{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "b6be463f6999751d", "cert_id": 5552, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Seagate SSG5 TCG Enterprise SSC SED FIPS 140 Module", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-10-16", "validation_type": "Initial", "lab": "Leidos Accredited Testing & Evaluation (AT&E) Lab"}], "vendor_url": "http://www.seagate.com", "vendor": "Seagate Technology LLC.", "certificate_pdf_url": null, "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 2, "caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy. No operator authentication is enforced for executing security services that were unlocked by an authenticated service", "exceptions": ["Operational environment: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipEmbed", "description": "The primary function of the Seagate SSG5 TCG Enterprise SSC SED FIPS 140 Module is to provide encryption, access control, and cryptographic erase of the User Data stored on the module.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-10-15", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"level 2": 2, "Level 2": 1, "Level 0": 4}}, "fips_certlike": {"Certlike": {"SHA2-512": 3, "SHA2-256": 7, "SHA2-384": 6, "SHA-512": 4, "SHA-256": 3, "SHA-384": 4, "SHA- 384": 2, "AES-256": 6, "DRBG 256": 3, "DRBG 128": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 6, "AES": 3}, "CAST": {"CAST": 49}}, "constructions": {"MAC": {"HMAC": 3, "CMAC": 1}}}, "asymmetric_crypto": {"FF": {"DH": {"DHE": 25}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA2": {"SHA-512": 4, "SHA-256": 3, "SHA-384": 4}}, "PBKDF": {"PBKDF": 13, "PBKDF2": 1}}, "crypto_scheme": {"MAC": {"MAC": 31}, "KA": {"Key agreement": 1, "Key Agreement": 1}}, "crypto_protocol": {"TLS": {"TLS": {"TLS v1.2": 6, "TLS": 207}}}, "randomness": {"PRNG": {"DRBG": 101}, "RNG": {"RNG": 9, "RBG": 6}}, "cipher_mode": {"CBC": {"CBC": 1}, "GCM": {"GCM": 14}, "XTS": {"XTS": 3}}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_DHE_PSK_WITH_AES_256_GCM_SHA384": 1, "TLS_DHE_PSK_WITH_AES_128_GCM_SHA256": 1, "TLS_DHE_PSK_WITH_AES_256_CBC_SHA384": 1, "TLS_DHE_PSK_WITH_AES_128_CBC_SHA256": 1, "TLS_PSK_WITH_AES_256_GCM_SHA384": 1, "TLS_PSK_WITH_AES_128_GCM_SHA256": 1, "TLS_PSK_WITH_AES_256_CBC_SHA384": 1, "TLS_PSK_WITH_AES_128_CBC_SHA256": 1}}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {"FI": {"physical tampering": 1}}, "device_model": {}, "tee_name": {"AMD": {"PSP": 6}, "IBM": {"SSC": 13}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 69, "FIPS 140": 5, "FIPS 198-1": 6, "FIPS186-5": 8, "FIPS 186-5": 3, "FIPS 180-4": 7, "FIPS 197": 3}, "NIST": {"SP 800-140B": 2, "SP 800-38A": 3, "SP 800-38B": 2, "SP 800-38D": 3, "SP 800-38F": 3, "SP 800-38E": 3, "SP 800-90A": 5, "SP 800-56A": 6, "SP 800-132": 4, "SP 800-135": 2, "SP 800-90B": 3, "SP 800-133": 2}, "RFC": {"RFC7627": 3, "RFC 5116": 3, "RFC 5487": 3, "RFC 7627": 3}, "ISO": {"ISO/IEC 24759": 2, "ISO/IEC 19790": 2, "ISO/IEC 19790:2012": 3}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1030341, "pdf_is_encrypted": false, "pdf_number_of_pages": 55, "/Author": "Anthony Duran", "/ClassificationContentMarkingFooterFontProps": "#008000,10,Calibri", "/ClassificationContentMarkingFooterShapeIds": "6fabcf22,8bde460,6468e998", "/ClassificationContentMarkingFooterText": "Seagate Internal", "/ClassificationContentMarkingHeaderFontProps": "#008000,10,Aptos", "/ClassificationContentMarkingHeaderShapeIds": "6d664c0b,27c59378,2bd84356", "/ClassificationContentMarkingHeaderText": "UNCLASSIFIED / NON CLASSIFI\u00c9//TLP:AMBER+STRICT", "/Comments": "", "/Company": "", "/ContentTypeId": "0x010100431790D178E5E44AA18F831D1A5CC663", "/CreationDate": "D:20261013082254-04'00'", "/Creator": "Acrobat PDFMaker 26 for Word", "/Keywords": "", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ActionId": "03d96f2a-3cb7-411f-9e37-636926be1b01", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ContentBits": "1", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Enabled": "true", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Method": "Privileged", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Name": "TLP-Amber_Strict", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SetDate": "2026-10-13T12:16:01Z", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Tag": "10, 0, 1, 1", "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_ActionId": "98ff15c1-74b0-4924-a7cc-f64a9924ed5e", "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_ContentBits": "0", "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Enabled": "true", "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Method": "Privileged", "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Name": "Unrestricted", "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_SetDate": "2025-04-21T18:13:32Z", "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_SiteId": "b64da4ac-e800-4cfc-8931-e607f720a1b8", "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Tag": "10, 