction": 1
}
},
"standard_id": {
"FIPS": {
"FIPS 140": 18,
"FIPS 140-3": 121,
"FIPS 180": 1,
"FIPS 180-4": 6,
"FIPS 186": 1,
"FIPS 186-4": 5,
"FIPS 197": 7,
"FIPS 198": 1,
"FIPS 198-1": 6,
"FIPS PUB 140-3": 2,
"FIPS PUB 180-4": 1,
"FIPS PUB 186-5": 1,
"FIPS PUB 197": 1,
"FIPS PUB 198-1": 1,
"FIPS140": 1,
"FIPS186-4": 12
},
"ISO": {
"ISO/IEC 19790": 4,
"ISO/IEC 24759": 6,
"ISO/IEC19790": 2
},
"NIST": {
"NIST SP 800-140C": 1,
"SP 800-132": 3,
"SP 800-140D": 1,
"SP 800-38A": 5,
"SP 800-38E": 3,
"SP 800-38F": 2,
"SP 800-88": 1,
"SP 800-90A": 8,
"SP 800-90B": 1
},
"PKCS": {
"PKCS 1": 2,
"PKCS1": 6
},
"RFC": {
"RFC 2119": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 58,
"AES-256": 5
},
"CAST": {
"CAST": 26
}
},
"constructions": {
"MAC": {
"HMAC": 27
}
}
},
"tee_name": {
"AMD": {
"PSP": 5
},
"IBM": {
"SSC": 7
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"PBKDFA3374",
"AES-KWPA3374",
"AES-ECBAES 3580",
"RSA SigVer (FIPS186-4)A3375",
"AES-XTS Testing Revision 2.0A3410",
"SHA2-256SHS 2942",
"AES-CBCAES 3580",
"Counter DRBGA3374",
"HMAC-SHA2-256HMAC 2280"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A3375",
"#A3410",
"#A3374"
]
},
"policy_metadata": {
"/Author": "Holland, Brian",
"/CreationDate": "D:20260615074047-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260615074047-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 1143914,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://www.westerndigital.com/support",
"https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/5",
"https://www.pleacher.com/mp/mlessons/algebra/entropy.html"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 103
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "3775bd5a08b1cbd55732ff7849857ef4c0076ba45451cbafe2c212428d5dc0a1",
"source_hash": "fa03555e01d8644b44c3c59c8cf5492f1c009a95321d1438f8c4db827e131887",
"txt_hash": "88daa55bf0c5f9de3bc0f160ef0dd3c270b73f7c864d0f93b6c186a634e66392"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When installed, initialized and configured as specified in Section 11 of the Security Policy. No operator authentication is enforced for executing security services that were unlocked by an authenticated service",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf",
"date_sunset": "2031-06-17",
"description": "The Ultrastar\u00ae DC SN650 BiCS5 NVMe\u00ae TCG Opal SSD is a self-encrypting drive (SED) that provides data encryption, access control and cryptographic erase of data stored within the solid-state memory devices.",
"embodiment": "MultiChipEmbed",
"exceptions": [
"Roles, services, and authentication: Level 2",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Ultrastar\u00ae DC SN650 BiCS5 NVMe\u00ae TCG Opal SSD, SED",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-06-18",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "SanDisk Technologies Inc",
"vendor_url": "http://www.sandisk.com"
}
}