{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "c4b606ff15bd9b86", "cert_id": 5550, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Integrated Compute Complex (ICC)", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-10-10", "validation_type": "Initial", "lab": "Acumen Security"}], "vendor_url": "http://www.google.com", "vendor": "Google, LLC", "certificate_pdf_url": null, "module_type": "Firmware", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode with module B227 True Random Number Generator (TRNG) Cryptographic Module validated to FIPS 140-3 under Cert. #5539 operating in approved mode. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "SingleChip", "description": "The Integrated Compute Complex (ICC) provides cryptography to subsystems within the Google IN762 SoC.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {"5539": 1}, "historical_reason": null, "date_sunset": "2031-10-09", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#5539": 1, "#2": 1, "Cert. 5539": 1}}, "fips_security_level": {"Level": {"Level 1": 4}}, "fips_certlike": {"Certlike": {"SHA2-256": 3, "AES-256": 8, "AES-128": 6, "AES-CMAC (256": 1, "AES CTR (256": 2, "AES256": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 8, "AES-128": 6, "AES": 2, "AES-": 2, "AES256": 1}, "CAST": {"CAST": 20}}, "constructions": {"MAC": {"CMAC": 2}}}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {"MAC": {"MAC": 9}}, "crypto_protocol": {}, "randomness": {"TRNG": {"TRNG": 4}, "PRNG": {"DRBG": 35}, "RNG": {"RBG": 2}}, "cipher_mode": {"CTR": {"CTR": 2}}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 26}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 9, "FIPS 180-4": 1}, "NIST": {"SP 800-38B": 1, "SP 800-38A": 2, "SP 800-90A": 2, "SP 800-108": 2, "SP 800-90B": 5, "NIST SP 800-90B": 3}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 466114, "pdf_is_encrypted": false, "pdf_number_of_pages": 32, "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20261006090419-04'00'", "/ModDate": "D:20261006090419-04'00'", "/Producer": "Microsoft\u00ae Word for Microsoft 365", "pdf_hyperlinks": {"_type": "Set", "elements": ["http://csrc.nist.gov/groups/STM/cmvp/index.html"]}}, "module_algorithms": {"_type": "Set", "elements": ["Conditioning Component Block Cipher Derivation Function SP800-90BA2932", "AES-ECBA7461", "SHA2-256A7461", "AES-CMACA7461", "Counter DRBGA7461", "KDF SP800-108A7461"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A7461", "#A2932", "#A2721"]}, "is_br1_format": true, "br1_deviations": 1, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "1"}, {"section": "2", "title": "Cryptographic module specification", "level": "1"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "1"}, {"section": "4", "title": "Roles, services, and authentication", "level": "1"}, {"section": "5", "title": "Software/Firmware security", "level": "1"}, {"section": "6", "title": "Operational environment", "level": "1"}, {"section": "7", "title": "Physical security", "level": "1"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "1"}, {"section": "10", "title": "Self-tests", "level": "1"}, {"section": "11", "title": "Life-cycle assurance", "level": "1"}, {"section": "12", "title": "Mitigation of other attacks", "level": "N/A"}, {"section": "", "title": "Overall Level", "level": "1"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": true, "entries": [{"packageFileName": "ICC Secure Firmware", "swFwVersion": "2.10.0", "features": "N/A", "integrityTest": "AES-CMAC Verification"}]}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": true, "entries": [{"operatingSystem": "N/A", "hardwarePlatform": "IN762 SoC B1, C1", "processors": "ARM Cortex-A53 (ARMv8)", "paa_pai": "No", "hypervisorHostOs": "N/A", "version": "2.10.0"}]}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "modes_of_operation": {"section": 2, "subsection": 4, "found": true, "entries": [{"name": "Approved Mode", "description": "No configuration of the module or installation steps are required from the operator; When the module is powered on its self-tests are executed without any operator intervention; The module enters the Approved mode of operation automatically if the self-tests at boot complete successfully", "type": "Approved", "statusIndicator": "\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activating\" logs"}]}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CMAC", "cavpCertName": "A7461", "properties": "Direction - Generation Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-1024 Increment 8", "reference": "SP 