0, 1, 1", "/MediaServiceImageTags": "", "/ModDate": "D:20261013082438-04'00'", "/Producer": "Adobe PDF Library 26.2.141", "/SourceModified": "", "/Subject": "", "/Title": "", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://doi.org/10.6028/NIST.SP.800-133r2", "https://doi.org/10.6028/NIST.FIPS.198-1", "https://www.seagate.com/content/dam/seagate/assets/support/internal-hard-drive/enterprise-hard-drives/exos-x24/_shared/files/Seagate_Exos_24_SAS_ISE-SED-FIPs(12-16-20-24TB)_Rev-A.pdf", "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements", "https://doi.org/10.6028/NIST.FIPS.180-4", "https://doi.org/10.6028/NIST.SP.800-38E", "https://www.rfc-editor.org/rfc/rfc5116", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf", "https://doi.org/10.6028/NIST.SP.800-135r1", "https://www.rfc-editor.org/rfc/rfc7627.html", "https://doi.org/10.6028/NIST.SP.800-56Ar3", "https://doi.org/10.6028/NIST.SP.800-90Ar1", "https://doi.org/10.6028/NIST.SP.800-38D", "https://doi.org/10.6028/NIST.SP.800-38B", "https://www.iso.org/standard/52906.html", "https://doi.org/10.6028/NIST.FIPS.197", "https://trustedcomputinggroup.org/wp-content/uploads/TCG_Storage-Enterprise_Feature_Set_PSK_Secure_Messaging_v1.00_r1.00.pdf", "https://doi.org/10.6028/NIST.FIPS.186-5", "https://doi.org/10.6028/NIST.SP.800-132", "https://doi.org/10.6028/NIST.SP.800-90B", "https://www.rfc-editor.org/rfc/rfc5487.html", "https://doi.org/10.6028/NIST.FIPS.140-3", "https://trustedcomputinggroup.org/wp-content/uploads/TCG_Storage-SSC_Enterprise-v1.01_r1.00.pdf", "https://doi.org/10.6028/NIST.SP.800-38A"]}}, "module_algorithms": {"_type": "Set", "elements": ["AES-CBCA6784", "KAS-FFC-SSC Sp800-56Ar3A6784", "AES-XTS Testing Revision 2.0A6787", "AES-CMACA6785", "SHA2-384A6788", "AES-GCMA6784", "PBKDFA6784", "HMAC-SHA2-256A6788", "TLS v1.2 KDF RFC7627A6784", "RSA SigVer (FIPS186-5)A6785", "SHA2-256A6788", "Counter DRBGA6785", "Safe Primes Key GenerationA6784", "AES-KWA6784", "HMAC-SHA2-384A6784"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A6788", "#A6787", "#A6785", "#A6784"]}, "is_br1_format": true, "br1_deviations": 0, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "2"}, {"section": "2", "title": "Cryptographic module specification", "level": "2"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "2"}, {"section": "4", "title": "Roles, services, and authentication", "level": "2"}, {"section": "5", "title": "Software/Firmware security", "level": "2"}, {"section": "6", "title": "Operational environment", "level": "N/A"}, {"section": "7", "title": "Physical security", "level": "2"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "2"}, {"section": "10", "title": "Self-tests", "level": "2"}, {"section": "11", "title": "Life-cycle assurance", "level": "2"}, {"section": "12", "title": "Mitigation of other attacks", "level": "N/A"}, {"section": "", "title": "Overall Level", "level": "2"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": true, "entries": [{"modelPartNum": "ST12000NM009H", "hwVersion": "GobyLite ASIC v1.0", "fwVersion": "FF06, HPD1, SW75, FUD1", "processors": "GobyLite ASIC, ARM Cortex R8 on GobyLite ASIC, ARM Cortex M0+ on GobyLite ASIC", "features": "12TB Exos NL TCG Enterprise SSC SED SAS"}, {"modelPartNum": "ST16000NM006H", "hwVersion": "GobyLite ASIC v1.0", "fwVersion": "FF06, HPD1, SY75, FUD1", "processors": "GobyLite ASIC, ARM Cortex R8 on GobyLite ASIC, ARM Cortex M0+ on GobyLite ASIC", "features": "16TB Exos NL TCG Enterprise SSC SED SAS"}, {"modelPartNum": "ST20000NM006H", "hwVersion": "GobyLite ASIC v1.0", "fwVersion": "FF06, HPD1, SY75", "processors": "GobyLite ASIC, ARM Cortex R8 on GobyLite ASIC, ARM Cortex M0+ on GobyLite ASIC", "features": "20TB Exos NL TCG Enterprise SSC SED SAS"}, {"modelPartNum": "ST24000NM006H", "hwVersion": "GobyLite ASIC v1.0", "fwVersion": "EF06, NA01, NE01, HPD1, SU75, LE01", "processors": "GobyLite ASIC, ARM Cortex R8 on GobyLite ASIC, ARM Cortex M0+ on GobyLite ASIC", "features": "24TB Exos NL TCG Enterprise SSC SED SAS"}, {"modelPartNum": "Model and/or Part Number", "hwVersion": "Firmware Version", "fwVersion": "Show Version Output", "processors": "", "features": ""}, {"modelPartNum": "ST24000NM006H", "hwVersion": "EF06", "fwVersion": "ST22000NM006H; EF06 ST20000NM006H; EF06 ST18000NM007H; EF06 ST16000NM006H; EF06 ST14000NM004H; EF06 ST12000NM009H; EF06", "processors": "", "features": ""}, {"modelPartNum": "ST20000NM006H", "hwVersion": "FF06", "fwVersion": "ST18000NM007H; FF06 ST16000NM006H; FF06 ST14000NM004H; FF06 ST12000NM009H; FF06 