Seagate SSG5 TCG Enterprise SSC SED FIPS 140 Module

Certificate details

Certificate ID	#5552
Status	active
Validation dates	16.10.2026
Sunset date	15-10-2031
Standard	FIPS 140-3
Security level	2
Type	Hardware
Embodiment	MultiChipEmbed
Caveat	When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy. No operator authentication is enforced for executing security services that were unlocked by an authenticated service
Exceptions	Operational environment: N/A Non-invasive security: N/A Mitigation of other attacks: N/A
Description	The primary function of the Seagate SSG5 TCG Enterprise SSC SED FIPS 140 Module is to provide encryption, access control, and cryptographic erase of the User Data stored on the module.
Vendor	Seagate Technology LLC. http://www.seagate.com
Lab	Leidos Accredited Testing & Evaluation (AT&E) Lab
Algorithms	AES-CBCA6784 AES-CMACA6785 AES-GCMA6784 AES-KWA6784 AES-XTS Testing Revision 2.0A6787 Counter DRBGA6785 HMAC-SHA2-256A6788 HMAC-SHA2-384A6784 KAS-FFC-SSC Sp800-56Ar3A6784 PBKDFA6784 RSA SigVer (FIPS186-5)A6785 Safe Primes Key GenerationA6784 SHA2-256A6788 SHA2-384A6788 TLS v1.2 KDF RFC7627A6784
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Webpage
Security policy

Security policy PDF TXT
Extracted keywords

Symmetric Algorithms

AES-256, AES, CAST, HMAC, CMAC
Asymmetric Algorithms

DHE
Hash functions

SHA-512, SHA-256, SHA-384, PBKDF, PBKDF2
Schemes

MAC, Key agreement, Key Agreement
Protocols

TLS v1.2, TLS
Randomness

DRBG, RNG, RBG
Block cipher modes

CBC, GCM, XTS
TLS cipher suites

TLS_DHE_PSK_WITH_AES_256_GCM_SHA384, TLS_DHE_PSK_WITH_AES_128_GCM_SHA256, TLS_DHE_PSK_WITH_AES_256_CBC_SHA384, TLS_DHE_PSK_WITH_AES_128_CBC_SHA256, TLS_PSK_WITH_AES_256_GCM_SHA384, TLS_PSK_WITH_AES_128_GCM_SHA256, TLS_PSK_WITH_AES_256_CBC_SHA384, TLS_PSK_WITH_AES_128_CBC_SHA256
Trusted Execution Environments

PSP, SSC
Security level

level 2, Level 2, Level 0
Side-channel analysis

physical tampering
Author	Anthony Duran
Creation date	D:20261013082254-04'00'
Modification date	D:20261013082438-04'00'
Pages	55
Creator	Acrobat PDFMaker 26 for Word
Producer	Adobe PDF Library 26.2.141
Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.
No automatically derived data are available in this section.
Cross-references

