{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "c6ff2896411f8443", "cert_id": 5565, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Inline Crypto Engine (ICE)", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-10-30", "validation_type": "Initial", "lab": "Acumen Security"}], "vendor_url": "http://www.google.com", "vendor": "Google, LLC", "certificate_pdf_url": null, "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Software/Firmware security: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "SingleChip", "description": "The Inline Crypto Engine (ICE) module is comprised of a sub-chip cryptographic subsystem in the Google IN763 SoC. The module provides a cryptographic engine supporting cryptographic offload for IPsec and PSP protocols. The ICE module processes network infrastructure packets in both the Ingress and Egress directions. In addition to providing the cryptographic primitives for the security protocols it also provides packet integrity authentication and anti-replay protection.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-10-29", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 4}}, "fips_certlike": {"Certlike": {"AES GCM IV 96": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 14, "AES-": 4}, "CAST": {"CAST": 13}}, "constructions": {"MAC": {"CMAC": 1}}}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {"MAC": {"MAC": 5}}, "crypto_protocol": {"IKE": {"IKE": 1}, "IPsec": {"IPsec": 6}}, "randomness": {"RNG": {"RBG": 2}}, "cipher_mode": {"GCM": {"GCM": 19}}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 52}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 8, "FIPS 140": 1}, "NIST": {"SP 800-38B": 1, "SP 800-38D": 5, "SP 800-108": 1, "NIST SP 800-38D": 3, "NIST SP 800-108": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 698334, "pdf_is_encrypted": false, "pdf_number_of_pages": 29, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20261021082222-04'00'", "/ModDate": "D:20261021082222-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["http://csrc.nist.gov/groups/STM/cmvp/index.html"]}}, "module_algorithms": {"_type": "Set", "elements": ["AES-GCMA7629", "AES-CMACA7627", "AES-GMACA7628", "KDF SP800-108A7627"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A7627", "#A7629", "#A7628"]}, "is_br1_format": true, "br1_deviations": 0, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "1"}, {"section": "2", "title": "Cryptographic module specification", "level": "1"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "1"}, {"section": "4", "title": "Roles, services, and authentication", "level": "1"}, {"section": "5", "title": "Software/Firmware security", "level": "N/A"}, {"section": "6", "title": "Operational environment", "level": "1"}, {"section": "7", "title": "Physical security", "level": "1"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "1"}, {"section": "10", "title": "Self-tests", "level": "1"}, {"section": "11", "title": "Life-cycle assurance", "level": "1"}, {"section": "12", "title": "Mitigation of other attacks", "level": "N/A"}, {"section": "", "title": "Overall Level", "level": "1"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": true, "entries": [{"modelPartNum": "IN762 B1, C1 SoC", "hwVersion": "0", "fwVersion": "N/A", "processors": "N/A", "features": "None"}]}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "modes_of_operation": {"section": 2, "subsection": 4, "found": false, "entries": []}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CMAC", "cavpCertName": "A7627", "properties": "Direction - Generation Key Length - 256 MAC Length - MAC Length: 128 Message Length - Message Length: 128", "reference": "SP 800-38B"}, {"algorithm": "AES-GCM", "cavpCertName": "A7627", "properties": "Direction - Decrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 256 Tag Length - 128 IV Length - IV Length: 96 Payload Length - Payload Length: 128, 192, 256, 384, 512, 640, 1024, 2048, 4096, 65536 AAD Length - AAD Length: 64, 96", "reference": "SP 800-38D"}, {"algorithm": "AES-GCM", "cavpCertName": "A7628", "properties": "Direction - Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 256 Tag Length - 128 IV Length - IV Length: 96 Payload Length - Payload Length: 128, 192, 256, 384, 512, 640, 1024, 2048, 4096, 65536 AAD Length - AAD Length: 64, 96", "reference": "SP 800-38D"}, {"algorithm": "AES-GCM", "cavpCertName": "A7629", "properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 256 Tag Length - 128 IV Length - IV Length: 96", "reference": "SP 800-38D"}, {"algorithm": "", "cavpCertName": "", "properties": "Payload Length - Payload Length: 288 AAD Length - AAD Length: 0", "reference": ""}, {"algorithm": "AES-GMAC", "cavpCertName": "A7627", "properties": "Direction - Decrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 256 Tag Length - 128 IV Length - IV Length: 96 AAD Length - AAD Length: 128, 192, 256, 384, 512, 640, 768, 896, 1024, 1152, 1280, 1408, 1536, 1664, 2048, 4096, 8192, 16384, 32768, 65536", "reference": "SP 800-38D"}, {"algorithm": "AES-GMAC", "cavpCertName": "A7628", "properties": "Direction - Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 256 Tag Length - 128 IV Length - IV Length: 96 AAD Length - AAD Length: 128, 192, 256, 384, 512, 640, 768, 896, 1024, 1152, 1280, 1408, 1536, 1664, 2048, 4096, 8192, 16384, 32768, 65536", "reference": "SP 800-38D"}, {"algorithm": "KDF SP800-108", "cavpCertName": "A7627", "properties": "KDF Mode - Counter MAC Mode - CMAC-AES256 Supported Lengths - Supported Lengths: 128-256 Increment 128 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - No Custom Key In Length - 0", "reference": "SP 800-108 Rev. 1"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": false, "entries": []}, "ports_interfaces": {"section": 3, "subsection": 1, "found": true, "entries": [{"physicalPort": "AMBA (On- chip system bus)", "logicalInterface": "Data Input", "data": "Inbound AXI4-Stream Packet data and config packets; Inbound SA entries from DRAM; AXI CSR writes from NMF containing PSP Master Key and Secure SADB Key"}, {"physicalPort": "AMBA (On- chip system bus)", "logicalInterface": "Data Output", "data": "Outbound SA entries to DRAM"}, {"physicalPort": "AMBA (On- chip system bus)", "logicalInterface": "Control Input", "data": "AXI CSR writes from the NMF; Control bits in Ingress packet metadata (PMD) from CXP (crypto packet processor); Control bits in Egress packet metadata (PMD) from FXP (flexible packet processor)"}, {"physicalPort": "AMBA (On- chip system bus)", "logicalInterface": "Status Output", "data": "AXI CSR status output to NMF; Status bits in packet metadata (PMD)"}, {"physicalPort": "Power", "logicalInterface": "Power", "data": "Provides power to the module"}]}, "authentication_methods": {"section": 4, "subsection": 1, "found": false, "entries": []}, "roles": {"section": 4, "subsection": 2, "found": true, "entries": [{"name": "Crypto Officer", "type": "Role", "operatorType": "Crypto Officer", "authMethodList": "None"}]}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "Payload encryption", "description": "Egress packet payload encrypti on for ESP and PSP", "indicator": "Approved mode indicator and successful completion of service", "inputs": "Plaint ext payloa d", "outputs": "Ciphertext", "secFunImpl": "Egress Authenti cated Block Ciper Egress Mesage Authenti cation AES GCM IV Construc tion", "rolesSspAccess": "Crypto Officer - ESP Encrypti on Key: W,E - PSP Encrypti on Key: W,E - ESP Authenti cation Key: W,E - AES GCM IV: G,E"}, {"name": "Payload decryption", "description": "Ingress packet payload decrypti on for ESP and PSP", "indicator": "Approved mode indicator and successful completion of service", "inputs": "Cipher text payloa d", "outputs": "Plaintext", "secFunImpl": "Ingress Authenti cated Block Cipher Ingress Message Authenti cation AES GCM IV Construc tion", "rolesSspAccess": "Crypto Officer - ESP Decrypti on Key: W,E - PSP Decrypti on Key: W,E - ESP Authenti cation Key: W,E - AES GCM IV: G,E"}, {"name": "PSP and ESP Key encryption", "description": "Encrypt PSP and ESP keys", "indicator": "Approved mode indicator and successful completion of service", "inputs": "Keys to be encry