ST10000NM025H; FF06", "processors": "", "features": ""}, {"modelPartNum": "ST24000NM006H", "hwVersion": "NA01", "fwVersion": "X401_SSUME24TA07", "processors": "", "features": ""}, {"modelPartNum": "ST24000NM006H", "hwVersion": "NA01", "fwVersion": "X403_SSUME24TA07", "processors": "", "features": ""}, {"modelPartNum": "ST24000NM006H", "hwVersion": "NE01", "fwVersion": "ST24000NM006H", "processors": "", "features": ""}, {"modelPartNum": "ST24000NM006H", "hwVersion": "HPD1", "fwVersion": "MB024000JZAAV", "processors": "", "features": ""}, {"modelPartNum": "ST20000NM006H", "hwVersion": "HPD1", "fwVersion": "MB020000JZAAU", "processors": "", "features": ""}, {"modelPartNum": "ST16000NM006H", "hwVersion": "HPD1", "fwVersion": "MB016000JZAAT", "processors": "", "features": ""}, {"modelPartNum": "ST12000NM009H", "hwVersion": "HPD1", "fwVersion": "MB012000JYZZK", "processors": "", "features": ""}]}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "modes_of_operation": {"section": 2, "subsection": 4, "found": true, "entries": [{"name": "TCG Security Mode", "description": "The CM is utilizing TCG Security as the method for managing access control and the secure initialization steps have been performed (see section 11.2.1).", "type": "Approved", "statusIndicator": "FIPS Operating Mode Indicator has a value of one (1) and the User Data Range columns are configured as follows: ReadLockEnabled is \"True\", WriteLockEnabled is \"True\", and LockOnReset contains \"Power Cycle\""}, {"name": "Non- Approved Mode", "description": "The CM/User Data Range is operating in a Non-approved mode", "type": "Non- Approved", "statusIndicator": "FIPS Operating Mode Indicator has a value of one (1) and at least one of the User Data Range columns is configured as follows: ReadLockEnabled is \"False\", WriteLockEnabled is \"False\", and LockOnReset does not contain \"Power Cycle\""}]}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CBC", "cavpCertName": "A6784", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CMAC", "cavpCertName": "A6785", "properties": "Direction - Generation Key Length - 256 MAC Length - MAC Length: 8-128 Increment 8 Message Length - Message Length: 128-512 Increment 128", "reference": "SP 800-38B"}, {"algorithm": "AES-GCM", "cavpCertName": "A6784", "properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.2 Key Length - 128, 256 Tag Length - 128 IV Length - IV Length: 96 Payload Length - Payload Length: 128, 256 AAD Length - AAD Length: 0, 256", "reference": "SP 800-38D"}, {"algorithm": "AES-KW", "cavpCertName": "A6784", "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 256", "reference": "SP 800-38F"}, {"algorithm": "", "cavpCertName": "", "properties": "Payload Length - Payload Length: 128, 192, 256, 320, 4096", "reference": ""}, {"algorithm": "AES-XTS Testing Revision 2.0", "cavpCertName": "A6787", "properties": "Direction - Decrypt, Encrypt Key Length - 256 Payload Length - Payload Length: 4096, 4160, 4192, 4224, 33792 Tweak Mode - Number Data Unit Length Matches Payload Length - Yes", "reference": "SP 800-38E"}, {"algorithm": "Counter DRBG", "cavpCertName": "A6785", "properties": "Prediction Resistance - No Supports Reseed - Yes Mode - AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0, 256 Entropy Input - Entropy Input: 256 Nonce - Nonce: 128 Personalization String Length - Personalization String Length: 0, 256 Returned Bits - 256", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "HMAC-SHA2-256", "cavpCertName": "A6784", "properties": "MAC - MAC: 256 Key Length - Key Length: 8-512 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-256", "cavpCertName": "A6788", "properties": "MAC - MAC: 256 Key Length - Key Length: 8-512 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-384", "cavpCertName": "A6784", "properties": "MAC - MAC: 384 Key Length - Key Length: 8-1024 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "KAS-FFC-SSC Sp800-56Ar3", "cavpCertName": "A6784", "properties": "Domain Parameter Generation Methods - ffdhe2048 Hash Function Z - SHA2-512 Scheme - dhEphem - KAS Role - responder", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "PBKDF", "cavpCertName": "A6784", "properties": "Iteration Count - Iteration Count: 1000 HMAC Algorithm - SHA2-256 Password Length - Password Length: 8-64 Increment 1 Salt Length - Salt Length: 128-512 Increment 8", "reference": "SP 800-132"}, {"algorithm": "RSA SigVer (FIPS186-5)", "cavpCertName": "A6785", "properties": "Key Data Length - Key Data Length: 256 Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048, 3072 Signature Type - pkcs1v1.5 Public Exponent Mode - random", "reference": "FIPS 186-5"}, {"algorithm": "Safe Primes Key Generation", "cavpCertName": "A6784", "properties": "Safe Prime Groups - ffdhe2048", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "SHA2-256", "cavpCertName": "A6784", "properties": "Message Length - Message Length: 0-65528 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-256", "cavpCertName": "A6788", "properties": "Message Length - Message Length: 0-65528 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-384", "cavpCertName": "A6784", "properties": "Message Length - Message Length: 0-65528 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-384", "cavpCertName": "A6788", "properties": "Message