No references are available for this certificate.
Processing updates

19.10.2026

The certificate was first processed.
Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5552,
  "dgst": "b6be463f6999751d",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES-CBCA6784",
        "#A6787",
        "AES-GCMA6784",
        "HMAC-SHA2-256A6788",
        "KAS-FFC-SSC Sp800-56Ar3A6784",
        "AES-XTS Testing Revision 2.0A6787",
        "#A6784",
        "#A6785",
        "RSA SigVer (FIPS186-5)A6785",
        "Counter DRBGA6785",
        "Safe Primes Key GenerationA6784",
        "AES-KWA6784",
        "AES-CMACA6785",
        "TLS v1.2 KDF RFC7627A6784",
        "SHA2-256A6788",
        "SHA2-384A6788",
        "PBKDFA6784",
        "#A6788",
        "HMAC-SHA2-384A6784"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "140"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A6784",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A6785",
            "properties": "Direction - Generation Key Length - 256 MAC Length - MAC Length: 8-128 Increment 8 Message Length - Message Length: 128-512 Increment 128",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A6784",
            "properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.2 Key Length - 128, 256 Tag Length - 128 IV Length - IV Length: 96 Payload Length - Payload Length: 128, 256 AAD Length - AAD Length: 0, 256",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-KW",
            "cavpCertName": "A6784",
            "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 256",
            "reference": "SP 800-38F"
          },
          {
            "algorithm": "",
            "cavpCertName": "",
            "properties": "Payload Length - Payload Length: 128, 192, 256, 320, 4096",
            "reference": ""
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A6787",
            "properties": "Direction - Decrypt, Encrypt Key Length - 256 Payload Length - Payload Length: 4096, 4160, 4192, 4224, 33792 Tweak Mode - Number Data Unit Length Matches Payload Length - Yes",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A6785",
            "properties": "Prediction Resistance - No Supports Reseed - Yes Mode - AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0, 256 Entropy Input - Entropy Input: 256 Nonce - Nonce: 128 Personalization String Length - Personalization String Length: 0, 256 Returned Bits - 256",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A6784",
            "properties": "MAC - MAC: 256 Key Length - Key Length: 8-512 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A6788",
            "properties": "MAC - MAC: 256 Key Length - Key Length: 8-512 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384",
            "cavpCertName": "A6784",
            "properties": "MAC - MAC: 384 Key Length - Key Length: 8-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-FFC-SSC Sp800-56Ar3",
            "cavpCertName": "A6784",
            "properties": "Domain Parameter Generation Methods - ffdhe2048 Hash Function Z - SHA2-512 Scheme - dhEphem - KAS Role - responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "PBKDF",
            "cavpCertName": "A6784",
            "properties": "Iteration Count - Iteration Count: 1000 HMAC Algorithm - SHA2-256 Password Length - Password Length: 8-64 Increment 1 Salt Length - Salt Length: 128-512 Increment 8",
            "reference": "SP 800-132"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-5)",
            "cavpCertName": "A6785",
            "properties": "Key Data Length - Key Data Length: 256 Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048, 3072 Signature Type - pkcs1v1.5 Public Exponent Mode - random",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "Safe Primes Key Generation",
            "cavpCertName": "A6784",
            "properties": "Safe Prime Groups - ffdhe2048",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A6784",
            "properties": "Message Length - Message Length: 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A6788",
            "properties": "Message Length - Message Length: 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A6784",
            "properties": "Message Length - Message Length: 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A6788",
            "properties": "Message Length - Message Length: 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
            "cavpCertName": "A6784",
            "properties": "Hash Algorithm - SHA2-256, SHA2-384 Key Block Length - Key Block Length: 1024",
            "reference": "SP 800-135 Rev. 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Authenticate the operator",
            "indicator": "TCG Status",
            "inputs": "TCG Authenticate Method, TCG Start Session Method",
            "name": "Authenticate",
            "outputs": "None",
            "rolesSspAccess": "BandMasters - BandMaster PINs: W,E - KW AES-GCM IV: E - Master Keys: G,E,Z Drive Owner (SID) - Drive Owner (SID) PIN: W,E - KW AES-GCM IV: E - Master Keys: G,E,Z EraseMaster - EraseMaster PIN: W,E - KW AES-GCM IV: E - Master Keys: G,E,Z",
            "secFunImpl": "Key Derivation Key Wrap 1"
          },
          {
            "description": "Erase User Data in LBA range cryptographically by changing the MEK and place the range in the uninitialized state.",
            "indicator": "TCG Status",
            "inputs": "TCG Erase Method",
            "name": "Cryptographic Erase",
            "outputs": "None",
            "rolesSspAccess": "EraseMaster - BandMaster PINs: Z - MEKEKs: Z - MEKs: Z",
            "secFunImpl": "None"
          },
          {
            "description": "Exit the approved mode of operation and return the CM to the factory state",
            "indicator": "TCG Status",
            "inputs": "TCG RevertSP Method",
            "name": "Exit FIPS Mode / Return to Factory State",
            "outputs": "None",
            "rolesSspAccess": "Unauthenticated - BandMaster PINs: Z - BandMaster PSKs: Z - DRBG Entropy Input String: G,E,Z",
            "secFunImpl": "Generate random number Generate Key"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - Drive Owner (SID) PIN: Z - Drive Owner PSK: Z - EraseMaster PIN: Z - EraseMaster PSK: Z - MEKEKs: Z - MEKs: Z",
            "secFunImpl": ""
          },
          {
            "description": "New FW is downloaded to device and replaces existing FW",
            "indicator": "Interface Status",
            "inputs": "Interface FW Download Command",
            "name": "FW Download",
            "outputs": "None",
            "rolesSspAccess": "Drive Owner (SID) - FW Update Key: E",
            "secFunImpl": "Verify FW Digital Signature"
          },
          {
            "description": "New FW is downloaded to device and replaces existing FW. New FW violates FW rollback policy.",
            "indicator": "Interface Status",
