This page was not yet optimized for use on mobile devices.
Hitachi Storage Hardware Encryption Module
Certificate details
| Certificate ID | #5389 |
|---|---|
| Status | active |
| Validation dates | 09.07.2026 |
| Sunset date | 08-07-2031 |
| Standard | FIPS 140-3 |
| Security level | 2 |
| Type | Hardware |
| Embodiment | MultiChipEmbed |
| Caveat | No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident seal installed as indicated in the Security Policy. |
| Exceptions |
|
| Description | The module provides high speed data at rest encryption for Hitachi storage. |
| Vendor | Hitachi Vantara, Ltd. https://www.hitachivantara.com/ja-jp |
| Lab | ECSEC Laboratory Inc. |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-, CAST, HMACAsymmetric Algorithms
ECDSAHash functions
SHA3-384Schemes
MACRandomness
RBGElliptic Curves
P-384Block cipher modes
XTSSecurity level
Level 2Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5389,
"dgst": "a165b612de1a4c89",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"HMAC-SHA2-256A7561",
"#A7562",
"AES-ECBA7564",
"AES-KWA7562",
"#A7561",
"SHA3-384A4875",
"ECDSA SigVer (FIPS186-4)A4875",
"#A7564",
"AES-XTS Testing Revision 2.0A7564",
"#A7563",
"SHA2-256A7561",
"#A4875"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 1,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-ECB",
"cavpCertName": "A7562",
"properties": "Direction - Decrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A7563, A7564",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A7562",
"properties": "Direction - Decrypt Key Length - 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A7563, A7564",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38E"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4875",
"properties": "Curve - P-384 Hash Algorithm - SHA3-384",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A7561",
"properties": "Key Length - Key Length: 256",
"reference": "FIPS 198-1"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A7561",
"properties": "Message Length - Message Length: 8- 4096 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A4875",
"properties": "Message Length - Message Length: 0- 64864 Increment 8",
"reference": "FIPS 202"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Set Authentication Data for each operator(COR and USR) to log in",
"indicator": "The ADMIN_STS field of the ACQ(command response) : 0x0",
"inputs": "Command to Operator Management , Authenticatio n Data",
"name": "Operato r Manage ment",
"outputs": "Status of the compl etion",
"rolesSspAccess": "COR - Authentic ation Data: W USR - Authentic ation Data: W",
"secFunImpl": "SHA"
},
{
"description": "Decrypts data using XTS-AES",
"indicator": "The IO_STS field of the IOCQ(comman d response for the data encryption/decr yption/copy) :0x0",
"inputs": "Command to Decrypt and Ciphertext",
"name": "Decrypt",
"outputs": "Plaint ext",
"rolesSspAccess": "USR - DEK: E",
"secFunImpl": "Decrypti on"
},
{
"description": "Encrypts data using XTS-AES",
"indicator": "The IO_STS field of the IOCQ(comman d response for the data encryption/decr yption/copy) :0x0",
"inputs": "Command to Encrypt and Plaintext",
"name": "Encrypt",
"outputs": "Ciphe rtext",
"rolesSspAccess": "USR - DEK: E",
"secFunImpl": "Encrypti on"
},
{
"description": "Operator logout of the module",
"indicator": "The ADMIN_STS field of the ACQ(command response) : 0x0",
"inputs": "Command to Logout FW",
"name": "Logout",
"outputs": "None",
"rolesSspAccess": "COR USR",
"secFunImpl": "None"
},
{
"description": "Register keys(DEK, KEK,HMAC)",
"indicator": "The ADMIN_STS field of the ACQ(command response) : 0x0",
"inputs": "Command to Register key and the keys(DEK/K EK/HMAC)",
"name": "Register key",
"outputs": "None",
"rolesSspAccess": "COR - KEK: W,E - DEK: W - HMAC_K ey: W USR - KEK: W,E - DEK: W -",
"secFunImpl": "KTS- Unwrap"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "HMAC_K ey: W",
"secFunImpl": ""
},
{
"description": "zeroizes the Keys(KEK/DEK/ HMAC_KEY)",
"indicator": "The ADMIN_STS field of the ACQ(command response) : 0x0",
"inputs": "Command to Delete key",
"name": "Delete key",
"outputs": "None",
"rolesSspAccess": "COR - KEK: Z - HMAC_K ey: Z - DEK: Z USR - KEK: Z - HMAC_K ey: Z - DEK: Z",
"secFunImpl": "None"
