Atalla Cryptographic Subsystem (ACS)

Certificate details

Certificate ID	#4992
Status	active
Validation dates	25.03.2025 , 02.09.2025
Sunset date	24-03-2027
Standard	FIPS 140-3
Security level	3
Type	Hardware
Embodiment	Multi-Chip Embedded
Caveat	Interim validation. When installed, initialized and configured as specified in Section 11 of the Security Policy
Exceptions	Operational environment: N/A Non-invasive security: N/A Mitigation of other attacks: N/A
Description	The ACS is a multi-chip embedded cryptographic module. It consists of a secure hardware platform, a firmware secure loader, and three separate microcontrollers, collectively called the Physical Security Monitor Central Unit or PSMCU). The purpose of the cryptographic module is to load Approved (RSA and ECDSA signed) application programs, called "personalities", in a secure manner.
Version (Hardware)	C9B60-2108A[1], C9B60-2108B[2], C9B60-2108C[3], C9B60-2108D[4], and C9B60-2108E[5]
Version (Firmware)	Loader 1.24[1][2][3][4][5], PSMCU 1.0.1[1][2][3] and 1.0.3[3][4][5], CMS-OCT 1.0.0[1][2][3] and 1.0.3[3][4][5], CMS-NTX 1.0.0[1], Loader Stage 1 1.10[1][2][3][4][5], Loader Stage 2 1.20[1][2][3][4][5], Boot 1.23[1][2][3][4][5]
Vendor	Utimaco Inc. http://hsm.utimaco.com
Lab	Leidos Accredited Testing & Evaluation (AT&E) Lab
Algorithms	AES-CBCAES 4600 AES-CCMA2606 Conditioning Component Block Cipher Derivation Function SP800-90BA2606 Counter DRBGA2606 ECDSA SigVer (FIPS186-4)A2606 RSA SigVer (FIPS186-4)A2606 SHA2-512SHS 3776
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES, AES-, AES-256, DES, Triple-DES, CBC-MAC

Asymmetric Algorithms

RSA 4096, RSA 2048, ECDSA, ECC

Hash functions

SHA-1, SHA-256, SHA-512

Schemes

MAC

Randomness

DRBG, RBG

Elliptic Curves

P-521, NIST P-521

Block cipher modes

ECB, CBC, CCM

Trusted Execution Environments

PSP

Security level

Level 3

Standards

FIPS 140-3, FIPS PUB 140, FIPS PUB 197, FIPS PUB 186-4, FIPS 186-4, FIPS 180-4, NIST SP 800-90C, SP 800-38C, SP 800-90B, SP 800-38A, SP 800-38F, SP 800-140F, PKCS#1, PKCS #1, ISO/IEC 24759

Creation date	D:20250829085243-05'00'
Modification date	D:20250829085243-05'00'
Pages	35

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

21.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['AES-CBCAES 4600', 'AES-CCMA2606', 'ECDSA SigVer (FIPS186-4)A2606', 'Conditioning Component Block Cipher Derivation Function SP800-90BA2606', 'RSA SigVer (FIPS186-4)A2606', 'SHA2-512SHS 3776', 'Counter DRBGA2606']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#A2606']}}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__delete__': ['Level 1', 'Level 2']}}}, 'standard_id': {'__update__': {'FIPS': {'__insert__': {'FIPS PUB 140': 1}, '__delete__': ['FIPS PUB 140-3']}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#A2606']} values added.

The state was updated.

The policy property was updated, with the {'txt_hash': 'fedec0ecc6a70b4195c5f7cb1c9ba3a8d5a2e67bd165022efa9796321f064223', 'json_hash': 'c4a939658660b0bd8b353433dda9d2bb7f2b699e55c62292b536f3b5ab938fd4'} data.
20.06.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/March 2025_010425_0326.pdf.
15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated, with the [[1, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2025-09-02', 'validation_type': 'Update', 'lab': 'Leidos Accredited Testing & Evaluation (AT&E) Lab'}]] values inserted.

The caveat property was set to Interim validation. When installed, initialized and configured as specified in Section 11 of the Security Policy.

The hw_versions property was set to C9B60-2108A[1], C9B60-2108B[2], C9B60-2108C[3], C9B60-2108D[4], and C9B60-2108E[5].

The fw_versions property was set to Loader 1.24[1][2][3][4][5], PSMCU 1.0.1[1][2][3] and 1.0.3[3][4][5], CMS-OCT 1.0.0[1][2][3] and 1.0.3[3][4][5], CMS-NTX 1.0.0[1], Loader Stage 1 1.10[1][2][3][4][5], Loader Stage 2 1.20[1][2][3][4][5], Boot 1.23[1][2][3][4][5].

The PDF extraction data was updated.

The policy_metadata property was updated, with the {'pdf_file_size_bytes': 987496, 'pdf_number_of_pages': 35, '/CreationDate': "D:20250829085243-05'00'", '/ModDate': "D:20250829085243-05'00'"} data.

The state was updated.

The policy_pdf_hash property was set to 1a59e89a60d93b5bec62648c7e32a9a7bd6c43ed61495cea117f61ee2861aeec.