            "inputs": "Interface FW Download Command",
            "name": "FW Download (Rollback)",
            "outputs": "None",
            "rolesSspAccess": "Drive Owner (SID) - FW Update Key: E",
            "secFunImpl": "Verify FW Digital Signature"
          },
          {
            "description": "Generate random data for host use",
            "indicator": "TCG Status",
            "inputs": "TCG Random Method",
            "name": "Generate Random Bytes",
            "outputs": "Random Bytes",
            "rolesSspAccess": "Unauthenticated - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z",
            "secFunImpl": "Generate random number"
          },
          {
            "description": "Restart the module. This will run the pre-operational and power-on conditional self- tests.",
            "indicator": "N/A",
            "inputs": "Power-On Reset",
            "name": "Reset Module",
            "outputs": "None",
            "rolesSspAccess": "Unauthenticated - DRBG Entropy Input String: Z - DRBG Key: Z - DRBG Seed: Z - DRBG V: Z - Drive Owner",
            "secFunImpl": "Verify FW Digital Signature"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "(SID) PIN: Z - Platform Keys: E - Signing Authority Keys: E - TLS Client DHE Public Key: Z - TLS Client Write Encryption Key: Z - TLS Client Write MAC Key: Z - TLS Master Secret: Z - TLS Other Secret: Z - TLS Premaster Secret: Z - TLS Server DHE Private Key: Z - TLS Server DHE Public Key: Z - TLS Server Write Encryption Key: Z - TLS Server Write MAC Key: Z",
            "secFunImpl": ""
          },
          {
            "description": "Enable/disable BandMaster authority",
            "indicator": "TCG Status",
            "inputs": "TCG Set Method",
            "name": "Set Enable/Disable BandMasters",
            "outputs": "None",
            "rolesSspAccess": "EraseMaster",
            "secFunImpl": "None"
          },
          {
            "description": "Set PortLocked and LockOnReset attributes on the FW Download port or Rollback FW Download port",
            "indicator": "TCG Status",
            "inputs": "TCG Set Method",
            "name": "Set FW Ports",
            "outputs": "None",
            "rolesSspAccess": "Drive Owner (SID)",
            "secFunImpl": "None"
          },
          {
            "description": "Change operator authentication data",
            "indicator": "TCG Status",
            "inputs": "TCG Set Method",
            "name": "Set PIN / Password (Drive Owner)",
            "outputs": "None",
            "rolesSspAccess": "BandMasters - BandMaster PINs: G,W,E,Z - DRBG Entropy Input String: G,E,Z - DRBG Key:",
            "secFunImpl": "Generate random number Key Derivation Key Wrap 2"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - KW AES-GCM IV: G,E Drive Owner (SID) - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - Drive Owner (SID) PIN: G,W,E,Z - KW AES-GCM IV: G,E EraseMaster - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - EraseMaster PIN: G,W,E,Z - KW AES-GCM IV: G,E",
            "secFunImpl": ""
          },
          {
            "description": "Set location, size, and locking attributes of an LBA range",
            "indicator": "TCG Status",
            "inputs": "TCG Set Method",
            "name": "Set Range Attributes",
            "outputs": "None",
            "rolesSspAccess": "BandMasters",
            "secFunImpl": "None"
          },
          {
            "description": "Set pre-shared key used for TLS",
            "indicator": "TCG Status",
            "inputs": "TCG Set Method",
            "name": "Set TLS PSK",
            "outputs": "None",
            "rolesSspAccess": "BandMasters - BandMaster PSKs: W,Z - DRBG Entropy",
            "secFunImpl": "Generate random number AES-GCM (No Security Claimed)"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z Drive Owner (SID) - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - Drive Owner PSK: W,Z EraseMaster - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - EraseMaster PSK: W,Z",
            "secFunImpl": ""
          },
          {
            "description": "Show status of module state, including the value of the FIPS Operating Mode Indicator",
            "indicator": "TCG Status",
            "inputs": "TCG Level 0 Discovery, TCG Get Method",
            "name": "Show Status",
            "outputs": "Current CM Status Value",
            "rolesSspAccess": "Unauthenticated",
            "secFunImpl": "None"
          },
          {
            "description": "Show version of module state",
            "indicator": "TCG Status",
            "inputs": "Interface INQUIRY command",
            "name": "Show Version",
            "outputs": "Current CM Version Value",
            "rolesSspAccess": "Unauthenticated",
            "secFunImpl": "None"
          },
          {
            "description": "Close open TCG session",
            "indicator": "TCG Status",
            "inputs": "TCG Close Session",
            "name": "TCG Close Session",
            "outputs": "None",
            "rolesSspAccess": "Unauthenticated",
            "secFunImpl": "None"
          },
          {
            "description": "Close open TLS session",
            "indicator": "TCG Status",
            "inputs": "TCG Close Session",
            "name": "TLS Close Session",
            "outputs": "None",
            "rolesSspAccess": "Unauthenticated - TLS AES-GCM IV: Z",
            "secFunImpl": "None"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- TLS Client DHE Public Key: Z - TLS Client Write Encryption Key: Z - TLS Client Write MAC Key: Z - TLS Master Secret: Z - TLS Other Secret: Z - TLS Premaster Secret: Z - TLS Server DHE Private Key: Z - TLS Server DHE Public Key: Z - TLS Server Write Encryption Key: Z - TLS Server Write MAC Key: Z",
            "secFunImpl": ""
          },
          {
            "description": "CM receives TLS message from host",
            "indicator": "TCG Status",
            "inputs": "Interface IF-Send Command",
            "name": "TLS Receive Message",
            "outputs": "None",
            "rolesSspAccess": "BandMasters - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - TLS AES-GCM IV: G,E - TLS Client Write Encryption Key: E - TLS Client Write MAC Key: E Drive Owner (SID) - DRBG Entropy Input String:",
            "secFunImpl": "Encrypt/Decrypt TLS Message Generate random number KTS GCM KTS CBC/HMAC"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - TLS AES-GCM IV: G,E - TLS Client Write Encryption Key: E - TLS Client Write MAC Key: E EraseMaster - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - TLS AES-GCM IV: G,E - TLS Client Write Encryption Key: E - TLS Client Write MAC Key: E",
            "secFunImpl": ""
          },
          {
            "description": "CM sends TLS message to host",
            "indicator": "TCG Status",