Length - Message Length: 0-65528 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "TLS v1.2 KDF RFC7627 (CVL)", "cavpCertName": "A6784", "properties": "Hash Algorithm - SHA2-256, SHA2-384 Key Block Length - Key Block Length: 1024", "reference": "SP 800-135 Rev. 1"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "FW-R8 CKG 1", "algoPropList": "Key Type:Symmetric and Asymmetric", "implName": "FW-R8", "reference": "Section 4, example 1"}, {"name": "FW-R8 CKG 2", "algoPropList": "Key Type:Symmetric", "implName": "FW-R8", "reference": "Section 6.3, method 1"}]}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "AES-GCM (no security claimed)", "caveat": "IG 2.4.A Scenario 1", "use": "Obfuscation"}, {"name": "SHA-512 (no security claimed)", "caveat": "IG 2.4.A Scenario 2", "use": "Memory integrity check, no claim of security."}]}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "AES-GCM (non-compliant)", "use": "Key wrapping (encryption / decryption)"}, {"name": "AES-XTS (non-compliant)", "use": "Encryption / decryption"}, {"name": "PBKDF (non-compliant)", "use": "Key Derivation"}, {"name": "RSA Signature Generation (non-compliant)", "use": "Signature generation"}, {"name": "SHA-256 (non-compliant)", "use": "Used in PBKDF (non-compliant)"}, {"name": "SHA-512 (non-compliant)", "use": "Used in RSA Signature Generation (non-compliant)"}]}, "ports_interfaces": {"section": 3, "subsection": 1, "found": true, "entries": [{"physicalPort": "SAS Connector", "logicalInterface": "Data Input Data Output Control Input Status Output", "data": "TCG Packets, SCSI Packets"}, {"physicalPort": "Power Connector", "logicalInterface": "Power", "data": "N/A"}, {"physicalPort": "Serial Interface Connector (Disabled)", "logicalInterface": "None", "data": "N/A"}]}, "authentication_methods": {"section": 4, "subsection": 1, "found": true, "entries": [{"name": "TCG PIN Authentication", "description": "Authentication for CM roles. Minimum PIN length is 8 bytes (64 bits)", "mechanism": "Key Derivation", "strength": "Strength: 1/(2^64)", "perMinute": "1024/(2^64)"}]}, "roles": {"section": 4, "subsection": 2, "found": true, "entries": [{"name": "Drive Owner (SID)", "type": "Role", "operatorType": "Crypto Officer", "authMethodList": "TCG PIN Authentication"}, {"name": "EraseMaster", "type": "Role", "operatorType": "Crypto Officer", "authMethodList": "TCG PIN Authentication"}, {"name": "BandMasters", "type": "Role", "operatorType": "Crypto Officer", "authMethodList": "TCG PIN Authentication"}]}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "Authenticate", "description": "Authenticate the operator", "indicator": "TCG Status", "inputs": "TCG Authenticate Method, TCG Start Session Method", "outputs": "None", "secFunImpl": "Key Derivation Key Wrap 1", "rolesSspAccess": "BandMasters - BandMaster PINs: W,E - KW AES-GCM IV: E - Master Keys: G,E,Z Drive Owner (SID) - Drive Owner (SID) PIN: W,E - KW AES-GCM IV: E - Master Keys: G,E,Z EraseMaster - EraseMaster PIN: W,E - KW AES-GCM IV: E - Master Keys: G,E,Z"}, {"name": "Cryptographic Erase", "description": "Erase User Data in LBA range cryptographically by changing the MEK and place the range in the uninitialized state.", "indicator": "TCG Status", "inputs": "TCG Erase Method", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "EraseMaster - BandMaster PINs: Z - MEKEKs: Z - MEKs: Z"}, {"name": "Exit FIPS Mode / Return to Factory State", "description": "Exit the approved mode of operation and return the CM to the factory state", "indicator": "TCG Status", "inputs": "TCG RevertSP Method", "outputs": "None", "secFunImpl": "Generate random number Generate Key", "rolesSspAccess": "Unauthenticated - BandMaster PINs: Z - BandMaster PSKs: Z - DRBG Entropy Input String: G,E,Z"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - Drive Owner (SID) PIN: Z - Drive Owner PSK: Z - EraseMaster PIN: Z - EraseMaster PSK: Z - MEKEKs: Z - MEKs: Z"}, {"name": "FW Download", "description": "New FW is downloaded to device and replaces existing FW", "indicator": "Interface Status", "inputs": "Interface FW Download Command", "outputs": "None", "secFunImpl": "Verify FW Digital Signature", "rolesSspAccess": "Drive Owner (SID) - FW Update Key: E"}, {"name": "FW Download (Rollback)", "description": "New FW is downloaded to device and replaces existing FW. New FW violates FW rollback policy.", "indicator": "Interface Status", "inputs": "Interface FW Download Command", "outputs": "None", "secFunImpl": "Verify FW Digital Signature", "rolesSspAccess": "Drive Owner (SID) - FW Update Key: E"}, {"name": "Generate Random Bytes", "description": "Generate random data for host use", "indicator": "TCG Status", "inputs": "TCG Random Method", "outputs": "Random Bytes", "secFunImpl": "Generate random number", "rolesSspAccess": "Unauthenticated - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z"}, {"name": "Reset