800-38B"}, {"algorithm": "AES-ECB", "cavpCertName": "A2932", "properties": "Direction - Encrypt Key Length - 128, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-ECB", "cavpCertName": "A7461", "properties": "Direction - Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "Counter DRBG", "cavpCertName": "A7461", "properties": "Prediction Resistance - No Supports Reseed - No Mode - AES-256 Derivation Function Enabled - No Additional Input - Additional Input: 0-256 Increment 8 Entropy Input - Entropy Input: 384 Nonce - Nonce: 0 Personalization String Length - Personalization String Length: 0-256 Increment 8 Returned Bits - 512", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "KDF SP800- 108", "cavpCertName": "A7461", "properties": "KDF Mode - Counter MAC Mode - CMAC-AES256 Supported Lengths - Supported Lengths: 128, 256 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - No Custom Key In Length - 0", "reference": "SP 800-108 Rev. 1"}, {"algorithm": "SHA2-256", "cavpCertName": "A7461", "properties": "Message Length - Message Length: 0-16384 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "Conditioning Component Block Cipher Derivation Function SP800-90B", "cavpCertName": "A2932", "properties": "Key Length - 128 Payload Length - Payload Length: 512", "reference": "SP 800-90B"}, {"algorithm": "Counter DRBG", "cavpCertName": "A2721", "properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - AES-128, AES-256 Derivation Function Enabled - No Additional Input - Additional Input: 0-256 Increment 8, Additional Input: 0-384 Increment 8 Entropy Input - Entropy Input: 256, Entropy Input: 384 Nonce - Nonce: 0 Personalization String Length - Personalization String Length: 0-256 Increment 8, Personalization String Length: 0-384 Increment 8 Returned Bits - 128, 512", "reference": "SP 800-90A Rev. 1"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "CKG - Section 4", "algoPropList": "Key Type:Symmetric", "implName": "N/A", "reference": "NIST SP 800-133r2 Section 4 option 1 Using the Output of a Random Bit Generator; NIST SP 800-133r2 Section 6.1 The \"Direct Generation\" of Symmetric Keys; NIST SP 800-133r2 Section 6.2.2 Symmetric Keys Derived from a Pre-existing Key"}]}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": false, "entries": []}, "ports_interfaces": {"section": 3, "subsection": 1, "found": true, "entries": [{"physicalPort": "N/A", "logicalInterface": "Data Input", "data": "Secure EL1 command parameters; Fast Secure Monitor API parameters ; Google service request API parameters"}, {"physicalPort": "N/A", "logicalInterface": "Data Output", "data": "Secure EL1 return data ; Fast Secure Monitor API return data; Google service request API return data"}, {"physicalPort": "N/A", "logicalInterface": "Control Input", "data": "Secure EL1 commands; Fast Secure Monitor API commands; Google service request API commands, reset signal"}, {"physicalPort": "N/A", "logicalInterface": "Status Output", "data": "Secure EL1 command response codes; Fast Secure Monitor API response codes; Google service request API response codes"}, {"physicalPort": "N/A", "logicalInterface": "Power", "data": "Provides power to the module"}]}, "authentication_methods": {"section": 4, "subsection": 1, "found": false, "entries": []}, "roles": {"section": 4, "subsection": 2, "found": true, "entries": [{"name": "CO", "type": "Role", "operatorType": "Crypto Officer", "authMethodList": "None"}]}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "Initialize", "description": "Module and PSP functions including generate PSP Master Key", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "N/A", "outputs": "Status (success/fail ure of self- tests)", "secFunImpl": "Key Derivatio n", "rolesSspAccess": "CO - Master PSP Keys: W"}, {"name": "Perform self-tests", "description": "Executed automatic ally when powered on", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Reset", "outputs": "Status (success/fail ure of self- tests)", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "Show status", "description": "Status retrieved from the module", "indicator": "Approve d mode indicator (\"Notice: GSP:", "inputs": "N/A", "outputs": "Status (Approved mode indicator/err or indicator)", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "", "description": "", "indicator": "crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": ""}, {"name": "Zeroizatio n", "description": "A module reset zeroises all SSPs", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Reset", "outputs": "N/A", "secFunImpl": "None", "rolesSspAccess": "CO - ICC Entropy Input String: Z - ICC DRBG Seed: Z - ICC DRBG V : Z - ICC DRBG Key: Z - Master PSP Keys: Z - Security Associati on Databas e (SADB) Protectio n keys: Z - PSP Session Keys: Z"}, {"name": "CPU state managem ent", "description": "CPU managem ent instruction (start CPU)", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "start CPU", "outputs": "CPU state", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "Get informatio n (Show Version / Show module's versioning informatio n)", "description": "Print buffer, command buffer", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Get command", "outputs": "Module's firmware version (2.10.0), module identifier (\"imc\")", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "Print buffer managem ent", "description": "Start, stop functions", "indicator": "Approve d mode indicator (\"Notice: GSP:", "inputs": "Start/stop functions/comma nds", "outputs": "N/A", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "", "description": "", "indicator": "crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": ""}, {"name": "Submit request data", "description": "Input of request data", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Request data", "outputs": "N/A", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "Retrieve response data", "description": "Retrieval of response data", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice:", "inputs": "N/A", "outputs": "Response data", "secFunImpl": "None", "rolesSspAccess": "CO"}, {"name": "", "description": "", "indicator": "PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": ""}, {"name": "Generate New PSP Master Key", "description": "To generate a new PSP Master Key (Post- initializatio n) a.k.a. \"Rotate key generation \"", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Key rotation/new key generation request via module API", "outputs": "Newly generated key", "secFunImpl": "Random Number Generati on", "rolesSspAccess": "CO - Master PSP Keys: W - ICC Entropy Input String: W,E - ICC DRBG Seed: G,E - ICC DRBG V : G,E - ICC DRBG Key: G,E"}, {"name": "Derive PSP Keys", "description": "To derive PSP Session Keys", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with", "inputs": "Master PSP Key", "outputs": "PSP Session Key", "secFunImpl": "Key Derivatio n", "rolesSspAccess": "CO - PSP Session Keys: G - Master PSP Keys: G,E"}, {"name": "", "description": "", "indicator": "successf ul completi on of the service", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": ""}, {"name": "Generate DRBG output", "description": "Random bit generation", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Request for random bits", "outputs": "Random bits generated", "secFunImpl": "Random Number Generati on Entropy Source", "rolesSspAccess": "CO - ICC Entropy Input String: G,E - ICC DRBG Seed: G,E - ICC DRBG V : G,E - ICC DRBG Key: R,E"}, {"name": "Perform Firmware Load Test (LCE)", "description": "Firmware load/integr ity test performed by the ICC module for the LCE module", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "N/A", "outputs": "Status (success/fail ure of the self-test)", "secFunImpl": "FW Integrity Check", "rolesSspAccess": "CO"}, {"name": "Encryption", "description": "Used to encrypt SADB and PSP traffic", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Plaintext", "outputs": "Ciphertext", "secFunImpl": "Encrypti on", "rolesSspAccess": "CO - Security Associati on Databas e (SADB) Protectio n keys: E - PSP Session Keys: E"}, {"name": "Hashing", "description": "Used to generate a hash of the input provided", "indicator": "Approve d mode indicator (\"Notice: GSP: crypto self-test passed\" and \"Notice: PSP: activatin g\" logs) combine d with successf ul completi on of the service", "inputs": "Plaintext message", "outputs": "Hash", "secFunImpl": "Hashing", "rolesSspAccess": "CO"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": false, "entries": []}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": true, "entries": [{"mechanism": "Standard passivation applied on the IN762 SoC", "inspectFreq": "None", "inspectGuidance": "None"}]}, "storage_areas": {"section": 9, "subsection": 1, "found": true, "entries": [{"name": "LSM", "description": "Ephemeral storage of SSPs in plaintext", "persistance": "Dynamic"}]}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "Entropy Input", "source": "B227 TRNG", "dest": "LSM", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}, {"name": "Output - 1", "source": "LSM", "dest": "External