            "inputs": "Interface IF- Receive Command",
            "name": "TLS Send Message",
            "outputs": "Encrypted TLS message",
            "rolesSspAccess": "BandMasters - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - TLS AES-GCM IV: G,E - TLS Client Write Encryption Key: E",
            "secFunImpl": "Encrypt/Decrypt TLS Message"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- TLS Server Write MAC Key: E Drive Owner (SID) - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - TLS AES-GCM IV: G,E - TLS Server Write Encryption Key: E - TLS Server Write MAC Key: E EraseMaster - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - TLS AES-GCM IV: G,E - TLS Server Write Encryption Key: E - TLS Server Write MAC Key: E",
            "secFunImpl": ""
          },
          {
            "description": "Start host-initiated TLS session",
            "indicator": "TCG Status",
            "inputs": "TCG StartTLS Method",
            "name": "TLS Start Session",
            "outputs": "None",
            "rolesSspAccess": "BandMasters - BandMaster PSKs: E - TLS Client DHE Public Key: W,E - TLS Client Write Encryption Key: G",
            "secFunImpl": "Start TLS Session AES-GCM (No Security Claimed)"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- TLS Client Write MAC Key: G - TLS Master Secret: G,E - TLS Other Secret: G,E - TLS Premaster Secret: G,E - TLS Server DHE Private Key: G,E - TLS Server DHE Public Key: G,R - TLS Server Write Encryption Key: G - TLS Server Write MAC Key: G Drive Owner (SID) - Drive Owner PSK: E - TLS Client DHE Public Key: W,E - TLS Client Write Encryption Key: G - TLS Client Write MAC Key: G - TLS Master Secret: G,E - TLS Other Secret: G,E - TLS Premaster Secret: G,E - TLS Server DHE Private Key: G,E - TLS Server DHE Public Key: G,R - TLS Server Write Encryption Key: G",
            "secFunImpl": ""
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- TLS Server Write MAC Key: G EraseMaster - EraseMaster PSK: E - TLS Client DHE Public Key: W,E - TLS Client Write Encryption Key: G - TLS Client Write MAC Key: G - TLS Master Secret: G,E - TLS Other Secret: G,E - TLS Premaster Secret: G,E - TLS Server DHE Private Key: G,E - TLS Server DHE Public Key: G,R - TLS Server Write Encryption Key: G - TLS Server Write MAC Key: G",
            "secFunImpl": ""
          },
          {
            "description": "Lock/Unlock read/decrypt or write/decrypt of User Data in an LBA range",
            "indicator": "TCG Status",
            "inputs": "TCG Set Method",
            "name": "User Data Lock/Unlock Range",
            "outputs": "None",
            "rolesSspAccess": "BandMasters - MEKEKs: E - MEKs: E",
            "secFunImpl": "Key Wrap 2"
          },
          {
            "description": "Encrypt/write or decrypt/read User data from an LBA range",
            "indicator": "Interface Status",
            "inputs": "Interface Read/Write Command",
            "name": "User Data Read / Write",
            "outputs": "Plaintext User Data",
            "rolesSspAccess": "BandMasters - MEKs: E",
            "secFunImpl": "Encrypt/Decrypt User Data SHA2-512 (No Security Claimed)"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [
          {
            "description": "Authentication for CM roles. Minimum PIN length is 8 bytes (64 bits)",
            "mechanism": "Key Derivation",
            "name": "TCG PIN Authentication",
            "perMinute": "1024/(2^64)",
            "strength": "Strength: 1/(2^64)"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "Counter DRBG Reseed (A6785)",
            "condition": "Bootup",
            "details": "Reseed Health Test (see [SP 800-90A Rev. 1])",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "AES-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "90B Continuous Adaptive Proportion Test (APT)",
            "condition": "Continuous as entropy is generated from the entropy source.",
            "details": "APT",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "Fault- Detection",
            "testProps": "Adaptive Proportion Test",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "90B Continuous Repetition Count Test (RCT)",
            "condition": "Continuous as entropy is generated from the entropy source",
            "details": "RCT",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "Fault- Detection",
            "testProps": "Repetition Count Test",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "90B Start-up Adaptive Proportion Test (APT)",
            "condition": "Bootup",
            "details": "APT",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "Fault- Detection",
            "testProps": "Adaptive Proportion Test",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "90B Start-up Repetition",
            "condition": "Bootup",
            "details": "RCT",
            "indicator": "If test fails, CM enters",
            "testMethod": "Fault- Detection",
            "testProps": "Repetition Count Test",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Count Test (RCT)",
            "condition": "",
            "details": "",
            "indicator": "Self-Test Error State",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "AES-CBC Decrypt (A6784)",
            "condition": "Bootup",
            "details": "Decrypt",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC Encrypt (A6784)",
            "condition": "Bootup",
            "details": "Encrypt",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CMAC (A6785)",
            "condition": "Bootup",
            "details": "Generate MAC",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "AES-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM Decrypt (A6784)",
            "condition": "Bootup",
            "details": "Authenticated Decrypt",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM Encrypt (A6784)",
            "condition": "Bootup",
            "details": "Authenticated Encrypt",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-KW Decrypt (A6784)",
            "condition": "Bootup",
            "details": "Authenticated Decrypt",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-KW Encrypt (A6784)",
            "condition": "Bootup",
            "details": "Authenticated Encrypt",
            "indicator": "If test fails, CM enters Self-Test",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-XTS Comparison Test (A6784)",
            "condition": "Every time XTS keys are generated",
            "details": "Generated XTS keys are compared to ensure Key_1 and Key_2 are not equal",
            "indicator": "Error State If test fails, CM enters Self-Test Error State",
            "testMethod": "Comparison Test",
            "testProps": "256-bit key",
            "type": "Critical Function"
          },
          {
            "algorithmOrTest": "AES-XTS Testing Revision 2.0 Decrypt (A6787)",