Module", "description": "Restart the module. This will run the pre-operational and power-on conditional self- tests.", "indicator": "N/A", "inputs": "Power-On Reset", "outputs": "None", "secFunImpl": "Verify FW Digital Signature", "rolesSspAccess": "Unauthenticated - DRBG Entropy Input String: Z - DRBG Key: Z - DRBG Seed: Z - DRBG V: Z - Drive Owner"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "(SID) PIN: Z - Platform Keys: E - Signing Authority Keys: E - TLS Client DHE Public Key: Z - TLS Client Write Encryption Key: Z - TLS Client Write MAC Key: Z - TLS Master Secret: Z - TLS Other Secret: Z - TLS Premaster Secret: Z - TLS Server DHE Private Key: Z - TLS Server DHE Public Key: Z - TLS Server Write Encryption Key: Z - TLS Server Write MAC Key: Z"}, {"name": "Set Enable/Disable BandMasters", "description": "Enable/disable BandMaster authority", "indicator": "TCG Status", "inputs": "TCG Set Method", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "EraseMaster"}, {"name": "Set FW Ports", "description": "Set PortLocked and LockOnReset attributes on the FW Download port or Rollback FW Download port", "indicator": "TCG Status", "inputs": "TCG Set Method", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Drive Owner (SID)"}, {"name": "Set PIN / Password (Drive Owner)", "description": "Change operator authentication data", "indicator": "TCG Status", "inputs": "TCG Set Method", "outputs": "None", "secFunImpl": "Generate random number Key Derivation Key Wrap 2", "rolesSspAccess": "BandMasters - BandMaster PINs: G,W,E,Z - DRBG Entropy Input String: G,E,Z - DRBG Key:"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - KW AES-GCM IV: G,E Drive Owner (SID) - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - Drive Owner (SID) PIN: G,W,E,Z - KW AES-GCM IV: G,E EraseMaster - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - EraseMaster PIN: G,W,E,Z - KW AES-GCM IV: G,E"}, {"name": "Set Range Attributes", "description": "Set location, size, and locking attributes of an LBA range", "indicator": "TCG Status", "inputs": "TCG Set Method", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "BandMasters"}, {"name": "Set TLS PSK", "description": "Set pre-shared key used for TLS", "indicator": "TCG Status", "inputs": "TCG Set Method", "outputs": "None", "secFunImpl": "Generate random number AES-GCM (No Security Claimed)", "rolesSspAccess": "BandMasters - BandMaster PSKs: W,Z - DRBG Entropy"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z Drive Owner (SID) - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - Drive Owner PSK: W,Z EraseMaster - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - EraseMaster PSK: W,Z"}, {"name": "Show Status", "description": "Show status of module state, including the value of the FIPS Operating Mode Indicator", "indicator": "TCG Status", "inputs": "TCG Level 0 Discovery, TCG Get Method", "outputs": "Current CM Status Value", "secFunImpl": "None", "rolesSspAccess": "Unauthenticated"}, {"name": "Show Version", "description": "Show version of module state", "indicator": "TCG Status", "inputs": "Interface INQUIRY command", "outputs": "Current CM Version Value", "secFunImpl": "None", "rolesSspAccess": "Unauthenticated"}, {"name": "TCG Close Session", "description": "Close open TCG session", "indicator": "TCG Status", "inputs": "TCG Close Session", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Unauthenticated"}, {"name": "TLS Close Session", "description": "Close open TLS session", "indicator": "TCG Status", "inputs": "TCG Close Session", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Unauthenticated - TLS AES-GCM IV: Z"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- TLS Client DHE Public Key: Z - TLS Client Write Encryption Key: Z - TLS Client Write MAC Key: Z - TLS Master Secret: Z - TLS Other Secret: Z - TLS Premaster Secret: Z - TLS Server DHE Private Key: Z - TLS Server DHE Public Key: Z - TLS Server Write Encryption Key: Z - TLS Server Write MAC Key: Z"}, {"name": "TLS Receive Message", "description": "CM receives TLS message from host", "indicator": "TCG Status", "inputs": "Interface IF-Send Command", "outputs": "None", "secFunImpl": "Encrypt/Decrypt TLS Message Generate random number KTS GCM KTS CBC/HMAC", "rolesSspAccess": "BandMasters - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - TLS AES-GCM IV: G,E - TLS Client Write Encryption Key: E - TLS Client Write MAC Key: E Drive Owner (SID) - DRBG Entropy Input String:"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - TLS AES-GCM IV: G,E - TLS Client Write Encryption Key: E - TLS Client Write MAC Key: E EraseMaster - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - TLS AES-GCM IV: G,E - TLS Client Write Encryption Key: E - TLS Client Write MAC Key: E"}, {"name": "TLS Send Message", "description": "CM sends TLS message to host", "indicator": "TCG Status", "inputs": "Interface IF- Receive Command", "outputs": "Encrypted TLS