pted", "outputs": "Encrypted keys", "secFunImpl": "KTS-1 AES GCM IV Construc tion", "rolesSspAccess": "Crypto Officer - Secure SADB Key: W,E - ESP Encrypti on Key: W,E - PSP Encrypti"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "on Key: W,E - AES GCM IV: G,E"}, {"name": "PSP Key Derivation", "description": "Derive PSP encrypti on key", "indicator": "Approved mode indicator and successful completion of service", "inputs": "PSP Maste r Key", "outputs": "PSP Encryption Key", "secFunImpl": "Key Derivatio n", "rolesSspAccess": "Crypto Officer - PSP Master Key: W,E - PSP Encrypti on Key: G"}, {"name": "Show Status", "description": "Show the current status of the module", "indicator": "Approved mode indicator and successful completion of service; register ICM_FATAL_EC R0.kat_fail set to 0 = Approved mode and register ICM_FATAL_EC R0.kat_fail set to 1 = Hard Error state", "inputs": "N/A", "outputs": "Status (register ICM_FATAL_EC R0.kat_fail set to 0 or register ICM_FATAL_EC R0.kat_fail set to 1 to signify that the module is in the Approved mode and in the Hard Error state respectively)", "secFunImpl": "None", "rolesSspAccess": "Crypto Officer"}, {"name": "Show module's versioning informatio n", "description": "Show module ID and version (identifi er to be correlat ed to name)", "indicator": "Approved mode indicator and successful completion of service", "inputs": "N/A", "outputs": "Hardware version: 0x0000 (decimal: 0); Module ID: 0x494345 (ASCII: ICE)", "secFunImpl": "None", "rolesSspAccess": "Crypto Officer"}, {"name": "Perform Self-Tests", "description": "Perform the pre- operatio nal and conditio nal self- tests", "indicator": "Approved mode indicator and successful completion of service; register ICM_FATAL_EC R0.kat_fail set to 0 = success and register", "inputs": "N/A", "outputs": "KAT indicators", "secFunImpl": "None", "rolesSspAccess": "Crypto Officer"}, {"name": "", "description": "", "indicator": "ICM_FATAL_EC R0.kat_fail set to 1 = failure", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": ""}, {"name": "Perform zeroisatio n", "description": "Zeroise; Clear all SSPs via module reset", "indicator": "Approved mode indicator and successful completion of service; KAT flags not set to 0 = operational; KAT bits set to 0 = Hard Error", "inputs": "Reset signal", "outputs": "Status", "secFunImpl": "None", "rolesSspAccess": "Crypto Officer - Secure SADB Key: Z - ESP Encrypti on Key: Z - ESP Authenti cation Key: Z - PSP Encrypti on Key: Z - PSP Master Key: Z - ESP Decrypti on Key: Z - PSP Decrypti on Key: Z - AES GCM IV: Z"}, {"name": "Initializatio n", "description": "Module initializa tion", "indicator": "Approved mode indicator and successful completion of service", "inputs": "Reset signal", "outputs": "Status of self-test execution at boot, indicator", "secFunImpl": "None", "rolesSspAccess": "Crypto Officer"}, {"name": "Diagnostic functions", "description": "Diagosti c function s perform ed by the module", "indicator": "Approved mode indicator and successful completion of service", "inputs": "-", "outputs": "Diagnosis/results", "secFunImpl": "None", "rolesSspAccess": "Crypto Officer"}, {"name": "Transmit/r eceive plaintext data plane packet", "description": "Plaintex t transmi ssion of packets through the module", "indicator": "Approved mode indicator and successful completion of service", "inputs": "Packe ts", "outputs": "Packets", "secFunImpl": "None", "rolesSspAccess": "Crypto Officer"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": false, "entries": []}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": true, "entries": [{"mechanism": "Standard passivation applied on the IN762 SoC; The SOC/single chip is commercial grade in regard to power and voltage ranges, temperature, reliability, and shock and vibration", "inspectFreq": "None", "inspectGuidance": "None"}]}, "storage_areas": {"section": 9, "subsection": 1, "found": true, "entries": [{"name": "Internal memory (registers, register files, FIFO buffers, SRAM)", "description": "Ephemeral storage in the module's internal