The policy_txt_hash property was set to 569c64e934865359ffc1c616bffcf864d2e68d05a2514ef566d8891fe0830afe.
04.04.2025

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4992,
  "dgst": "da2adacc2e9310db",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "Conditioning Component Block Cipher Derivation Function SP800-90BA2606",
        "RSA SigVer (FIPS186-4)A2606",
        "AES-CBCAES 4600",
        "Counter DRBGA2606",
        "ECDSA SigVer (FIPS186-4)A2606",
        "AES-CCMA2606",
        "SHA2-512SHS 3776",
        "#A2606"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1.0.3",
        "1.0.0",
        "1.0.1",
        "1.23",
        "1.10",
        "1.24",
        "1.20"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDSA": {
            "ECDSA": 21
          }
        },
        "RSA": {
          "RSA 2048": 1,
          "RSA 4096": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 5
        },
        "CCM": {
          "CCM": 18
        },
        "ECB": {
          "ECB": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "NIST P-521": 1,
          "P-521": 17
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 4600": 1,
          "AES-256": 2,
          "Cert #AES": 2,
          "PKCS #1": 2,
          "PKCS#1": 2,
          "RSA 2048": 1,
          "RSA 4096": 1,
          "SHA- 512": 1,
          "SHA-1": 1,
          "SHA-256": 1,
          "SHA-512": 7,
          "SHA2- 512": 1,
          "SHA2-512": 8,
          "SHS 3776": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 3": 5
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 1
          },
          "SHA2": {
            "SHA-256": 1,
            "SHA-512": 7
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 29
        },
        "RNG": {
          "RBG": 7
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 9,
          "FIPS 180-4": 1,
          "FIPS 186-4": 6,
          "FIPS PUB 140": 1,
          "FIPS PUB 186-4": 1,
          "FIPS PUB 197": 1
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "NIST SP 800-90C": 1,
          "SP 800-140F": 1,
          "SP 800-38A": 1,
          "SP 800-38C": 1,
          "SP 800-38F": 1,
          "SP 800-90B": 3
        },
        "PKCS": {
          "PKCS #1": 1,
          "PKCS#1": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 12,
            "AES-": 10,
            "AES-256": 2
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 2
          },
          "DES": {
            "DES": 4
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 1
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 4
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "Conditioning Component Block Cipher Derivation Function SP800-90BA2606",
        "RSA SigVer (FIPS186-4)A2606",
        "AES-CBCAES 4600",
        "Counter DRBGA2606",
        "ECDSA SigVer (FIPS186-4)A2606",
        "AES-CCMA2606",
        "SHA2-512SHS 3776"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A2606"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20250829085243-05\u002700\u0027",
      "/ModDate": "D:20250829085243-05\u002700\u0027",
      "pdf_file_size_bytes": 987496,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
          "http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
          "http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90C.3pd.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a.pdf",
          "http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.197.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 35
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "c4a939658660b0bd8b353433dda9d2bb7f2b699e55c62292b536f3b5ab938fd4",
      "source_hash": "1a59e89a60d93b5bec62648c7e32a9a7bd6c43ed61495cea117f61ee2861aeec",
      "txt_hash": "fedec0ecc6a70b4195c5f7cb1c9ba3a8d5a2e67bd165022efa9796321f064223"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation. When installed, initialized and configured as specified in Section 11 of the Security Policy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/March 2025_010425_0326.pdf",
    "date_sunset": "2027-03-24",
    "description": "The ACS is a multi-chip embedded cryptographic module. It consists of a secure hardware platform, a firmware secure loader, and three separate microcontrollers, collectively called the Physical Security Monitor Central Unit or PSMCU). The purpose of the cryptographic module is to load Approved (RSA and ECDSA signed) application programs, called \"personalities\", in a secure manner.",
    "embodiment": "Multi-Chip Embedded",
    "exceptions": [
      "Operational environment: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": "Loader 1.24[1][2][3][4][5], PSMCU 1.0.1[1][2][3] and 1.0.3[3][4][5], CMS-OCT 1.0.0[1][2][3] and 1.0.3[3][4][5], CMS-NTX 1.0.0[1], Loader Stage 1 1.10[1][2][3][4][5], Loader Stage 2 1.20[1][2][3][4][5], Boot 1.23[1][2][3][4][5]",
    "historical_reason": null,
    "hw_versions": "C9B60-2108A[1], C9B60-2108B[2], C9B60-2108C[3], C9B60-2108D[4], and C9B60-2108E[5]",
    "level": 3,
    "mentioned_certs": {},
    "module_name": "Atalla Cryptographic Subsystem (ACS)",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-03-25",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-09-02",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Update"
      }
    ],
    "vendor": "Utimaco Inc.",
    "vendor_url": "http://hsm.utimaco.com"
  }
}

Sections

Atalla Cryptographic Subsystem (ACS)

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Randomness

Elliptic Curves

Block cipher modes

Trusted Execution Environments

Security level

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

Atalla Cryptographic Subsystem (ACS)

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Randomness

Elliptic Curves

Block cipher modes

Device

Trusted Execution Environments

Security

Security level

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data