message", "secFunImpl": "Encrypt/Decrypt TLS Message", "rolesSspAccess": "BandMasters - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - TLS AES-GCM IV: G,E - TLS Client Write Encryption Key: E"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- TLS Server Write MAC Key: E Drive Owner (SID) - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - TLS AES-GCM IV: G,E - TLS Server Write Encryption Key: E - TLS Server Write MAC Key: E EraseMaster - DRBG Entropy Input String: G,E,Z - DRBG Key: G,E,Z - DRBG Seed: G,E,Z - DRBG V: G,E,Z - TLS AES-GCM IV: G,E - TLS Server Write Encryption Key: E - TLS Server Write MAC Key: E"}, {"name": "TLS Start Session", "description": "Start host-initiated TLS session", "indicator": "TCG Status", "inputs": "TCG StartTLS Method", "outputs": "None", "secFunImpl": "Start TLS Session AES-GCM (No Security Claimed)", "rolesSspAccess": "BandMasters - BandMaster PSKs: E - TLS Client DHE Public Key: W,E - TLS Client Write Encryption Key: G"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- TLS Client Write MAC Key: G - TLS Master Secret: G,E - TLS Other Secret: G,E - TLS Premaster Secret: G,E - TLS Server DHE Private Key: G,E - TLS Server DHE Public Key: G,R - TLS Server Write Encryption Key: G - TLS Server Write MAC Key: G Drive Owner (SID) - Drive Owner PSK: E - TLS Client DHE Public Key: W,E - TLS Client Write Encryption Key: G - TLS Client Write MAC Key: G - TLS Master Secret: G,E - TLS Other Secret: G,E - TLS Premaster Secret: G,E - TLS Server DHE Private Key: G,E - TLS Server DHE Public Key: G,R - TLS Server Write Encryption Key: G"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- TLS Server Write MAC Key: G EraseMaster - EraseMaster PSK: E - TLS Client DHE Public Key: W,E - TLS Client Write Encryption Key: G - TLS Client Write MAC Key: G - TLS Master Secret: G,E - TLS Other Secret: G,E - TLS Premaster Secret: G,E - TLS Server DHE Private Key: G,E - TLS Server DHE Public Key: G,R - TLS Server Write Encryption Key: G - TLS Server Write MAC Key: G"}, {"name": "User Data Lock/Unlock Range", "description": "Lock/Unlock read/decrypt or write/decrypt of User Data in an LBA range", "indicator": "TCG Status", "inputs": "TCG Set Method", "outputs": "None", "secFunImpl": "Key Wrap 2", "rolesSspAccess": "BandMasters - MEKEKs: E - MEKs: E"}, {"name": "User Data Read / Write", "description": "Encrypt/write or decrypt/read User data from an LBA range", "indicator": "Interface Status", "inputs": "Interface Read/Write Command", "outputs": "Plaintext User Data", "secFunImpl": "Encrypt/Decrypt User Data SHA2-512 (No Security Claimed)", "rolesSspAccess": "BandMasters - MEKs: E"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": true, "entries": [{"name": "Cryptographic Erase", "description": "Generates new range key following sanitization of the non-volatile media.", "alg_accessed": "AES-GCM (non- compliant) PBKDF (non-compliant) SHA-256 (non-compliant)", "role": "EraseMaster"}, {"name": "Cryptographic Erase (Certified)", "description": "Generates new range key and provides certificate of media disposition for each piece of the non-volatile media following sanitization.", "alg_accessed": "RSA Signature Generation (non- compliant) AES-GCM (non- compliant) PBKDF (non-compliant) SHA-256 (non-compliant) SHA-512 (non-compliant)", "role": "EraseMaster"}, {"name": "User Data Read / Write (Locking Disabled)", "description": "Encrypt / decrypt user data from an LBA range where Locking is disabled", "alg_accessed": "AES-XTS (non-compliant)", "role": "None"}]}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": true, "entries": [{"mechanism": "Opaque, TEL on exposed (back) side of the PCBA", "inspectFreq": "The frequency of the physical inspection should be determined by the Crypto Officer. It is recommended that the TEL be inspected monthly.", "inspectGuidance": "Periodic inspection of TEL to detect evidence of tampering: checkerboard pattern on TEL, security label cutouts do not match original, and security label over PCBA screws is not penetrated Upon discovery of tamper evidence, the CM should be handled per organizational policies."}]}, "storage_areas": {"section": 9, "subsection": 1, "found": true, "entries": [{"name": "DRAM", "description": "Temporary, volatile memory", "persistance": "Dynamic"}, {"name": "HW Registers", "description": "Temporary, volatile memory", "persistance": "Dynamic"}, {"name": "Media", "description": "Persistent, non-volatile memory", "persistance": "Static"}, {"name": "ROM", "description": "Persistent, non-modifiable, non-volatile memory", "persistance": "Static"}, {"name": "Serial Flash", "description": "Persistent, non-volatile memory", "persistance": "Static"}]}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "Host Input", "source": "Entered", "dest": "DRAM", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}, {"name": "Host Input TLS CBC/HMAC", "source": "Entered", "dest": "DRAM", "format": "Encrypted", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": "KTS