},
{
"description": "Updates the firmware",
"indicator": "The ADMIN_STS field of the ACQ(command response) : 0x0",
"inputs": "Command to Firmware Update and Firmware Image",
"name": "Firmwar e Update",
"outputs": "None",
"rolesSspAccess": "COR - HMAC_K ey: E",
"secFunImpl": "Messag e Authenti cation Code"
},
{
"description": "Resets the module by power off/on. Zeroizes SSPs, and perform the Self- Tests (Pre- operational self- tests and CASTs)",
"indicator": "None",
"inputs": "Power off/on",
"name": "Module Reset(P eriodic self- tests)",
"outputs": "None",
"rolesSspAccess": "Unauthe nticated - KEK: Z - HMAC_K ey: Z - DEK: Z",
"secFunImpl": "ECDSA SigVer"
},
{
"description": "perform the Self- Tests(the CASTs excluding the ECDSA SigVer (FIPS 186-4) (A4875) CAST) from any role or from error#2 state",
"indicator": "None",
"inputs": "Recovery Reset",
"name": "Partial Reset",
"outputs": "None",
"rolesSspAccess": "Unauthe nticated COR USR",
"secFunImpl": "None"
},
{
"description": "Login by operator authentication",
"indicator": "The ADMIN_STS field of the ACQ(command response) : 0x0",
"inputs": "Command to Login",
"name": "Login",
"outputs": "None",
"rolesSspAccess": "Unauthe nticated - Authentic ation Data: E COR - Authentic",
"secFunImpl": "SHA"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "ation Data: E",
"secFunImpl": ""
},
{
"description": "Zeroizes SSPs, and reset authentication data to factory default",
"indicator": "The ADMIN_STS field of the ACQ(command response) : 0x0",
"inputs": "Command to Revert",
"name": "Revert",
"outputs": "None",
"rolesSspAccess": "Unauthe nticated - Authentic ation Data: Z - KEK: Z - HMAC_K ey: Z - DEK: Z COR - Authentic ation Data: Z - KEK: Z - HMAC_K ey: Z - DEK: Z",
"secFunImpl": "None"
},
{
"description": "Output the module status information such as the firmware- related information. The following information can be displayed: Login Status, HSTATUS(Statu s of error conditions and operational state within the cryptographic module), KEK bitmap/DEK bitmap(KEK or DEK registration information), FW Bootloader Status(Result of",
"indicator": "None",
"inputs": "Register Access(read)",
"name": "Show Status",
"outputs": "Modul e status inform ation",
"rolesSspAccess": "Unauthe nticated COR USR",
"secFunImpl": "None"
},
{
"description": "the Integrity Test performed by Boot FW on Main FW), POST/KAT Status(result of CAST for Main FW)",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Get power circuit log information",
"indicator": "None",
"inputs": "Service request",
"name": "Show power circuit log",
"outputs": "Power circuit log inform ation",
"rolesSspAccess": "Unauthe nticated COR USR",
"secFunImpl": "None"
},
{
"description": "Copy data from the input buffer to the output buffer",
"indicator": "The IO_STS field of the IOCQ(comman d response for the data encryption/decr yption/copy) :0x0",
"inputs": "Command to copy, Data to be copied",
"name": "Copy",
"outputs": "None",
"rolesSspAccess": "USR",
"secFunImpl": "None"
},
{
"description": "Outputting the module identification and the version information.",
"indicator": "None",
"inputs": "Register Access(read)",
"name": "Show Version",
"outputs": "Packa ge versio n, Hardw are versio n, and Firmw are versio n",
"rolesSspAccess": "Unauthe nticated COR USR",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [
{
"description": "The module enforces role separation by requiring 256-bit Authentication Data for the two roles: USR and COR. The Authentication Data for each role is inputted in plaintext to authenticate the operator when it logs in as the role. The module can be logged in from the COR to the USR.",
"mechanism": "Password Based",
"name": "Authentication Data",
"perMinute": "200/2^256, Since authentication requires more than 300ms in a worst case scenario, the module can perform at most 200 times Authentication Data per minute. Therefore, the probability that multiple attacks within a given minute will be successful is 200/2^256, which is less than 1/100,000.",
"strength": "1/2^256, The probability that a random attempt will succeed or a false acceptance will succeed or a false acceptance will occur depends on 256-bit Authentication Data. Therefore, the probability is 1/2^256, which is less than 1/1,000,000."