            "condition": "Bootup",
            "details": "Decrypt",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-XTS Testing Revision 2.0 Encrypt (A6787)",
            "condition": "Bootup",
            "details": "Encrypt",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG (A6785)",
            "condition": "Bootup",
            "details": "DRBG",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "AES-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG",
            "condition": "Bootup",
            "details": "Generate Health Test",
            "indicator": "If test fails, CM enters",
            "testMethod": "KAT",
            "testProps": "AES-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Generate (A6785)",
            "condition": "",
            "details": "(see [SP 800- 90A Rev. 1])",
            "indicator": "Self-Test Error State",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "Counter DRBG Instantiate (A6785)",
            "condition": "Bootup",
            "details": "Instantiate Health Test (see [SP 800- 90A Rev. 1])",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "AES-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Firmware Load Test",
            "condition": "Test runs every time new FW is loaded to the device",
            "details": "Verify Signature",
            "indicator": "If the test fails, the CM discards incoming FW image, returns failure status, and continues normal operation",
            "testMethod": "KAT",
            "testProps": "Modulus - 3072-bit Hash: SHA- 384",
            "type": "SW/FW Load"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-256 (A6784)",
            "condition": "Bootup",
            "details": "Generate MAC",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-384 (A6784)",
            "condition": "Bootup",
            "details": "Generate MAC",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-FFC- SSC Sp800- 56Ar3 (A6784)",
            "condition": "Bootup",
            "details": "Generate Primitive Z",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "PBKDF (A6784)",
            "condition": "Bootup",
            "details": "Key Derivation",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A6785)",
            "condition": "Bootup",
            "details": "Verify Signature",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "Modulus - 3072-bit Hash: SHA- 384",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Safe Primes Key Generation (A6784)",
            "condition": "Every time KAS-FFC keys are generated",
            "details": "Generate Key Pair",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "PCT",
            "testProps": "Domain Parameters: ffdhe2048",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "TLS v1.2 KDF RFC7627 (A6784)",
            "condition": "Bootup",
            "details": "Key Derivation",
            "indicator": "If test fails, CM enters Self-Test Error State",
            "testMethod": "KAT",
            "testProps": "Hash Algorithm: SHA2-256, SHA2-384",
            "type": "CAST"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "Failure of FW Integrity Test during CM power- on sequence",
            "description": "FW Integrity Test has failed",
            "indicator": "Interface error returned on first non- inquiry/identify command",
            "name": "FW Integrity Error State",
            "recoveryMethod": "None"
          },
          {
            "conditions": "Failure of CAST after a reboot from a Transient failure.",
            "description": "Self-Test has failed",
            "indicator": "Byte 17 of Level 0 Discovery is 0xFF",
            "name": "Self-Test Error State (Permanent)",
            "recoveryMethod": "None"
          },
          {
            "conditions": "Failure of CAST or Entropy CFT test",
            "description": "Self-Test has failed",
            "indicator": "Byte 17 of Level 0 Discovery is 0xFF",
            "name": "Self-Test Error State (Transient)",
            "recoveryMethod": "Reset Module"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [
          {
            "inspectFreq": "The frequency of the physical inspection should be determined by the Crypto Officer. It is recommended that the TEL be inspected monthly.",
            "inspectGuidance": "Periodic inspection of TEL to detect evidence of tampering: checkerboard pattern on TEL, security label cutouts do not match original, and security label over PCBA screws is not penetrated Upon discovery of tamper evidence, the CM should be handled per organizational policies.",
            "mechanism": "Opaque, TEL on exposed (back) side of the PCBA"
          }
        ],
        "found": true,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "The CM is utilizing TCG Security as the method for managing access control and the secure initialization steps have been performed (see section 11.2.1).",
            "name": "TCG Security Mode",
            "statusIndicator": "FIPS Operating Mode Indicator has a value of one (1) and the User Data Range columns are configured as follows: ReadLockEnabled is \"True\", WriteLockEnabled is \"True\", and LockOnReset contains \"Power Cycle\"",
            "type": "Approved"
          },
          {
            "description": "The CM/User Data Range is operating in a Non-approved mode",
            "name": "Non- Approved Mode",
            "statusIndicator": "FIPS Operating Mode Indicator has a value of one (1) and at least one of the User Data Range columns is configured as follows: ReadLockEnabled is \"False\", WriteLockEnabled is \"False\", and LockOnReset does not contain \"Power Cycle\"",
            "type": "Non- Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [
          {
            "caveat": "IG 2.4.A Scenario 1",
            "name": "AES-GCM (no security claimed)",
            "use": "Obfuscation"
          },
          {
            "caveat": "IG 2.4.A Scenario 2",
            "name": "SHA-512 (no security claimed)",
            "use": "Memory integrity check, no claim of security."
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "AES-GCM (non-compliant)",
            "use": "Key wrapping (encryption / decryption)"
          },
          {
            "name": "AES-XTS (non-compliant)",
            "use": "Encryption / decryption"
          },
          {
            "name": "PBKDF (non-compliant)",
            "use": "Key Derivation"
          },
          {
            "name": "RSA Signature Generation (non-compliant)",
            "use": "Signature generation"
          },
          {
            "name": "SHA-256 (non-compliant)",
            "use": "Used in PBKDF (non-compliant)"
          },
          {
            "name": "SHA-512 (non-compliant)",
            "use": "Used in RSA Signature Generation (non-compliant)"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [
          {
            "alg_accessed": "AES-GCM (non- compliant) PBKDF (non-compliant) SHA-256 (non-compliant)",
            "description": "Generates new range key following sanitization of the non-volatile media.",
            "name": "Cryptographic Erase",
            "role": "EraseMaster"
          },
          {
            "alg_accessed": "RSA Signature Generation (non- compliant) AES-GCM (non- compliant) PBKDF (non-compliant) SHA-256 (non-compliant) SHA-512 (non-compliant)",
            "description": "Generates new range key and provides certificate of media disposition for each piece of the non-volatile media following sanitization.",
            "name": "Cryptographic Erase (Certified)",
            "role": "EraseMaster"
          },
          {
            "alg_accessed": "AES-XTS (non-compliant)",
            "description": "Encrypt / decrypt user data from an LBA range where Locking is disabled",
            "name": "User Data Read / Write (Locking Disabled)",
            "role": "None"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "TCG Packets, SCSI Packets",
            "logicalInterface": "Data Input Data Output Control Input Status Output",
            "physicalPort": "SAS Connector"
          },
          {
            "data": "N/A",
            "logicalInterface": "Power",
            "physicalPort": "Power Connector"
          },
          {
            "data": "N/A",
            "logicalInterface": "None",
            "physicalPort": "Serial Interface Connector (Disabled)"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "TCG PIN Authentication",
            "name": "Drive Owner (SID)",
            "operatorType": "Crypto Officer",
            "type": "Role"
          },
          {
            "authMethodList": "TCG PIN Authentication",
            "name": "EraseMaster",
            "operatorType": "Crypto Officer",
            "type": "Role"
          },
          {
            "authMethodList": "TCG PIN Authentication",
            "name": "BandMasters",
            "operatorType": "Crypto Officer",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "2",
            "section": "1",
            "title": "General"
          },
          {
            "level": "2",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "2",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "2",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "2",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "N/A",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "2",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "2",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "2",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "2",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "2",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "Controller/Servo Integrity Test, RSA SigVer (FIPS186-5) (A6785)",
            "details": "Verify signature on stored Controller/Servo FW",
            "indicator": "If test fails, the CM enters FW Integrity Error State",
            "testMethod": "KAT",
            "testProps": "Modulus: 3048, Hash: SHA-384",
            "type": "SW/FW Integrity"
          },
          {
            "algorithmOrTest": "IDBA Integrity Test, RSA SigVer (FIPS186- 5) (A6785)",
            "details": "Verify signature on stored IDBA FW",
            "indicator": "If test fails, the CM enters FW Integrity Error State",
            "testMethod": "KAT",
            "testProps": "Modulus: 3048, Hash: SHA-384",
            "type": "SW/FW Integrity"
          },
          {
            "algorithmOrTest": "ITCM Integrity Test, RSA SigVer (FIPS186- 5) (A6785)",
            "details": "Verify signature on stored ITCM FW",
            "indicator": "If test fails, the CM enters FW Integrity Error State",
            "testMethod": "KAT",
            "testProps": "Modulus: 3048, Hash: SHA-384",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "DRAM",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "Host Input",
            "sfiAlgo": "",
            "source": "Entered"
          },
          {
            "dest": "DRAM",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Encrypted",
            "name": "Host Input TLS CBC/HMAC",
            "sfiAlgo": "KTS CBC/HMAC",
            "source": "Entered"
          },
          {
            "dest": "DRAM",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Encrypted",
            "name": "Host Input TLS GCM",
            "sfiAlgo": "KTS GCM",
            "source": "Entered"
          },
          {
            "dest": "Entered",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "Host Output",
            "sfiAlgo": "",
            "source": "DRAM"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "Write volatile memory: Zeroize SSP by writing the memory where the SSP is stored with a pattern of all bytes set to 0x00.",
            "method": "ZM1",
            "operatorId": "Authenticate, Cryptographic Erase, Exit FIPS Mode / Return to Factory State, Reset Module, Set PIN / Password, Set TLS PSK, TCG Close Session, TLS Close Session, TLS Start Session",
            "rationale": "The method ensures that the previous SSP value is entirely overwritten and is no longer stored in volatile memory."
          },
          {
            "description": "Write non-volatile memory (unprotected SSPs): Zeroize unprotected (i.e., plaintext or obfuscated) SSPs stored in non-volatile memory by writing the memory where the SSP is stored with a pattern",
            "method": "ZM2",
            "operatorId": "Exit FIPS Mode / Return to Factory State, Set TLS PSK",
            "rationale": "The method ensures that the previous SSP value is entirely overwritten and is no longer stored in non- volatile memory. Additionally, the two overwrites mitigates the"
          },
          {
            "description": "of all bytes set to 0x00 and then writing the new SSP value.",
            "method": "",
            "operatorId": "",
            "rationale": "risk of any residual data in the non-volatile memory"
          },
          {
            "description": "Write non-volatile memory (protected SSPs): Zeroize protected (i.e., encrypted using another SSP) SSPs stored in non-volatile memory by writing the memory where the SSP is stored with a pattern of all bytes set to 0x00 and then writing the new SSP value.",
            "method": "ZM3",
            "operatorId": "Cryptographic Erase, Exit FIPS Mode / Return to Factory State, Set PIN/Password",
            "rationale": "The method ensures that the previous SSP value is entirely overwritten and is no longer stored in volatile memory."
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Temporary, volatile memory",
            "name": "DRAM",
            "persistance": "Dynamic"
          },
          {
            "description": "Temporary, volatile memory",
            "name": "HW Registers",