CBC/HMAC"}, {"name": "Host Input TLS GCM", "source": "Entered", "dest": "DRAM", "format": "Encrypted", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": "KTS GCM"}, {"name": "Host Output", "source": "DRAM", "dest": "Entered", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "ZM1", "description": "Write volatile memory: Zeroize SSP by writing the memory where the SSP is stored with a pattern of all bytes set to 0x00.", "rationale": "The method ensures that the previous SSP value is entirely overwritten and is no longer stored in volatile memory.", "operatorId": "Authenticate, Cryptographic Erase, Exit FIPS Mode / Return to Factory State, Reset Module, Set PIN / Password, Set TLS PSK, TCG Close Session, TLS Close Session, TLS Start Session"}, {"method": "ZM2", "description": "Write non-volatile memory (unprotected SSPs): Zeroize unprotected (i.e., plaintext or obfuscated) SSPs stored in non-volatile memory by writing the memory where the SSP is stored with a pattern", "rationale": "The method ensures that the previous SSP value is entirely overwritten and is no longer stored in non- volatile memory. Additionally, the two overwrites mitigates the", "operatorId": "Exit FIPS Mode / Return to Factory State, Set TLS PSK"}, {"method": "", "description": "of all bytes set to 0x00 and then writing the new SSP value.", "rationale": "risk of any residual data in the non-volatile memory", "operatorId": ""}, {"method": "ZM3", "description": "Write non-volatile memory (protected SSPs): Zeroize protected (i.e., encrypted using another SSP) SSPs stored in non-volatile memory by writing the memory where the SSP is stored with a pattern of all bytes set to 0x00 and then writing the new SSP value.", "rationale": "The method ensures that the previous SSP value is entirely overwritten and is no longer stored in volatile memory.", "operatorId": "Cryptographic Erase, Exit FIPS Mode / Return to Factory State, Set PIN/Password"}]}, "self_tests": {"section": 10, "subsection": 1, "found": true, "entries": [{"algorithmOrTest": "Controller/Servo Integrity Test, RSA SigVer (FIPS186-5) (A6785)", "testProps": "Modulus: 3048, Hash: SHA-384", "testMethod": "KAT", "type": "SW/FW Integrity", "indicator": "If test fails, the CM enters FW Integrity Error State", "details": "Verify signature on stored Controller/Servo FW"}, {"algorithmOrTest": "IDBA Integrity Test, RSA SigVer (FIPS186- 5) (A6785)", "testProps": "Modulus: 3048, Hash: SHA-384", "testMethod": "KAT", "type": "SW/FW Integrity", "indicator": "If test fails, the CM enters FW Integrity Error State", "details": "Verify signature on stored IDBA FW"}, {"algorithmOrTest": "ITCM Integrity Test, RSA SigVer (FIPS186- 5) (A6785)", "testProps": "Modulus: 3048, Hash: SHA-384", "testMethod": "KAT", "type": "SW/FW Integrity", "indicator": "If test fails, the CM enters FW Integrity Error State", "details": "Verify signature on stored ITCM FW"}]}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "Counter DRBG Reseed (A6785)", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Reseed Health Test (see [SP 800-90A Rev. 1])", "condition": "Bootup"}, {"algorithmOrTest": "90B Continuous Adaptive Proportion Test (APT)", "testProps": "Adaptive Proportion Test", "testMethod": "Fault- Detection", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "APT", "condition": "Continuous as entropy is generated from the entropy source."}, {"algorithmOrTest": "90B Continuous Repetition Count Test (RCT)", "testProps": "Repetition Count Test", "testMethod": "Fault- Detection", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "RCT", "condition": "Continuous as entropy is generated from the entropy source"}, {"algorithmOrTest": "90B Start-up Adaptive Proportion Test (APT)", "testProps": "Adaptive Proportion Test", "testMethod": "Fault- Detection", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "APT", "condition": "Bootup"}, {"algorithmOrTest": "90B Start-up Repetition", "testProps": "Repetition Count Test", "testMethod": "Fault- Detection", "type": "CAST", "indicator": "If test fails, CM enters", "details": "RCT", "condition": "Bootup"}, {"algorithmOrTest": "Count Test (RCT)", "testProps": "", "testMethod": "", "type": "", "indicator": "Self-Test Error State", "details": "", "condition": ""}, {"algorithmOrTest": "AES-CBC Decrypt (A6784)", "testProps": "256-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-CBC Encrypt (A6784)", "testProps": "256-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-CMAC (A6785)", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Generate MAC", "condition": "Bootup"}, {"algorithmOrTest": "AES-GCM Decrypt (A6784)", "testProps": "256-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Authenticated Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-GCM Encrypt (A6784)", "testProps": "256-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Authenticated Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-KW