}
],
"found": true,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES- XTS(A7563) -Encrypt",
"condition": "Power on",
"details": "Encrypt",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Key sizes: 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES- XTS(A7563) -Decrypt",
"condition": "Power on",
"details": "Decrypt",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Key sizes: 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES- XTS(A7564) -Encrypt",
"condition": "Power on",
"details": "Encrypt",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Key sizes: 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES- XTS(A7564) -Decrypt",
"condition": "Power on",
"details": "Decrypt",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Key sizes: 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-KW (A7562)",
"condition": "Power on",
"details": "Unwrap",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Key sizes: 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A7561)",
"condition": "Power on",
"details": "Message authenticatio n",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Key sizes: 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4875)",
"condition": "Power on",
"details": "Verify",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-384 with SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "Firmware load test",
"condition": "Firmware Update Request",
"details": "Hash",
"indicator": "Success: the ADMIN_STS field of the ACQ(comman",
"testMethod": "Firmwar e Load Test",
"testProps": "HMAC- SHA2-256",
"type": "SW/F W Load"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "d response)=0x0 , Failure: the ADMIN_STS field of the ACQ=0x1",
"testMethod": "",
"testProps": "",
"type": ""
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Failed the Pre- operational self- tests(Integrity test for Boot FW, PLM FW, PSM FW and FPGA configuration data) or the Cryptographic Known Answer self- tests of ECDSA SigVer (FIPS186-4) (A4875).",
"description": "A state when the module has encountered an error condition.",
"indicator": "The module is aborted and is not available for use.",
"name": "Error#1",
"recoveryMethod": "Recovery can be achieved by issuing the Module Reset."
},
{
"conditions": "Failed the Pre- operational self- test(Main FW) or the Cryptographic Known Answer self- tests excluding the ECDSA SigVer (FIPS 186-4) (A4875) CAST.",
"description": "Failed the Cryptographic Known Answer self-tests.",
"indicator": "Show status service outputs. The pre- operational self-test: FW Bootloader Status (Pass: 0x80000003/ Failed: 0x8000f070) The CASTs: KAT Status(Pass: 0xED000000/Failed: 0xEDEEEEEE)",
"name": "Error#2",
"recoveryMethod": "Recovery can be achieved by issuing the Module Reset."
},
{
"conditions": "Failed the FW load test.",
"description": "A state where the FW load test has failed.",
"indicator": "The ADMIN_STS field of the ACQ(command response) : 0x1(error)",
"name": "FW load Test failed",
"recoveryMethod": "None"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [
{
"inspectFreq": "See the right column",
"inspectGuidance": "Shown on Figures 7-3 and 7-5 with dashed arrows. Upon receipt of the new module from Hitachi or whenever the existing module in the storage system is removed and re- installed, the Crypto Officer should visually inspect the module, and the tamper evident seals found on the module. It is recommended that the Crypto Officer inspects the tamper evident seal, each time the module can be disconnected from the storage system (when the storage system is powered off, in the case of the system maintenance, etc.). If evidence of tampering (including scratches or scrapes, signs of peeling off, tearing or damage) is detected, the Crypto Officer shall immediately refuse the module installation and notify the management. Crypto Officer shall also request a new replacement module with tamper evident seals by contacting Hitachi Customer Support. If no evidence of tampering is detected, the Crypto Officer may proceed with the installation of the module into the storage system.",
"mechanism": "Tamper Evident Seal"
},
{
"inspectFreq": "See the right column",
"inspectGuidance": "Shown on Figures 7-3 and 7-5 with dashed arrows. Upon receipt of the new module from Hitachi or whenever the existing module in the storage system is removed and re- installed, the Crypto Officer should visually inspect the module and the screws that secure the FAN found on the module. It is recommended that the Crypto Officer inspects the screws, each time the module can be disconnected from the storage system (when the storage system is powered off, in the case of the system maintenance, etc.). If evidence of tampering (including loose screws) is detected, the Crypto Officer shall immediately refuse the module installation and notify the management. The Crypto Officer shall also request a new replacement module with screws that secure the FAN by contacting Hitachi Customer Support.",
"mechanism": "Metal frame with screw"
}
],
"found": true,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "All services are available in this mode of operation (when configured as per the instructions in Section 11 of this document).",
"name": "Approved",
"statusIndicator": "The successful completion of a service is an implicit indicator for the use of an approved service.",
"type": "Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "module control data (command) input, module status data(command response) output, plaintext data input/output, cipher text data input/output",
"logicalInterface": "Data Input Data Output Control Input Status Output",
"physicalPort": "PCI-express(Main Edge Connector)"
},
{
"data": "12V power input",
"logicalInterface": "Power",
"physicalPort": "Power(Main Edge Connector)"
},
{
"data": "module control data input, module status data output, reset",
"logicalInterface": "Control Input Status Output",
"physicalPort": "Hotline(Main Edge Connector)"
},
{
"data": "power circuit log information",
"logicalInterface": "Control Input Status Output",
"physicalPort": "I2C (Main Edge Connector)"
},
{
"data": "power supply status",
"logicalInterface": "Status Output",
"physicalPort": "LED"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "Authentication Data",
"name": "COR",
"operatorType": "CO",
"type": "Role"
},
{
"authMethodList": "Authentication Data",
"name": "USR",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "2",
"section": "1",
"title": "General"
},
{
"level": "2",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "2",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "2",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "2",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "N/A",
"section": "6",
"title": "Operational environment"
},
{
"level": "2",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "2",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "2",
"section": "10",
"title": "Self-tests"
},
{
"level": "2",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "2",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4875)",
"details": "Integrity test for Boot FW, PLM FW, PSM FW and FPGA configuration data",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-384 with SHA3-384",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "CRC16",
"details": "Integrity test for Main FW",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "CRC16",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "SPI ROM",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "Edit auth",
"sfiAlgo": "SHA",
"source": "External (Outside of the cryptographic boundary)"
},
{
"dest": "RAM",
"distribution": "Automated",
"entry": "Electronic",
"format": "Encrypted",
"name": "Register Key",
"sfiAlgo": "KTS- Unwrap",
"source": "External (Outside of the cryptographic boundary)"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "The command to delete the registered keys.",
"method": "Delete key",
"operatorId": "Perform the Delete key service",
"rationale": "The deleted cryptographic key is overwritten with all 0x0 or all 0xF, resulting in an invalid state."