            "persistance": "Dynamic"
          },
          {
            "description": "Persistent, non-volatile memory",
            "name": "Media",
            "persistance": "Static"
          },
          {
            "description": "Persistent, non-modifiable, non-volatile memory",
            "name": "ROM",
            "persistance": "Static"
          },
          {
            "description": "Persistent, non-volatile memory",
            "name": "Serial Flash",
            "persistance": "Static"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [
          {
            "features": "12TB Exos NL TCG Enterprise SSC SED SAS",
            "fwVersion": "FF06, HPD1, SW75, FUD1",
            "hwVersion": "GobyLite ASIC v1.0",
            "modelPartNum": "ST12000NM009H",
            "processors": "GobyLite ASIC, ARM Cortex R8 on GobyLite ASIC, ARM Cortex M0+ on GobyLite ASIC"
          },
          {
            "features": "16TB Exos NL TCG Enterprise SSC SED SAS",
            "fwVersion": "FF06, HPD1, SY75, FUD1",
            "hwVersion": "GobyLite ASIC v1.0",
            "modelPartNum": "ST16000NM006H",
            "processors": "GobyLite ASIC, ARM Cortex R8 on GobyLite ASIC, ARM Cortex M0+ on GobyLite ASIC"
          },
          {
            "features": "20TB Exos NL TCG Enterprise SSC SED SAS",
            "fwVersion": "FF06, HPD1, SY75",
            "hwVersion": "GobyLite ASIC v1.0",
            "modelPartNum": "ST20000NM006H",
            "processors": "GobyLite ASIC, ARM Cortex R8 on GobyLite ASIC, ARM Cortex M0+ on GobyLite ASIC"
          },
          {
            "features": "24TB Exos NL TCG Enterprise SSC SED SAS",
            "fwVersion": "EF06, NA01, NE01, HPD1, SU75, LE01",
            "hwVersion": "GobyLite ASIC v1.0",
            "modelPartNum": "ST24000NM006H",
            "processors": "GobyLite ASIC, ARM Cortex R8 on GobyLite ASIC, ARM Cortex M0+ on GobyLite ASIC"
          },
          {
            "features": "",
            "fwVersion": "Show Version Output",
            "hwVersion": "Firmware Version",
            "modelPartNum": "Model and/or Part Number",
            "processors": ""
          },
          {
            "features": "",
            "fwVersion": "ST22000NM006H; EF06 ST20000NM006H; EF06 ST18000NM007H; EF06 ST16000NM006H; EF06 ST14000NM004H; EF06 ST12000NM009H; EF06",
            "hwVersion": "EF06",
            "modelPartNum": "ST24000NM006H",
            "processors": ""
          },
          {
            "features": "",
            "fwVersion": "ST18000NM007H; FF06 ST16000NM006H; FF06 ST14000NM004H; FF06 ST12000NM009H; FF06 ST10000NM025H; FF06",
            "hwVersion": "FF06",
            "modelPartNum": "ST20000NM006H",
            "processors": ""
          },
          {
            "features": "",
            "fwVersion": "X401_SSUME24TA07",
            "hwVersion": "NA01",
            "modelPartNum": "ST24000NM006H",
            "processors": ""
          },
          {
            "features": "",
            "fwVersion": "X403_SSUME24TA07",
            "hwVersion": "NA01",
            "modelPartNum": "ST24000NM006H",
            "processors": ""
          },
          {
            "features": "",
            "fwVersion": "ST24000NM006H",
            "hwVersion": "NE01",
            "modelPartNum": "ST24000NM006H",
            "processors": ""
          },
          {
            "features": "",
            "fwVersion": "MB024000JZAAV",
            "hwVersion": "HPD1",
            "modelPartNum": "ST24000NM006H",
            "processors": ""
          },
          {
            "features": "",
            "fwVersion": "MB020000JZAAU",
            "hwVersion": "HPD1",
            "modelPartNum": "ST20000NM006H",
            "processors": ""
          },
          {
            "features": "",
            "fwVersion": "MB016000JZAAT",
            "hwVersion": "HPD1",
            "modelPartNum": "ST16000NM006H",
            "processors": ""
          },
          {
            "features": "",
            "fwVersion": "MB012000JYZZK",
            "hwVersion": "HPD1",
            "modelPartNum": "ST12000NM009H",
            "processors": ""
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [
          {
            "algoPropList": "Key Type:Symmetric and Asymmetric",
            "implName": "FW-R8",
            "name": "FW-R8 CKG 1",
            "reference": "Section 4, example 1"
          },
          {
            "algoPropList": "Key Type:Symmetric",
            "implName": "FW-R8",
            "name": "FW-R8 CKG 2",
            "reference": "Section 6.3, method 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DH": {
            "DHE": 25
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        },
        "GCM": {
          "GCM": 14
        },
        "XTS": {
          "XTS": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "TLS": {
            "TLS": 207,
            "TLS v1.2": 6
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1,
          "Key agreement": 1
        },
        "MAC": {
          "MAC": 31
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES-256": 6,
          "DRBG 128": 1,
          "DRBG 256": 3,
          "SHA- 384": 2,
          "SHA-256": 3,
          "SHA-384": 4,
          "SHA-512": 4,
          "SHA2-256": 7,
          "SHA2-384": 6,
          "SHA2-512": 3
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 0": 4,
          "Level 2": 1,
          "level 2": 2
        }
      },
      "hash_function": {
        "PBKDF": {
          "PBKDF": 13,
          "PBKDF2": 1
        },
        "SHA": {
          "SHA2": {
            "SHA-256": 3,
            "SHA-384": 4,
            "SHA-512": 4
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 101
        },
        "RNG": {
          "RBG": 6,
          "RNG": 9
        }
      },
      "side_channel_analysis": {
        "FI": {
          "physical tampering": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140": 5,
          "FIPS 140-3": 69,
          "FIPS 180-4": 7,
          "FIPS 186-5": 3,
          "FIPS 197": 3,
          "FIPS 198-1": 6,
          "FIPS186-5": 8
        },
        "ISO": {
          "ISO/IEC 19790": 2,
          "ISO/IEC 19790:2012": 3,
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "SP 800-132": 4,
          "SP 800-133": 2,
          "SP 800-135": 2,
          "SP 800-140B": 2,
          "SP 800-38A": 3,
          "SP 800-38B": 2,
          "SP 800-38D": 3,
          "SP 800-38E": 3,
          "SP 800-38F": 3,
          "SP 800-56A": 6,
          "SP 800-90A": 5,
          "SP 800-90B": 3
        },
        "RFC": {
          "RFC 5116": 3,
          "RFC 5487": 3,
          "RFC 7627": 3,
          "RFC7627": 3
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 3,
            "AES-256": 6
          },
          "CAST": {
            "CAST": 49
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 1,