memory", "persistance": "Dynamic"}]}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "Output to external DRAM", "source": "Internal memory (registers, register files, FIFO buffers, SRAM)", "dest": "SADB in external DRAM", "format": "Encrypted", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": "KTS-1"}, {"name": "Input from SADB in external DRAM", "source": "SADB in external DRAM during data plane operations", "dest": "Internal memory (registers, register files, FIFO buffers, SRAM)", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "KTS-1"}, {"name": "Input from on- chip SRAM", "source": "On-chip SRAM", "dest": "Internal memory (registers, register files, FIFO buffers, SRAM)", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "KTS-1"}, {"name": "Output to on-chip SRAM", "source": "Internal memory (registers, register files, FIFO buffers, SRAM)", "dest": "On-chip SRAM", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "KTS-1"}, {"name": "Input via CSR write", "source": "Within the SoC, outside the module via a direct internal CSR write", "dest": "Internal memory (registers, register files, FIFO buffers, SRAM)", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "Reset", "description": "All storage points (SRAMs, RFs, Flop) are reset on core reset", "rationale": "Memory is cleared on reset", "operatorId": "Operator Initiation"}]}, "self_tests": {"section": 10, "subsection": 1, "found": true, "entries": [{"algorithmOrTest": "AES-GCM (CAVP Certs. #A7627, #A7628 and A7629) and KDF SP800- 108 (CAVP Cert. A7627) CASTs", "testProps": "256-bits", "testMethod": "CAST", "type": "SW/FW Integrity", "indicator": "register ICM_FATAL_ECR0.kat_fail set to 0", "details": "AES-GCM and KDF SP800-108 CASTs performed in lieu of the pre- operational firmware integrity test in accordance with AS10.19"}]}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "AES- GCM (A7627)", "testProps": "256-bit", "testMethod": "KAT", "type": "CAS T", "indicator": "register ICM_FATAL_ECR0.kat _fail set to 0", "details": "Decrypt", "condition": "On module boot"}, {"algorithmOrTest": "KDF SP800- 108 (A7627)", "testProps": "CMAC 256-bit, Counter mode", "testMethod": "KAT", "type": "CAS T", "indicator": "register ICM_FATAL_ECR0.kat _fail set to 0", "details": "Generate/Ver ify", "condition": "On module boot"}, {"algorithmOrTest": "AES- GCM (A7628)", "testProps": "256-bit", "testMethod": "KAT", "type": "CAS T", "indicator": "register ICM_FATAL_ECR0.kat _fail set to 0", "details": "Encrypt", "condition": "On module boot"}, {"algorithmOrTest": "AES- GCM", "testProps": "256-bit", "testMethod": "KAT", "type": "CAS T", "indicator": "register ICM_FATAL_ECR0.kat _fail set to 0", "details": "Encrypt", "condition": "On module boot"}, {"algorithmOrTest": "(A7629) - Encrypt AES- GCM (A7629) - Decrypt", "testProps": "256-bit", "testMethod": "KAT", "type": "CAS T", "indicator": "register ICM_FATAL_ECR0.kat _fail set to 0", "details": "Decrypt", "condition": "On module boot"}]}, "error_states": {"section": 10, "subsection": 4, "found": true, "entries": [{"name": "Hard Error", "description": "If any of the conditional self- tests fail, the module will return an error code and", "conditions": "Conditional Cryptographic Algorithm Self- Test (CAST) failure (covers the Pre-Operational", "recoveryMethod": "An operator can attempt to reset the state by cycling the power; However, the", "indicator": "register ICM_FATAL_ECR0.kat_fail set to 1"}, {"name": "", "description": "transition to an error state where no functions can be executed", "conditions": "Firmware Integrity Test failure)", "recoveryMethod": "failure of a self-test may require the module to be replaced", "indicator": ""}]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["AES-GCMA7629", "#A7627", "AES-CMACA7627", "AES-GMACA7628", "#A7628", "KDF SP800-108A7627", "#A7629"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "4df66f2f5b088d512c1cb908791d077b2482703a092e38b0d2e59da33fc9fd36", "txt_hash": "acb5ddf88067badc0cb274606218869fa14abf5c00eb7f5856f18fc10916c062", "json_hash": "5aa743e845f023187195cf6597fa29f8075265028ee975297ad48e3674d37061"}}}