},
{
"description": "The command used to initialize SSPs(factory default).",
"method": "Revert",
"operatorId": "Perform the Revert service.",
"rationale": "The Authentication Data resets to the factory default value. All DEK, KEK, and HMAC_Key are deleted and overwritten with invalid values. The factory-default KEK is set as the initial value."
},
{
"description": "The operation to initialize SSP.",
"method": "Module Reset",
"operatorId": "Perform the Module Reset(Power off by removing the module).",
"rationale": "By turning off the power, the HMAC_Key, KEK, and DEK stored in RAM are volatilized. The factory- default KEK is set as the initial value."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "A volatile memory",
"name": "RAM",
"persistance": "Dynamic"
},
{
"description": "Non-Volatile memory",
"name": "SPI ROM",
"persistance": "Static"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [
{
"features": "",
"fwVersion": "ED020009",
"hwVersion": "e2000003_25101000_00000000",
"modelPartNum": "x0000_0000",
"processors": "MicroBlazes"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDSA": {
"ECDSA": 15
}
}
},
"certification_process": {},
"cipher_mode": {
"XTS": {
"XTS": 9
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {
"MAC": {
"MAC": 2
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-384": 8
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#3": 1
}
},
"fips_certlike": {
"Certlike": {
"SHA2-256": 4,
"SHA3-384": 6
}
},
"fips_security_level": {
"Level": {
"Level 2": 4
}
},
"hash_function": {
"SHA": {
"SHA3": {
"SHA3-384": 6
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 6,
"FIPS 180-4": 1,
"FIPS 186-4": 3,
"FIPS 198-1": 1,
"FIPS 202": 1,
"FIPS PUB 140-3": 1,
"FIPS PUB 186-4": 1,
"FIPS PUB 186-5": 2,
"FIPS186-4": 7
},
"NIST": {
"SP 800-38A": 2,
"SP 800-38E": 1,
"SP 800-38F": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 2,
"AES-": 8
},
"CAST": {
"CAST": 18
}
},
"constructions": {
"MAC": {
"HMAC": 3
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"HMAC-SHA2-256A7561",
"AES-ECBA7564",
"AES-KWA7562",
"SHA3-384A4875",
"ECDSA SigVer (FIPS186-4)A4875",
"AES-XTS Testing Revision 2.0A7564",
"SHA2-256A7561"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A7562",
"#A7561",
"#A7564",
"#A7563",
"#A4875"
]
},
"policy_metadata": {
"/CreationDate": "D:20260709073522-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260709073522-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 1115955,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 27
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "ff06809ef4e5c20bea0f7463ade453847fef7e01d0785c1545bb86f1a1ab445d",
"source_hash": "55664aa2b6ad421fb9af2304c8d52e8556ec574645dc91ab5c32e1b1aeb1f559",
"txt_hash": "c5ec142e5683db484b92d7ce5ccf633f7107f95d25fa0a4e6e04dd09006e3607"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident seal installed as indicated in the Security Policy.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf",
"date_sunset": "2031-07-08",
"description": "The module provides high speed data at rest encryption for Hitachi storage.",
"embodiment": "MultiChipEmbed",
"exceptions": [
"Operational environment: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 2,
"mentioned_certs": {},
"module_name": "Hitachi Storage Hardware Encryption Module",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-07-09",
"lab": "ECSEC Laboratory Inc.",
"validation_type": "Initial"
}
],
"vendor": "Hitachi Vantara, Ltd.",
"vendor_url": "https://www.hitachivantara.com/ja-jp"
}
}