            "HMAC": 3
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 6
        },
        "IBM": {
          "SSC": 13
        }
      },
      "tls_cipher_suite": {
        "TLS": {
          "TLS_DHE_PSK_WITH_AES_128_CBC_SHA256": 1,
          "TLS_DHE_PSK_WITH_AES_128_GCM_SHA256": 1,
          "TLS_DHE_PSK_WITH_AES_256_CBC_SHA384": 1,
          "TLS_DHE_PSK_WITH_AES_256_GCM_SHA384": 1,
          "TLS_PSK_WITH_AES_128_CBC_SHA256": 1,
          "TLS_PSK_WITH_AES_128_GCM_SHA256": 1,
          "TLS_PSK_WITH_AES_256_CBC_SHA384": 1,
          "TLS_PSK_WITH_AES_256_GCM_SHA384": 1
        }
      },
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES-CBCA6784",
        "KAS-FFC-SSC Sp800-56Ar3A6784",
        "AES-XTS Testing Revision 2.0A6787",
        "AES-CMACA6785",
        "SHA2-384A6788",
        "AES-GCMA6784",
        "PBKDFA6784",
        "HMAC-SHA2-256A6788",
        "TLS v1.2 KDF RFC7627A6784",
        "RSA SigVer (FIPS186-5)A6785",
        "SHA2-256A6788",
        "Counter DRBGA6785",
        "Safe Primes Key GenerationA6784",
        "AES-KWA6784",
        "HMAC-SHA2-384A6784"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A6788",
        "#A6787",
        "#A6785",
        "#A6784"
      ]
    },
    "policy_metadata": {
      "/Author": "Anthony Duran",
      "/ClassificationContentMarkingFooterFontProps": "#008000,10,Calibri",
      "/ClassificationContentMarkingFooterShapeIds": "6fabcf22,8bde460,6468e998",
      "/ClassificationContentMarkingFooterText": "Seagate Internal",
      "/ClassificationContentMarkingHeaderFontProps": "#008000,10,Aptos",
      "/ClassificationContentMarkingHeaderShapeIds": "6d664c0b,27c59378,2bd84356",
      "/ClassificationContentMarkingHeaderText": "UNCLASSIFIED / NON CLASSIFI\u00c9//TLP:AMBER+STRICT",
      "/Comments": "",
      "/Company": "",
      "/ContentTypeId": "0x010100431790D178E5E44AA18F831D1A5CC663",
      "/CreationDate": "D:20261013082254-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 26 for Word",
      "/Keywords": "",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ActionId": "03d96f2a-3cb7-411f-9e37-636926be1b01",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ContentBits": "1",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Enabled": "true",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Method": "Privileged",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Name": "TLP-Amber_Strict",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SetDate": "2026-10-13T12:16:01Z",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Tag": "10, 0, 1, 1",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_ActionId": "98ff15c1-74b0-4924-a7cc-f64a9924ed5e",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_ContentBits": "0",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Enabled": "true",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Method": "Privileged",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Name": "Unrestricted",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_SetDate": "2025-04-21T18:13:32Z",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_SiteId": "b64da4ac-e800-4cfc-8931-e607f720a1b8",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Tag": "10, 0, 1, 1",
      "/MediaServiceImageTags": "",
      "/ModDate": "D:20261013082438-04\u002700\u0027",
      "/Producer": "Adobe PDF Library 26.2.141",
      "/SourceModified": "",
      "/Subject": "",
      "/Title": "",
      "pdf_file_size_bytes": 1030341,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://doi.org/10.6028/NIST.SP.800-133r2",
          "https://doi.org/10.6028/NIST.FIPS.198-1",
          "https://www.seagate.com/content/dam/seagate/assets/support/internal-hard-drive/enterprise-hard-drives/exos-x24/_shared/files/Seagate_Exos_24_SAS_ISE-SED-FIPs(12-16-20-24TB)_Rev-A.pdf",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
          "https://doi.org/10.6028/NIST.FIPS.180-4",
          "https://doi.org/10.6028/NIST.SP.800-38E",
          "https://www.rfc-editor.org/rfc/rfc5116",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
          "https://doi.org/10.6028/NIST.SP.800-135r1",
          "https://www.rfc-editor.org/rfc/rfc7627.html",
          "https://doi.org/10.6028/NIST.SP.800-56Ar3",
          "https://doi.org/10.6028/NIST.SP.800-90Ar1",
          "https://doi.org/10.6028/NIST.SP.800-38D",
          "https://doi.org/10.6028/NIST.SP.800-38B",
          "https://www.iso.org/standard/52906.html",
          "https://doi.org/10.6028/NIST.FIPS.197",
          "https://trustedcomputinggroup.org/wp-content/uploads/TCG_Storage-Enterprise_Feature_Set_PSK_Secure_Messaging_v1.00_r1.00.pdf",
          "https://doi.org/10.6028/NIST.FIPS.186-5",
          "https://doi.org/10.6028/NIST.SP.800-132",
          "https://doi.org/10.6028/NIST.SP.800-90B",
          "https://www.rfc-editor.org/rfc/rfc5487.html",
          "https://doi.org/10.6028/NIST.FIPS.140-3",
          "https://trustedcomputinggroup.org/wp-content/uploads/TCG_Storage-SSC_Enterprise-v1.01_r1.00.pdf",
          "https://doi.org/10.6028/NIST.SP.800-38A"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 55
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "a680290b4cb96d21555f31b7392feb1bafdb21275d08af0ea8373db3d001cf50",
      "source_hash": "7fcbb5ca7b433ce91ad528e71a7dc9ba565f81bd2c79a5f88ba60023a7ebdcb8",
      "txt_hash": "c7161fe2c01215f91bdd5933012fd955b70b785a34418115afc7fb55e9cc67db"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy. No operator authentication is enforced for executing security services that were unlocked by an authenticated service",
    "certificate_pdf_url": null,
    "date_sunset": "2031-10-15",
    "description": "The primary function of the Seagate SSG5 TCG Enterprise SSC SED FIPS 140 Module is to provide encryption, access control, and cryptographic erase of the User Data stored on the module.",
    "embodiment": "MultiChipEmbed",
    "exceptions": [
      "Operational environment: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 2,
    "mentioned_certs": {},
    "module_name": "Seagate SSG5 TCG Enterprise SSC SED FIPS 140 Module",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-10-16",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Seagate Technology LLC.",
    "vendor_url": "http://www.seagate.com"
  }
}
Sections

Seagate SSG5 TCG Enterprise SSC SED FIPS 140 Module

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Block cipher modes

TLS cipher suites

Trusted Execution Environments

Security level

Side-channel analysis

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

New certificate

Raw data

Sections

Seagate SSG5 TCG Enterprise SSC SED FIPS 140 Module

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Block cipher modes

TLS cipher suites

Device

Trusted Execution Environments

Security

Security level

Side-channel analysis

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data