entity", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}, {"name": "Output - 2", "source": "Random Number Generator", "dest": "External entity", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "Zeroised on reset", "description": "SSPs stored ephemerally are zeroised on resetting the module", "rationale": "SSPs stored ephemerally are zeroised on resetting the module", "operatorId": "Operator Initiated"}, {"method": "Zeroised after writing to the calling application/subsystem", "description": "Automatic zeroisation per the module design", "rationale": "Temporarily stored SSPs are zeroised once no longer used", "operatorId": "Module Initiated"}]}, "self_tests": {"section": 10, "subsection": 1, "found": true, "entries": [{"algorithmOrTest": "AES-CMAC Verification", "testProps": "256 bits", "testMethod": "KAT", "type": "SW/FW Integrity", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "MAC Verify"}]}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "AES-ECB (A7461) - 128 bits", "testProps": "Key Length: 128 bits", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Encrypt", "condition": "On boot"}, {"algorithmOrTest": "AES-ECB (A7461) - 192 bits", "testProps": "Key Length: 192 bits", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Encrypt", "condition": "On boot"}, {"algorithmOrTest": "AES-ECB (A7461) - 256 bits", "testProps": "Key Length: 256 bits", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Encrypt", "condition": "On boot"}, {"algorithmOrTest": "AES-CMAC (A7461)", "testProps": "Key Length: 128 bits", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Generation", "condition": "On boot"}, {"algorithmOrTest": "SHA2-256 (A7461)", "testProps": "256 bits", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Hash", "condition": "On boot"}, {"algorithmOrTest": "Counter DRBG (A7461)", "testProps": "AES CTR (256 bits)", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Generate, Reseed, Instantiate functions", "condition": "On boot"}, {"algorithmOrTest": "Counter DRBG (A2721)", "testProps": "AES CTR (256 bits)", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Generate, Reseed, Instantiate functions", "condition": "On boot"}, {"algorithmOrTest": "LCE Firmware Integrity/Load Test (AES- CMAC 256- bit)", "testProps": "Key Length: 256 bits", "testMethod": "Firmware Integrity/Load Test for the LCE module", "type": "SW/FW Load", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "MAC generation", "condition": "On boot"}, {"algorithmOrTest": "B227 Adaptive Proportion Test (ESV Cert. E137)", "testProps": "Sample size: 1 bit; Min- Entropy: H=50%; Cutoff Value: C=793; Window size:", "testMethod": "SP 800-90B Health Tests", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "[EVM]", "condition": "On boot"}, {"algorithmOrTest": "", "testProps": "w=1024; False positive error rate: Alpha = 2^- 20", "testMethod": "", "type": "", "indicator": "", "details": "", "condition": ""}, {"algorithmOrTest": "B227 Repetition Count Test (ESV Cert. E137)", "testProps": "Sample size: 1 bit; Min- Entropy: H=50%; Cutoff Value: C=41; False positive error rate: Alpha = 2^- 20", "testMethod": "SP 800-90B Health Tests", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "[EVM]", "condition": "On boot"}, {"algorithmOrTest": "KDF SP800- 108 (A7461)", "testProps": "Mode: Counter, PRF: CMAC- AES256", "testMethod": "KAT", "type": "CAST", "indicator": "\"Notice: GSP: crypto self-test passed\"", "details": "Counter Mode", "condition": "On boot"}]}, "error_states": {"section": 10, "subsection": 4, "found": false, "entries": []}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["Conditioning Component Block Cipher Derivation Function SP800-90BA2932", "AES-ECBA7461", "SHA2-256A7461", "AES-CMACA7461", "Counter DRBGA7461", "#A2721", "KDF SP800-108A7461", "#A2932", "#A7461"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": ["5539"]}, "module_prunned_references": {"_type": "Set", "elements": ["5539"]}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": {"_type": "Set", "elements": ["5539"]}, "indirectly_referencing": {"_type": "Set", "elements": ["5539"]}}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": {"_type": "Set", "elements": ["5539"]}, "indirectly_referencing": {"_type": "Set", "elements": ["5539"]}}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "9aa6ad19f732ef9d84d76545a27130a52d157c173771d13a9c32a0a5064e8985", "txt_hash": "a0b35def716de2d5b425ee5443d5f2700099d8de02e5384e8df64903a33f564a", "json_hash": "cd6372499c07d29f235e37c56ce3233f782dc48978d4bb5f270237dc5833ee73"}}}