Decrypt (A6784)", "testProps": "256-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Authenticated Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-KW Encrypt (A6784)", "testProps": "256-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test", "details": "Authenticated Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-XTS Comparison Test (A6784)", "testProps": "256-bit key", "testMethod": "Comparison Test", "type": "Critical Function", "indicator": "Error State If test fails, CM enters Self-Test Error State", "details": "Generated XTS keys are compared to ensure Key_1 and Key_2 are not equal", "condition": "Every time XTS keys are generated"}, {"algorithmOrTest": "AES-XTS Testing Revision 2.0 Decrypt (A6787)", "testProps": "256-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-XTS Testing Revision 2.0 Encrypt (A6787)", "testProps": "256-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "Counter DRBG (A6785)", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "DRBG", "condition": "Bootup"}, {"algorithmOrTest": "Counter DRBG", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters", "details": "Generate Health Test", "condition": "Bootup"}, {"algorithmOrTest": "Generate (A6785)", "testProps": "", "testMethod": "", "type": "", "indicator": "Self-Test Error State", "details": "(see [SP 800- 90A Rev. 1])", "condition": ""}, {"algorithmOrTest": "Counter DRBG Instantiate (A6785)", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Instantiate Health Test (see [SP 800- 90A Rev. 1])", "condition": "Bootup"}, {"algorithmOrTest": "Firmware Load Test", "testProps": "Modulus - 3072-bit Hash: SHA- 384", "testMethod": "KAT", "type": "SW/FW Load", "indicator": "If the test fails, the CM discards incoming FW image, returns failure status, and continues normal operation", "details": "Verify Signature", "condition": "Test runs every time new FW is loaded to the device"}, {"algorithmOrTest": "HMAC- SHA2-256 (A6784)", "testProps": "256-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Generate MAC", "condition": "Bootup"}, {"algorithmOrTest": "HMAC- SHA2-384 (A6784)", "testProps": "256-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Generate MAC", "condition": "Bootup"}, {"algorithmOrTest": "KAS-FFC- SSC Sp800- 56Ar3 (A6784)", "testProps": "2048-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Generate Primitive Z", "condition": "Bootup"}, {"algorithmOrTest": "PBKDF (A6784)", "testProps": "256-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Key Derivation", "condition": "Bootup"}, {"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6785)", "testProps": "Modulus - 3072-bit Hash: SHA- 384", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Verify Signature", "condition": "Bootup"}, {"algorithmOrTest": "Safe Primes Key Generation (A6784)", "testProps": "Domain Parameters: ffdhe2048", "testMethod": "PCT", "type": "PCT", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Generate Key Pair", "condition": "Every time KAS-FFC keys are generated"}, {"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A6784)", "testProps": "Hash Algorithm: SHA2-256, SHA2-384", "testMethod": "KAT", "type": "CAST", "indicator": "If test fails, CM enters Self-Test Error State", "details": "Key Derivation", "condition": "Bootup"}]}, "error_states": {"section": 10, "subsection": 4, "found": true, "entries": [{"name": "FW Integrity Error State", "description": "FW Integrity Test has failed", "conditions": "Failure of FW Integrity Test during CM power- on sequence", "recoveryMethod": "None", "indicator": "Interface error returned on first non- inquiry/identify command"}, {"name": "Self-Test Error State (Permanent)", "description": "Self-Test has failed", "conditions": "Failure of CAST after a reboot from a Transient failure.", "recoveryMethod": "None", "indicator": "Byte 17 of Level 0 Discovery is 0xFF"}, {"name": "Self-Test Error State (Transient)", "description": "Self-Test has failed", "conditions": "Failure of CAST or Entropy CFT test", "recoveryMethod": "Reset Module", "indicator": "Byte 17 of Level 0 Discovery is 0xFF"}]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["AES-CBCA6784", "#A6787", "AES-GCMA6784", "HMAC-SHA2-256A6788", "KAS-FFC-SSC Sp800-56Ar3A6784", "AES-XTS Testing Revision 2.0A6787", "#A6784", "#A6785", "RSA SigVer (FIPS186-5)A6785", "Counter DRBGA6785", "Safe Primes Key GenerationA6784", "AES-KWA6784", "AES-CMACA6785", "TLS v1.2 KDF RFC7627A6784", "SHA2-256A6788", "SHA2-384A6788", "PBKDFA6784", "#A6788", "HMAC-SHA2-384A6784"]}, "extracted_versions": {"_type": "Set", "elements": ["140"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "7fcbb5ca7b433ce91ad528e71a7dc9ba565f81bd2c79a5f88ba60023a7ebdcb8", "txt_hash": "c7161fe2c01215f91bdd5933012fd955b70b785a34418115afc7fb55e9cc67db", "json_hash": "a680290b4cb96d21555f31b7392feb1bafdb21275d08af0ea8373db3d001cf50"}}}